Files
computer-playbook/compose.yml
T
kevinveenbirkenbachandClaude Opus 4.7 2a023ca6a1 chore(lint): autoformat strict-failure semantics + claude.sh rename
* scripts/lint/autoformat.sh:
  - rename run_sort_claude_settings worker to run_claude (matches the
    renamed scripts/lint/claude.sh).
  - drop the EXIT trap that wiped status_dir; cleanup happens explicitly
    after `wait` returns, so a parallel worker that interrupts the
    parent never races a vanished status dir.
  - each worker now captures its tool's exit code and writes one of
    OK / SKIP / FAIL. Tolerated `expected violations remain`-style exits
    (markdownlint-cli2 rc≤1, ansible-lint rc≤2) still count as OK; only
    real failures count as FAIL.
  - all workers run to completion regardless of individual tool failures
    (so the user always sees the full picture); after the summary, the
    script exits 1 if any worker reported FAIL.
* scripts/lint/sort_claude_settings.sh -> scripts/lint/claude.sh
  (history preserved via git mv); update test_claude_settings_sorted.py
  fix-hint accordingly.

Plus working-tree drift across roles/, group_vars/, inventories/,
requirements/, and .pre-commit-config.yaml accumulated from the
make-test setup phase regenerating generated artefacts during recent
test runs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-09 01:30:49 +02:00

121 lines
3.1 KiB
YAML

---
x-ci-defaults: &ci_defaults
dns:
- ${DNS_IP}
dns_opt:
- ndots:1
# Bare CI/runtime stack. Cache layers in via compose/cache.override.yml.
services:
coredns:
image: coredns/coredns:1.14.3
container_name: infinito-coredns
profiles: ["ci"]
command: ["-conf", "/Corefile"]
volumes:
- ./compose/coredns/Corefile:/Corefile:ro
networks:
default:
ipv4_address: ${DNS_IP}
infinito:
networks:
default:
ipv4_address: ${IP4}
build:
context: .
dockerfile: Dockerfile
network: host
args:
NIX_CONFIG: ${NIX_CONFIG}
image: "${INFINITO_IMAGE}"
pull_policy: "${INFINITO_PULL_POLICY:-never}"
depends_on:
coredns:
condition: service_started
command:
- /sbin/init
- systemd.log_target=console
- systemd.log_level=debug
- systemd.journald.forward_to_console=1
- systemd.journald.max_level_console=debug
stop_signal: SIGRTMIN+3
# systemd needs the host cgroup namespace.
privileged: true
cgroup: host
tmpfs:
- /run
- /run/lock
tty: true
stdin_open: true
container_name: ${INFINITO_CONTAINER:?Source scripts/meta/env/defaults.sh before running docker compose}
restart: "no"
profiles: ["ci"]
# Defaults of 0 map to "unlimited" in dockerd.
mem_limit: ${INFINITO_MEM_LIMIT:-0}
memswap_limit: ${INFINITO_MEMSWAP_LIMIT:-0}
cpus: ${INFINITO_CPUS:-0}
<<: *ci_defaults
volumes:
- /sys/fs/cgroup:/sys/fs/cgroup:rw
- .:/opt/src/infinito
- ${INFINITO_DOCKER_VOLUME:-docker}:${INFINITO_DOCKER_MOUNT:-/var/lib/docker}
- infinito:/var/lib/infinito/
- letsencrypt:/etc/letsencrypt/
environment:
DNS_IP: ${DNS_IP}
DOMAIN: ${DOMAIN}
IP4: ${IP4}
INFINITO_COMPILE: "${INFINITO_COMPILE:-1}"
INFINITO_SRC_DIR: /opt/src/infinito
PYTHONHTTPSVERIFY: "1"
GIT_SSL_NO_VERIFY: "0"
ports:
- "${BIND_IP:-127.0.0.1}:25:25"
- "${BIND_IP:-127.0.0.1}:110:110"
- "${BIND_IP:-127.0.0.1}:143:143"
- "${BIND_IP:-127.0.0.1}:465:465"
- "${BIND_IP:-127.0.0.1}:587:587"
- "${BIND_IP:-127.0.0.1}:993:993"
- "${BIND_IP:-127.0.0.1}:995:995"
- "${BIND_IP:-127.0.0.1}:4190:4190"
- "${BIND_IP:-127.0.0.1}:80:80"
- "${BIND_IP:-127.0.0.1}:443:443"
- "${BIND_IP:-127.0.0.1}:8448:8448"
- "${BIND_IP:-127.0.0.1}:3478-3480:3478-3480/udp"
- "${BIND_IP:-127.0.0.1}:3478-3480:3478-3480"
- "${BIND_IP:-127.0.0.1}:1935:1935"
- "${BIND_IP:-127.0.0.1}:2201:2201"
- "${BIND_IP:-127.0.0.1}:2202:2202"
- "${BIND_IP:-127.0.0.1}:2203:22"
- "${BIND_IP:-127.0.0.1}:33552:33552"
- "${BIND_IP:-127.0.0.1}:48081-48083:48081-48083"
- "${BIND_IP:-127.0.0.1}:48087:48087"
volumes:
docker:
infinito:
letsencrypt:
networks:
default:
driver: bridge
driver_opts:
com.docker.network.driver.mtu: "${INFINITO_OUTER_NETWORK_MTU:-1500}"
ipam:
config:
- subnet: ${SUBNET:-172.30.0.0/24}
gateway: ${GATEWAY:-172.30.0.1}