Slim runner image to Alpine, revert hosts/CA cert complexity

ansible/roles/gitea-runner/tasks/main.yml

@@ -1,11 +1,4 @@
 ---
-- name: Resolve Gitea domain to private IP (avoid Cloudflare for internal traffic)
-  lineinfile:
-    path: /etc/hosts
-    line: "{{ ansible_eth0.ipv4.address }} {{ gitea_domain }}"
-    regexp: "{{ gitea_domain }}"
-    state: present
-
 - name: Create gitea-runner data directory
   file:
     path: "{{ gitea_runner_data_dir }}"

runner/Dockerfile

@@ -1,17 +1,14 @@
-FROM ubuntu:24.04
+FROM alpine:3.21
 
-ENV DEBIAN_FRONTEND=noninteractive
-
-RUN apt-get update && apt-get install -y \
+RUN apk add --no-cache \
     ansible \
+    bash \
     curl \
     git \
-    gnupg \
     openssh-client \
     python3 \
-    python3-pip \
-    unzip \
-    && rm -rf /var/lib/apt/lists/*
+    py3-pip \
+    unzip
 
 # Terraform
 RUN curl -fsSL https://releases.hashicorp.com/terraform/1.10.5/terraform_1.10.5_linux_amd64.zip -o terraform.zip \