Cannot checkout a repository hosted on a gitea instance using self-signed certificate (`server certificate verification failed`)

Actions
5

@haydonryan check the solution above, there are two things at play:

  • the host running act-runner must trust the certificate so it can register/communicate with the gitea instance (seems to work fine for you)
  • the containers launched by act-runner, in which the git clone process take place, must trust the certificate - these containers have no knowledge of the host’s trust store - so you must have
    • NODE_EXTRA_CA_CERTS: "/etc/ssl/certs/ca-certificates.crt" in /etc/act-runner/config.yaml
    • valid_volumes: ['/etc/act-runner/ca-certificates.crt'] and options: --mount type=bind,source=/etc/act-runner/ca-certificates.crt,target=/etc/ssl/certs/ca-certificates.crt,readonly in /etc/act-runner/config.yaml

Does this work for you?