- Trigger: AutoCoder-Engine workflow run
81 failed on 2026-02-18.
- Symptom:
Cannot connect to the Docker daemon during Build + push image.
- Root cause: runner instability under node
DiskPressure with dind state on ephemeral storage; attempted NFS hostPath for dind state failed due to root-squash chown restrictions.
- Verified failed workflow/job logs from Gitea Actions API (
/repos/{owner}/{repo}/actions/jobs/{job_id}/logs).
- Verified node/pod events showed runner pod evictions (
ephemeral-storage, DiskPressure).
- Attempted dind state on
/mnt/fastdata/... hostPath.
- Result: failed (
chown /var/lib/docker: operation not permitted) due to NFS root-squash.
- Migrated runner dind to rootless image and local persistent hostPath.
- dind image:
docker:27-dind-rootless
- dind command:
dockerd-entrypoint.sh
- dind args:
--data-root=/var/lib/docker
- dind env includes:
DOCKER_TLS_CERTDIR=""XDG_RUNTIME_DIR=/run/dockerDOCKER_HOST=unix:///run/docker/docker.sock
docker-lib volume:
hostPath: /var/lib/gitea-act-runner/docker-lib-rootless
- local path prepared:
- owner
1000:1000
- mode
0700
- A subsequent run failed at
Docker login with:
x509: certificate signed by unknown authority
- Cause: rootless daemon cert lookup needed CA material in rootless cert paths.
- Remediation applied:
- mounted
gitea-registry-ca into
/home/rootless/.config/docker/certs.d/gitea.app.lan/home/rootless/.config/docker/certs.d/gitea.app.lan:3000
- retained existing mount:
/etc/docker/certs.d/gitea.app.lan
- Post-change status:
- rollout successful
- active pod
gitea-act-runner-d4b646966-zp48s 2/2 Running
kubectl rollout status deploy/gitea-act-runner -n gitea => successful.- dind logs show successful daemon init and socket bind:
API listen on /run/docker/docker.sockrunner ... Docker is ready
/mnt/fastdata remains unsuitable for dind Docker data-root in this environment because root-squash blocks required ownership operations.- If local host disk pressure returns, add explicit
ephemeral-storage requests/limits and lifecycle cleanup for stale runner artifacts.