feat: customize limits

Re: coop-cloud/recipes-catalogue-json#4

.drone.yml

@@ -3,10 +3,12 @@ kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
   - name: deployment
-    image: decentral1se/stack-ssh-deploy:latest
+    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
     settings:
       host: swarm-test.autonomic.zone
       stack: drone-docker-runner
+      networks:
+       - proxy
       deploy_key:
         from_secret: drone_ssh_swarm_test
       generate_secrets: true
@@ -23,11 +25,17 @@ trigger:
     - master
 ---
 kind: pipeline
-name: recipe release
+name: generate recipe catalogue
 steps:
   - name: release a new version
-    image: thecoopcloud/drone-abra:latest
+    image: plugins/downstream
     settings:
-      command: recipe drone-docker-runner release
-      deploy_key:
-        from_secret: abra_bot_deploy_key
+      server: https://build.coopcloud.tech
+      token:
+        from_secret: drone_abra-bot_token
+      fork: true
+      repositories:
+        - toolshed/auto-recipes-catalogue-json
+
+trigger:
+  event: tag

.env.sample

@@ -4,5 +4,15 @@ DOMAIN=drone-docker-runner.example.com
 LETS_ENCRYPT_ENV=production
 
 DRONE_RPC_HOST=drone.example.com
+# Max concurrent pipeline jobs per runner (default 4). Use 1-2 on small hosts (e.g. 2GB RAM).
+# DRONE_RUNNER_CAPACITY=4
+
+# Optional memory limits for pipeline containers (bytes). Unset = no limit.
+# Example: 629145600 = 600MiB
+# DRONE_MEMORY_LIMIT=
+# DRONE_MEMORY_SWAP_LIMIT=
+
+# Grace period before SIGKILL on stop (default 10s). For long builds use e.g. 1h.
+# DRONE_RUNNER_STOP_GRACE_PERIOD=10s
 
 RPC_SECRET_VERSION=v1

README.md

@@ -12,3 +12,10 @@
 * **Tests**: ?
 * **SSO**: ?
 <!-- endmetadata -->
+
+## Stability tuning
+
+All tuning options are **optional**; defaults keep the previous behaviour so existing deployments work unchanged.
+
+- **Small hosts (e.g. 2GB RAM):** Use a lower capacity, e.g. `DRONE_RUNNER_CAPACITY=2`, and optionally set `DRONE_MEMORY_LIMIT` (and `DRONE_MEMORY_SWAP_LIMIT`) in bytes for pipeline containers.
+- **Long-running builds:** Increase `DRONE_RUNNER_STOP_GRACE_PERIOD` (e.g. `1h`) so pipelines can finish on shutdown.

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: "drone/drone-runner-docker:1.8.1"
+    image: "drone/drone-runner-docker:1.8.4"
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock"
     configs:
@@ -14,9 +14,12 @@ services:
     environment:
       - DRONE_RPC_HOST=${DRONE_RPC_HOST}
       - DRONE_RPC_PROTO=https
-      - DRONE_RUNNER_CAPACITY=4
+      - DRONE_RUNNER_CAPACITY=${DRONE_RUNNER_CAPACITY:-4}
       - DRONE_RUNNER_NAME=drone-docker-runner
       - DRONE_RUNNER_VOLUMES=/var/run/docker.sock:/var/run/docker.sock
+      - DRONE_MEMORY_LIMIT=${DRONE_MEMORY_LIMIT:-}
+      - DRONE_MEMORY_SWAP_LIMIT=${DRONE_MEMORY_SWAP_LIMIT:-}
+    stop_grace_period: ${DRONE_RUNNER_STOP_GRACE_PERIOD:-10s}
     networks:
       - proxy
     healthcheck:
@@ -35,7 +38,7 @@ services:
         - "traefik.http.routers.drone-docker-runner.entrypoints=web-secure"
         - "traefik.http.services.drone-docker-runner.loadbalancer.server.port=3000"
         - "traefik.http.routers.drone-docker-runner.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        - "coop-cloud.${STACK_NAME}.version=1.1.0+1.8.1"
+        - "coop-cloud.${STACK_NAME}.version=1.1.3+1.8.4"
 
 networks:
   proxy: