Repository navigation
ci: build custom image on github-hosted runner (unblock queued build) - #19
Merged
Merged
Conversation
The arc-runners-prod scale set isn't scoped to this fork, so the job queued forever with no runner. Switch to ubuntu-latest (no ARC scoping) and add setup-qemu for the linux/arm64 leg. Still needs the OIDC trust (repo:Noma-Security/litellm:*) + ecr:PutImage on role/github-actions-region-deploy for the push step. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
3 of 6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Path B for the stuck build: the custom-image workflow queued forever because
arc-runners-prodis not scoped to this fork (job sat inqueuedwith no runner assigned).runs-on: arc-runners-prod→ubuntu-latest(GitHub-hosted, no ARC repo-scoping needed).docker/setup-qemu-actionso thelinux/arm64leg builds via emulation on the hosted runner (arc runners didn't need this).Still required before the push step succeeds
OIDC trust for
repo:Noma-Security/litellm:*onrole/github-actions-region-deploy, andecr:PutImageon thelitellmrepo. Runner access is no longer a blocker.🤖 Generated with Claude Code
Note
Medium Risk
CI-only change, but arm64 builds move to QEMU emulation on hosted runners, which can affect build time, reliability, and image parity versus native ARC builds.
Overview
Unblocks the Noma custom image workflow when ARC prod runners never pick up jobs (e.g. on forks): the build job now runs on
ubuntu-latestinstead ofarc-runners-prod.Because hosted runners are typically amd64-only, the workflow adds
docker/setup-qemu-actionbefore Buildx so the existing multi-arch push (linux/amd64,linux/arm64) can still build the arm64 image via emulation. OIDC/ECR permissions are unchanged; only runner choice and QEMU setup differ.Reviewed by Cursor Bugbot for commit d77daae. Bugbot is set up for automated code reviews on this repo. Configure here.