init commit. protected runner data

.gitignore

@@ -0,0 +1 @@
+*.runner

docker-compose.yml

@@ -0,0 +1,15 @@
+services:
+  runner-rust:
+    image: gitea-runner-rust
+    build: /home/basta/gitea-runners/dockerfiles/rust
+    container_name: rust-runner-gitea
+    volumes:
+      - gitea-runner-data:/data                        # named volume, has your .runner registration
+      - /home/basta/gitea-runners/rust-data/config.yml:/data/config.yml # your config override
+      - /var/run/docker.sock:/var/run/docker.sock      # docker socket
+    network_mode: host
+    restart: unless-stopped
+
+volumes:
+  gitea-runner-data:
+    external: true   # tells compose this volume already exists, don't recreate it

dockerfiles/rust/Dockerfile

@@ -0,0 +1,32 @@
+FROM gitea/act_runner:latest
+USER root
+
+# Node for actions/checkout
+RUN apk add --no-cache nodejs npm
+
+# Rust build dependencies
+RUN apk add --no-cache \
+    curl wget git \
+    build-base \
+    pkgconfig \
+    openssl-dev \
+    musl-dev \
+    bash
+
+# Install Rust using bash explicitly
+RUN wget -qO- https://sh.rustup.rs | bash -s -- -y
+ENV PATH="/root/.cargo/bin:${PATH}"
+
+# Common targets
+RUN /root/.cargo/bin/rustup target add \
+    thumbv6m-none-eabi \
+    thumbv7em-none-eabihf \
+    thumbv8m.main-none-eabihf \
+    x86_64-unknown-linux-musl
+
+# Rust components
+RUN /root/.cargo/bin/rustup component add \
+    clippy rustfmt rust-docs
+
+# cargo-audit for security checks
+RUN /root/.cargo/bin/cargo install cargo-audit

rust-data/config.yml

@@ -0,0 +1,13 @@
+runner:
+  fetch_timeout: 5m
+  fetch_interval: 2s
+
+cache:
+  enabled: false
+
+container:
+  network: host
+  docker_host: "-"
+
+host:
+  workdir_parent: /tmp/runner-workdir