chore: remove jekyll and bundler install

.gitea/workflows/build.yml

@@ -1,23 +1,42 @@
-on: push
+name: Build Docker Image
+
+on:
+  push:
+    # Only build on tags (like v1.0.0)
+    tags:
+      - "v*"
+
 jobs:
   build-docker:
     runs-on: ubuntu-latest
     container:
       image: catthehacker/ubuntu:act-latest
+
     steps:
+      # 1. Checkout the repo
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      # 2. Set up Docker Buildx
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Login to DockerHub
+      # 3. Log in to your registry
+      - name: Login to Docker registry
         uses: docker/login-action@v3
         with:
           registry: git.comprofix.com
           username: ${{ secrets.REGISTRY_USERNAME }}
           password: ${{ secrets.REGISTRY_TOKEN }}
 
-      - name: Build and push
+      # 4. Build and push Docker image
+      - name: Build and push Docker image
         uses: docker/build-push-action@v6
         with:
           file: ./Dockerfile
           push: true
-          tags: git.comprofix.com/mmckinnon/debian-runner:latest
+          tags: |
+            git.comprofix.com/mmckinnon/debian-runner:latest
+            git.comprofix.com/mmckinnon/debian-runner:${{ github.ref_name }}

Dockerfile

@@ -1,42 +1,48 @@
-# Base image
+##############################
+# Stage 1: Builder
+##############################
+FROM debian:trixie-slim AS builder
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    curl \
+    ca-certificates \
+    python3 \
+    python3-venv \
+    python3-pip \
+    ruby-full \
+    nodejs \
+    git \
+ && rm -rf /var/lib/apt/lists/*
+
+# Create a Python virtual environment (example usage)
+RUN python3 -m venv /opt/venv
+
+##############################
+# Stage 2: Runtime
+##############################
 FROM debian:trixie-slim
 
-# Set environment variables
-ENV DEBIAN_FRONTEND=noninteractive \
-    LANG=C.UTF-8 \
-    PATH=/usr/local/bundle/bin:$PATH
+ENV DEBIAN_FRONTEND=noninteractive
 
-# Install dependencies
+# Install only runtime dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    curl \
-    git \
-    bash \
-    openssh-client \
-    python3 \
-    python3-pip \
-    build-essential \
-    zlib1g-dev \
-    libffi-dev \
-    libssl-dev \
     ca-certificates \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install Node.js 22
-RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
-    && apt-get install -y nodejs \
-    && npm install -g npm
-
-# Install Ansible via pip
-RUN pip3 install --no-cache-dir ansible
-
-# Install Ruby and Jekyll
-RUN apt-get update && apt-get install -y --no-install-recommends \
+    python3 \
     ruby-full \
-    && gem install bundler jekyll \
+    nodejs \
+    git \
  && rm -rf /var/lib/apt/lists/*
 
-# Create workspace
+# Copy built tools from builder
+COPY --from=builder /opt/venv /opt/venv
+
+# Set Python virtual environment path
+ENV PATH="/opt/venv/bin:$PATH"
+
 WORKDIR /workspace
 
-# Default shell
-SHELL ["/bin/bash", "-c"]
+CMD ["bash"]

renovate.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    "renovatebot/renovate-config",
+    ":semanticCommitTypeAll(chore)"
+  ],
+  "automerge": true,
+  "automergeType": "branch",
+  "automergeStrategy": "rebase",
+  "commitBodyTable": true,
+  "ignoreTests": true,
+  "major": {
+    "automerge": false,
+    "dependencyDashboardApproval": true,
+    "commitMessagePrefix": "chore(deps-major): ",
+    "labels": ["dependencies", "breaking"]
+  }
+}