ECSでGitHub Actionsのセルフホストrunnerを動かす

#!/bin/bash

ACCESS_TOKEN=$ACCESS_TOKEN
ORGANIZATION=$ORGANIZATION
OWNER=$OWNER
REPO=$REPO

if [ -n "$ORGANIZATION" ]; then
  echo "get Organization token"
  REG_TOKEN=$(curl -sX POST -H "Authorization: token ${ACCESS_TOKEN}" https://api.github.com/orgs/${ORGANIZATION}/actions/runners/registration-token | jq .token --raw-output)
  cd /home/docker/actions-runner
  echo "setup Organization Runner"
  ./config.sh --url https://github.com/${ORGANIZATION} --token ${REG_TOKEN}
else
  echo "get Repository token"
  REG_TOKEN=$(curl -sX POST -H "Authorization: token ${ACCESS_TOKEN}" https://api.github.com/repos/${OWNER}/${REPO}/actions/runners/registration-token | jq .token --raw-output)
  cd /home/docker/actions-runner
  echo "setup Repository Runner"
  ./config.sh --url https://github.com/${OWNER}/${REPO} --token ${REG_TOKEN}
fi

cleanup() {
    echo "Removing runner..."
    ./config.sh remove --unattended --token ${REG_TOKEN}
}

trap 'cleanup; exit 130' INT
trap 'cleanup; exit 143' TERM

./run.sh & wait $!

aws ecr get-login-password --region <region> | docker login --username AWS --password-stdin <account id>.dkr.ecr.<region>.amazonaws.com
docker build -t <account id>.dkr.ecr.<region>.amazonaws.com/selfhosted-github-actions-runner:20220615 .
docker push <account id>.dkr.ecr.<region>.amazonaws.com/selfhosted-github-actions-runner:20220615

{
    "containerDefinitions": [
        {
            "environment": [
                {
                    "name": "ACCESS_TOKEN",
                    "value": "ghp_cHaNgEYourgiTHUbAccessTOKEn123456789"
                },
                {
                    "name": "OWNER",
                    "value": "moriryota62"
                },
                {
                    "name": "REPO",
                    "value": "selfhosted-runner-on-ecs"
                }
            ],
            "mountPoints": [
                {
                    "readOnly": null,
                    "containerPath": "/var/run/docker.sock",
                    "sourceVolume": "docker"
                }
            ],
            "cpu": 256,
            "memory": 512,
            "image": "<account id>.dkr.ecr.<region>.amazonaws.com/selfhosted-github-actions-runner:20220615",
            "name": "github-actions-runner",
            "essential": true
        }
    ],
    "cpu": "256",
    "memory": "512",
    "executionRoleArn": "arn:aws:iam::<account id>:role/selfhosted-runner-EcsTaskExecuteRole",
    "taskRoleArn": "arn:aws:iam::<account id>:role/selfhosted-runner-GitHubActionsRole",
    "family": "selfhosted-runner",
    "requiresCompatibilities": [
        "EC2"
    ],
    "inferenceAccelerators": [],
    "volumes": [
        {
            "name": "docker",
            "host": {
                "sourcePath": "/var/run/docker.sock"
            }
        }
    ],
    "placementConstraints": [],
    "tags": []
}

name: Deploy to ECR

on:
  push:
    branches: [main]

jobs:
  deploy:
    name: Deploy
    runs-on: self-hosted

    steps:
      - name: Checkout
        uses: actions/checkout@v2

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: <region>

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v1

      - name: Build, tag, and push image to Amazon ECR
        id: build-image
        env:
          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
          ECR_REPOSITORY: build-test
        run: |
          # Build a docker container and
          # push it to ECR so that it can
          # be deployed to ECS.
          docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:${{ github.sha }} .
          docker push $ECR_REGISTRY/$ECR_REPOSITORY:${{ github.sha }}