install-docker.yml

name: Install Docker on server

on:
  workflow_dispatch:

jobs:
  install-docker:
    # runs-on: self-hosted
    runs-on: ubuntu-latest
    steps:
      - name: Install Docker and allow runner to use it
        uses: appleboy/ssh-action@master
        with:
          host: ${{ vars.SERVER_HOST }}
          username: ${{ vars.SERVER_USER }}
          key: ${{ secrets.SERVER_SSH_KEY }}
          script: |
            set -e

            sudo apt update
            sudo apt install -y ca-certificates curl gnupg acl

            sudo install -m 0755 -d /etc/apt/keyrings

            if [ ! -f /etc/apt/keyrings/docker.gpg ]; then
              curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
              sudo chmod a+r /etc/apt/keyrings/docker.gpg
            fi

            echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

            sudo apt update
            sudo apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin

            sudo systemctl enable docker
            sudo systemctl start docker

            RUNNER_USER="$(ps -eo user,cmd | awk '/Runner.Listener/ && !/awk/ {print $1; exit}')"

            if [ -z "$RUNNER_USER" ]; then
              RUNNER_USER="${{ vars.SERVER_USER }}"
            fi

            sudo usermod -aG docker "$RUNNER_USER"
            sudo usermod -aG docker deploy || true

            sudo setfacl -m "u:$RUNNER_USER:rw" /var/run/docker.sock
            sudo setfacl -m "u:deploy:rw" /var/run/docker.sock || true

            sudo docker --version
            sudo docker compose version
            ls -l /var/run/docker.sock
            getfacl /var/run/docker.sock