If you’re like me, you probably need to update your image tag to this new major version. I’ll probably wait for a minor release first.

  • chaospatterns@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    16 days ago

    15.0 adds support for OIDC tokens being handed to Actions workflows compatible with GitHub Actions. I was excited to upgrade because I wanted to continue doing cosign Docker image signing, but then I found out that the Cosign transparency log doesn’t support Forgejo. Looks like I need an alternative.

    My next biggest problem is the Actions workflow itself. I setup Docker in Docker, but turns out there’s a bit of work in preparing the runners to be on par with what I used on GitHub.

    Otherwise, I’ve found Forgejo to be quite good and almost all my private repos are moved over.

  • GarboDog@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    16 days ago

    This is the first time we’re hearing of this, what is Forgejo/ what’s it used for??

  • galaxy_nova@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    16 days ago

    Thoughts on this versus tangled besides this being more mature? Also question, I have cloudflare serving as my ddns, I believe some settings I have configured there prevent ssh from working to my forgejo instance. Is it a security risk to allow ssh traffic properly? I have other services on the same subdomain published as well if that matters.

    Edit: would Tailscale be a solution here?

    • Encrypt-Keeper@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      16 days ago

      Tangled seems to focus on the “social” aspect by being inherently federated using the protocol Bluesky uses.

      Federation is in the works for Forgejo but it’s not a focus.

    • purplemonkeymad@programming.dev
      link
      fedilink
      English
      arrow-up
      1
      ·
      16 days ago

      Recommendation would be that you want to set up your ssh so that it only accepts publickey authentication. You also want to make sure you are not using a proxied DNS value, as CF only proxies http requests.

      Personally I didn’t bother to setup ssh access as https typically works fine.

      • galaxy_nova@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        16 days ago

        I setup ssh key access only on all my machines so that bit is ok. Maybe I’ll forgo ssh like you’re suggesting as well. I thought I had some use for it but it’s been a while since I was messing with my forgejo instance, I’ve kind of fallen back to GitHub and codeberg for a bit since I’ve been busy. I couldn’t get https cloning to work for some reason either so I neee to investigate that I guess.

    • ikidd@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      5
      ·
      16 days ago

      It might be OK now, but for a while there before they hard forked, you set yourself up for issues if you updated majors without being aware of breaking changes.

    • Encrypt-Keeper@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      16 days ago

      Forgejo was initially a soft fork of Gitea but they knew it would very possibly become a hard fork. Using the latest tag meant your setup could break unexpectedly so I think they’d opted to not use it at all. What you want to do is use the full version “15” in this case which will keep it updated up the currently major release.