pkgs/default.nix

@@ -20,4 +20,5 @@ with final; {
   ps-signal-desktop = writeShellScriptBin "signal-desktop" (import ./ps-signal-desktop.nix final);
 
   scan2paperless = writeShellScriptBin "scan2paperless" (import ./scan2paperless.nix final);
+  drone-docker-runner = writeShellScriptBin "drone-docker-runner" (import ./drone-docker-runner.nix final);
 }

pkgs/drone-docker-runner.nix

@@ -0,0 +1,32 @@
+self: with self; ''
+  case $1 in
+    start)
+      ${self.docker}/bin/docker run --detach \
+        --volume=/var/run/docker.sock:/var/run/docker.sock \
+        --env=DRONE_RPC_PROTO=$DRONE_RPC_PROTO \
+        --env=DRONE_RPC_HOST=$DRONE_RPC_HOST \
+        --env=DRONE_RPC_SECRET=$(${self.libsecret}/bin/secret-tool lookup drone rpc-secret) \
+        --env=DRONE_RUNNER_CAPACITY=4 \
+        --env=DRONE_RUNNER_NAME=$(${self.inetutils}/bin/hostname) \
+        --publish=3000:3000 \
+        --restart=always \
+        --name=drone-runner \
+        drone/drone-runner-docker:1
+      ;;
+
+    stop)
+      ${self.docker}/bin/docker stop drone-runner
+      ${self.docker}/bin/docker rm drone-runner
+      ;;
+
+    logs)
+      ${self.docker}/bin/docker logs drone-runner
+      ;;
+
+    *)
+      echo "Usage: drone-docker-runner <start|stop|logs>"
+      exit 1;
+      ;;
+  esac
+
+''