viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[forgejo] Drop the FORGEJO__packages__CHUNKED_UPLOAD_PATH override

Browse source 
Setting it to /data/tmp/package-upload triggers a CrashLoopBackOff
because /data is the volume mount root and is owned by root, not
the forgejo user (uid 1000) — Forgejo can't `mkdir /data/tmp`.

The default value resolves under the AppDataPath (a subdir Forgejo
itself owns) which works fine. Keep the ENABLED=true override; v11
ships packages on but explicit is safer.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-05-07 16:44:37 +00:00
parent d67e8ddaf8
commit 3fb05825d8
1 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

11
stacks/forgejo/main.tf
View file

@ -108,16 +108,15 @@ resource "kubernetes_deployment" "forgejo" {
} }
# OCI registry (container packages). Default-on in Forgejo v11 but # OCI registry (container packages). Default-on in Forgejo v11 but
# explicit so it can't be silently disabled by an upstream config # explicit so it can't be silently disabled by an upstream config
# change. Chunked-upload path needs a directory inside /data so it # change. CHUNKED_UPLOAD_PATH defaults to `data/tmp/package-upload`
# survives pod restarts and shares the same PVC as the registry blobs. # under Forgejo's AppDataPath (resolves to a writable subdir of
# /data/gitea/) — overriding to /data/tmp directly hits a perms
# issue because /data is the volume mount root and is not chowned
# to the forgejo user.
env { env {
name = "FORGEJO__packages__ENABLED" name = "FORGEJO__packages__ENABLED"
value = "true" value = "true"
} }
env {
name = "FORGEJO__packages__CHUNKED_UPLOAD_PATH"
value = "/data/tmp/package-upload"
}
volume_mount { volume_mount {
name = "data" name = "data"
mount_path = "/data" mount_path = "/data"