Configure actions-runner MTU

[bo0tzz]

No description provided.

[github-actions]

--- kubernetes/apps/actions-runner/runners Kustomization: flux-system/actions-runners HelmRelease: actions-runners/actions-runner-set

+++ kubernetes/apps/actions-runner/runners Kustomization: flux-system/actions-runners HelmRelease: actions-runners/actions-runner-set

@@ -26,14 +26,12 @@

     keepHistory: false
   upgrade:
     cleanupOnFail: true
     remediation:
       retries: 3
   values:
-    containerMode:
-      type: dind
     controllerServiceAccount:
       name: actions-runner-controller-gha-rs-controller
       namespace: actions-controller
     githubConfigSecret: actions-controller-github-auth
     githubConfigUrl: https://github.com/immich-app
     maxRunners: 3
@@ -41,10 +39,66 @@

     runnerScaleSetName: mich
     template:
       spec:
         containers:
         - command:
           - /home/runner/run.sh
+          env:
+          - name: DOCKER_HOST
+            value: unix:///run/docker/docker.sock
+          - name: RUNNER_WAIT_FOR_DOCKER_IN_SECONDS
+            value: '120'
           image: ghcr.io/immich-app/actions-runner:main
           imagePullPolicy: Always
           name: runner
+          volumeMounts:
+          - mountPath: /home/runner/_work
+            name: work
+          - mountPath: /run/docker
+            name: dind-sock
+            readOnly: true
+        - args:
+          - dockerd
+          - --host=unix:///run/docker/docker.sock
+          - --group=$(DOCKER_GROUP_GID)
+          env:
+          - name: DOCKER_GROUP_GID
+            value: '123'
+          image: docker:dind
+          name: dind
+          securityContext:
+            privileged: true
+          volumeMounts:
+          - mountPath: /home/runner/_work
+            name: work
+          - mountPath: /run/docker
+            name: dind-sock
+          - mountPath: /home/runner/externals
+            name: dind-externals
+          - mountPath: /etc/docker/daemon.json
+            name: daemon-json
+            readOnly: true
+            subPath: daemon.json
+        initContainers:
+        - args:
+          - -r
+          - -v
+          - /home/runner/externals/.
+          - /home/runner/tmpDir/
+          command:
+          - cp
+          image: ghcr.io/immich-app/actions-runner:main
+          name: init-dind-externals
+          volumeMounts:
+          - mountPath: /home/runner/tmpDir
+            name: dind-externals
+        volumes:
+        - emptyDir: {}
+          name: work
+        - emptyDir: {}
+          name: dind-sock
+        - emptyDir: {}
+          name: dind-externals
+        - configMap:
+            name: docker-daemon-config
+          name: daemon-json
 
--- kubernetes/apps/actions-runner/runners Kustomization: flux-system/actions-runners ConfigMap: actions-runners/docker-daemon-config

+++ kubernetes/apps/actions-runner/runners Kustomization: flux-system/actions-runners ConfigMap: actions-runners/docker-daemon-config

@@ -0,0 +1,16 @@

+---
+apiVersion: v1
+data:
+  daemon.json: |-
+    {
+      "mtu": 1450
+    }
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/name: actions-runners
+    kustomize.toolkit.fluxcd.io/name: actions-runners
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: docker-daemon-config
+  namespace: actions-runners
+

[github-actions]

--- HelmRelease: actions-runners/actions-runner-set AutoscalingRunnerSet: actions-runners/mich

+++ HelmRelease: actions-runners/actions-runner-set AutoscalingRunnerSet: actions-runners/mich

@@ -24,61 +24,68 @@

   minRunners: 1
   template:
     spec:
       restartPolicy: Never
       serviceAccountName: mich-gha-rs-no-permission
       initContainers:
-      - name: init-dind-externals
-        image: ghcr.io/immich-app/actions-runner:main
-        command:
-        - cp
-        args:
+      - args:
         - -r
         - -v
         - /home/runner/externals/.
         - /home/runner/tmpDir/
+        command:
+        - cp
+        image: ghcr.io/immich-app/actions-runner:main
+        name: init-dind-externals
         volumeMounts:
-        - name: dind-externals
-          mountPath: /home/runner/tmpDir
+        - mountPath: /home/runner/tmpDir
+          name: dind-externals
       containers:
       - name: runner
         command:
         - /home/runner/run.sh
         image: ghcr.io/immich-app/actions-runner:main
         imagePullPolicy: Always
         env:
         - name: DOCKER_HOST
           value: unix:///run/docker/docker.sock
         - name: RUNNER_WAIT_FOR_DOCKER_IN_SECONDS
           value: '120'
         volumeMounts:
-        - name: work
-          mountPath: /home/runner/_work
-        - name: dind-sock
-          mountPath: /run/docker
+        - mountPath: /home/runner/_work
+          name: work
+        - mountPath: /run/docker
+          name: dind-sock
           readOnly: true
-      - name: dind
-        image: docker:dind
-        args:
+      - args:
         - dockerd
         - --host=unix:///run/docker/docker.sock
         - --group=$(DOCKER_GROUP_GID)
         env:
         - name: DOCKER_GROUP_GID
           value: '123'
+        image: docker:dind
+        name: dind
         securityContext:
           privileged: true
         volumeMounts:
-        - name: work
-          mountPath: /home/runner/_work
-        - name: dind-sock
-          mountPath: /run/docker
-        - name: dind-externals
-          mountPath: /home/runner/externals
+        - mountPath: /home/runner/_work
+          name: work
+        - mountPath: /run/docker
+          name: dind-sock
+        - mountPath: /home/runner/externals
+          name: dind-externals
+        - mountPath: /etc/docker/daemon.json
+          name: daemon-json
+          readOnly: true
+          subPath: daemon.json
       volumes:
-      - name: dind-sock
-        emptyDir: {}
-      - name: dind-externals
-        emptyDir: {}
-      - name: work
-        emptyDir: {}
+      - emptyDir: {}
+        name: work
+      - emptyDir: {}
+        name: dind-sock
+      - emptyDir: {}
+        name: dind-externals
+      - configMap:
+          name: docker-daemon-config
+        name: daemon-json