Files
plex-playlist/docs/GITEA_ACTIONS_TROUBLESHOOTING.md
Cliff Hill d02039a22e
Some checks failed
CICD Start / Sanity and Base Decision (push) Successful in 18s
Runner Canary / Canary Heavy (ubuntu-act-8gb) (push) Has been skipped
Runner Canary / Canary Heavy (ubuntu-act-4gb) (push) Has been skipped
Runner Canary / Canary Burst (ubuntu-act (push) Failing after 11m10s
Runner Canary / Canary (ubuntu-latest) (push) Failing after 12m39s
Runner Canary / Canary (ubuntu-act) (push) Failing after 12m42s
Backend runtime upgraded to Python 3.14 with exact dependency pinning (#57)
Signed-off-by: Cliff Hill <xlorep@darkhelm.org>

## Summary

Upgrades backend runtime baseline and dependency management for issue #10.

### Changes

1. **Python Baseline**: Updated from 3.13 to 3.14
   - Updated `backend/pyproject.toml` requires-python constraint
   - Updated `backend/pyrightconfig.json` pythonVersion
   - Updated all Dockerfile and CI references

2. **Dependency Pinning**: Switched to exact version pins in `backend/pyproject.toml`
   - All dev and runtime dependencies now use `==` instead of `>=`
   - `fastapi==0.120.2`, `uvicorn==0.38.0`
   - ruff, pyright, pytest suite pinned to current resolved versions
   - Regenerated `backend/uv.lock` under Python 3.14

3. **Startup Compatibility Guard** (TDD via RED→GREEN)
   - New `compatibility_status()` function evaluates runtime and pinned deps
   - Startup raises `RuntimeError` if policy fails
   - Implemented via FastAPI lifespan (non-deprecated) handler

4. **Compatibility Status Endpoint**
   - New `GET /compatibility` returns policy status, runtime version, and package checks
   - Shares single source of truth with startup validation

5. **Integration Tests**
   - Added failing-then-passing tests for startup guard and endpoint behavior
   - 100% coverage maintained

6. **Direnv Configuration**
   - Added `UV_PYTHON="3.14"` pin to repo `.envrc`
   - Ensures direnv creates/recreates venv with correct Python version

### Validation

-  ruff format/check
-  pyright strict (0 errors)
-  pytest: 8 passed, 100% coverage (>=95 gate)
-  pydoclint: pass
-  xdoctest: pass

### Notes

- SQLAlchemy/SQLModel introduction deferred to next pass per scope
- Compatibility logic currently validates fastapi/uvicorn pins (runtime deps)
- Ready for container build validation and Renovate bot testing

Co-authored-by: copilotcoder <copilotcoder@darkhelm.org>
Reviewed-on: #57
Co-authored-by: Cliff Hill <xlorep@darkhelm.org>
Co-committed-by: Cliff Hill <xlorep@darkhelm.org>
2026-06-18 11:19:24 -04:00

5.8 KiB

Gitea Actions Troubleshooting Guide

This document contains solutions to common issues with Gitea Actions CI/CD pipeline.

Critical Issue: Jobs Stuck in "Waiting" State Forever

Symptoms

  • Workflows are created but jobs show "Waiting" indefinitely
  • Runners are online and healthy
  • No tasks appear in action_task database table
  • Jobs get cancelled immediately (0-second duration)
  • UI shows "Waiting" but database shows status 5 (cancelled)

Root Cause

Docker syntax in runs-on labels causes Gitea Actions to immediately cancel jobs.

Problem Syntax (BROKEN)

jobs:
  setup:
    runs-on: ubuntu-latest:docker://ubuntu:22.04
  backend:
    runs-on: python-latest:docker://python:3.14-slim
  frontend:
    runs-on: node-latest:docker://node:20-bookworm-slim

Solution Syntax (WORKING)

jobs:
  setup:
    runs-on: ubuntu-latest
  backend:
    runs-on: python-latest
  frontend:
    runs-on: node-latest

Why This Works

The runners are configured with Docker images in their labels:

GITEA_RUNNER_LABELS=ubuntu-latest:docker://ubuntu:22.04,node-latest:docker://node:20-bookworm-slim,python-latest:docker://python:3.14-slim

So jobs still run in the correct Docker containers, but Gitea can properly parse and dispatch them.

Diagnosis Steps

  1. Check if new runs are created:
SELECT id, status, title FROM action_run ORDER BY id DESC LIMIT 3;
  1. Check job status and duration:
SELECT arj.id, arj.job_id, arj.status, ar.created, ar.updated, (ar.updated - ar.created) as duration_seconds
FROM action_run_job arj
JOIN action_run ar ON arj.run_id = ar.id
WHERE ar.id = (SELECT MAX(id) FROM action_run);
  1. Check if tasks are created:
SELECT * FROM action_task ORDER BY id DESC LIMIT 5;
  1. Verify runners are online:
SELECT id, name, last_online, agent_labels FROM action_runner WHERE last_online > (EXTRACT(epoch FROM NOW()) - 300)::bigint;

Key Indicators

  • Duration = 0 seconds → Immediate cancellation due to syntax issue
  • Empty action_task table → Jobs never converted to executable tasks
  • Status 5 jobs with Status 7 dependents → Setup job cancelled, others skipped

Test Procedure

Create a minimal test workflow to isolate issues:

# .gitea/workflows/test-simple.yml
name: Simple Test
on: push
jobs:
  test:
    name: Simple Test
    runs-on: ubuntu-latest
    steps:
      - name: Echo
        run: echo "Hello World"

If this works but your main workflow doesn't, the issue is likely syntax-related.

Other Common Issues

Cache/UI Synchronization Problems

If UI shows different status than database:

  1. Restart Gitea: docker compose restart server
  2. Clear browser cache
  3. Check database vs UI status discrepancies

Stuck Runs from Previous Sessions

Clean up stuck runs:

-- Clear stuck pending jobs
UPDATE action_run_job SET status = 5 WHERE status IN (1, 2);
UPDATE action_run SET status = 5 WHERE status IN (1, 2);

Runner Registration Issues

If runners show "unregistered runner" errors:

  1. Delete runner registrations: DELETE FROM action_runner;
  2. Restart all runner containers
  3. Let them auto-register with fresh state

Infrastructure Overview

Current Setup

  • Gitea Server: Docker container with PostgreSQL backend
  • Runners: 8 Raspberry Pi runners across 4 servers
    • pi-desktop: Pi 400 4GB (2 runners)
    • kankali: Pi with local Gitea (2 runners)
    • urtzul: Pi 4B 8GB (2 runners)
    • zhokq: Pi 4B 8GB (2 runners)

Runner Configuration

Each runner supports multiple Docker environments:

  • ubuntu-latestubuntu:22.04
  • python-latestpython:3.14-slim
  • node-latestnode:20-bookworm-slim
  • ubuntu-actcatthehacker/ubuntu:act-latest

Mirroring the ubuntu-act Runner Image

If GHCR pulls are flaky, mirror the runner image into your local registry and point the label at that mirror instead of the upstream tag.

Example mirror flow:

docker pull ghcr.io/catthehacker/ubuntu:act-latest
docker tag ghcr.io/catthehacker/ubuntu:act-latest kankali.darkhelm.lan:3001/darkhelm.org/act-ubuntu:act-latest
docker push kankali.darkhelm.lan:3001/darkhelm.org/act-ubuntu:act-latest

Recommended runner label once mirrored:

GITEA_RUNNER_LABELS=ubuntu-latest:docker://ubuntu:22.04,node-latest:docker://node:20-bookworm-slim,python-latest:docker://python:3.14-slim,ubuntu-act:docker://kankali.darkhelm.lan:3001/darkhelm.org/act-ubuntu:act-latest

If you want a failover strategy, keep the cached image tagged in the local registry and only refresh it when the upstream digest changes. That way the runner never depends on GHCR at job start.

Automation scripts for this workflow live in scripts/gitea-actions/:

  • scripts/gitea-actions/repair_runner_mirror.xsh Repairs the mirror by pulling from GHCR, tagging/pushing to local registry, and verifying tag presence on each runner host.

  • scripts/gitea-actions/check_runner_images.xsh Verifies host-by-host image presence for both upstream (GHCR) and mirrored (MIRROR) tags.

Run from repository root (xonsh):

source scripts/gitea-actions/repair_runner_mirror.xsh
source scripts/gitea-actions/check_runner_images.xsh

Workflow Design

Multi-stage pipeline with artifact passing:

  1. Setup: Checkout code, create artifacts
  2. Parallel Setup: Backend (Python/uv) + Frontend (Node.js/Yarn)
  3. Parallel Tests: Backend tests + Frontend tests

Lessons Learned

  1. Gitea Actions syntax is stricter than GitHub Actions
  2. Runner labels must match exactly - no Docker syntax in workflow files
  3. Database debugging is essential - UI can show cached/incorrect status
  4. Job cancellation happens immediately for syntax errors
  5. Empty action_task table is the key indicator of dispatch failure

Last updated: June 2, 2026 Issue resolved after extensive database-level debugging and syntax isolation