Level 3 — Special environments · wrap-up
Cheat sheet & self-check
Every command from this section on one page.
09 · The air-gapped port
Server & runner
app.ini: [actions] ENABLED = true | Enable Actions (on by default in recent Gitea versions) |
act_runner register --instance https://git.internal --token <token> | Register a Gitea runner (token from the admin/org/repo settings) |
act_runner daemon | Start the runner |
forgejo-runner register / forgejo-runner daemon | The Forgejo equivalent |
.gitea/workflows/ or .forgejo/workflows/ | Workflow folders (.github/workflows is also read by Gitea) |
Offline dependencies
Mirror actions repos into the internal forge | uses: resolves to your mirrors (DEFAULT_ACTIONS_URL setting) |
Internal registry (e.g. Harbor) + pull-through/replication | Base images and build output |
Package mirrors (apt/rpm, PyPI, npm, Go, Maven) | Builds never reach the internet |
Trivy offline DB, cosign with keys | Scanning and signing without public services |