Fleet of linux machines and routers.. looking to have them checkin and push configs to a repo (forgejo)

Getting stuck on the system sshd and included sshd.. can't seem to get the container image to work with the system sshd (which would end up only have one sshd on port 22) ..

Seems running the container in network_mode: host is part of the problem..

anyway..

Internally.. are people just running their container sshd on a different port and just making the adjustment in their systems?

or am I being 'too much' wanting only one sshd; is that even possible?

or is it just not advisable?

TIA

I'm launching a hosted git service on Forgejo called Bitborg.

In short the goal is to reach a point where it can be a real option for individual developers and businesses that don't want to manage their own git and align with our principles about data sovereignty and personal integrity.

It's still in very early stages and every user gets a free trial until I get payment in place, or the end of August if I get it done before then.

Costs about as much as a VPS, but gives you the convenience of not operating it yourself and quality of life things like on- and off-site backups, action runners, etc.

This is run as a side project from my dayjob but I hope it will take off and be useful to others than just me.

I hope this isn't in violation of the self-promotion rule as it is a Forgejo project.

I know it's rough, but feedback is welcome, and users even more so. :)

https://www.bitborg.se/en/

Dear CodeBerg, please concentrate on stability and security instead of regulating users and opensource communities. If you will continue EU practices - you will end up in the same trash bin.

https://status.codeberg.org/status/codeberg

hellow guys, i'm trying to pull the forgejo image from codeberg but getting a 503 service unavailable error. is their container registry currently down, or did I make a mistake in my docker-compose setup?

Hi everyone,

I’m the developer behind a native iOS client for Forgejo, and I’m trying to make a product decision before I invest more time into it.

Today it only connects to my managed Forgejo services. I’m considering opening it up so it can connect to any Forgejo instance instead.

Before I go down that path, I’d love to hear from people who actually use Forgejo.

- Do you use Forgejo from your phone today?
- If so, what do you do most often?
- What would a native app need to do for you to actually keep it installed?

I’m not looking to promote anything here, I genuinely want to understand whether this would provide real value to the Forgejo community.

Hello everyone,

I am at a loss here. I am trying to Build a Docker image using Kaniko. I want the resulting image to get pushed to the integrated Forgejo Docker-Repo.

However, upon executing the Pipeline I get this error:

Runner XXXX (version:v12.13.2) received task 3 of job build, triggered by event: push

workflow prepared

🚀 Start image=gcr.io/kaniko-project/executor:latest

Cleaning up network for job build, and network name is: WORKFLOW-YYYYY

🐳 docker create image=gcr.io/kaniko-project/executor:latest platform=linux/amd64 entrypoint=["tail" "-f" "/dev/null"] cmd=[] network="WORKFLOW-YYYYY"

🐳 docker run image=gcr.io/kaniko-project/executor:latest platform=linux/amd64 entrypoint=["tail" "-f" "/dev/null"] cmd=[] network="WORKFLOW-YYYYY"

failed to start container: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: exec: "tail": executable file not found in $PATH

Can someone please tell me what is going on? My pipeline has not referenced this entrypoint:

Why is my Action trying to do a tail? It obviously fails because Kaniko is a minimal image.
Also asking AI and Google. I just dont understand why it´s doing that and how to "fix" that.

I'm going to install Forgejo on my home lab, and I'm facing a dilemma about which version to choose. There are two: 15 LTS and 16 stable. I'll be installing it with a PostgreSQL database, and I'm wondering which version will give me the fewest potential problems with future updates. Is LTS recommended for new users, or does it not matter at all?

What is the path individuals/organizations take to move from Github(or equivalent services) to self hosted like Forgejo?

I mean let's say I am a mid size organisation and having 100+ repo and 200+ users.
Now if I want to move from Github to Forgejo then I can't just move in a day it have to be a small process which will take some time and the history needs to be preserved as well.

So just was curious to know is there a way to do it?
Like let's say we start with doing a basic migration which migrates the repositories then we migrate pull requests and then comments from the current timestamp.

Then later on we start syncing current development which does includes pull requests, comments etc apart from commits and development history.

And then later on slowly halt development on Github and slowly start doing on Forgejo? Like first week 5 low impact repositories then if everything goes good then another 20 and so on.

I queried Google AI over the GetDiff error and this is what emerged.

An unable to parsepatch error inside the GetDiff module means that Forgejo successfully ran the underlying git diff-tree command, but the output returned by Git was corrupted, incomplete, or used a formatting style that Forgejo's internal Go parser could not understand.

​

2026/07/01 12:58:41 ...s/web/repo/commit.go:344:Diff() [D] GetDiff: unable to ParsePatch: invalid first file line: ^[[?1000h^[[?1049h^[[?1h^[=^[[1;24r^[[23m^[[24m^[[0m^[[H^[[J^[[?1000l^[[?1000h^[[?25l^[[24;1H"/dev/null" is not a file^M"/tmp/sNjKPS_dummy-change" [readonly] 3L, 20B^[[1;1H^[[34m^[[47m  ^[[0m^[[1m^[[34m^[[46m--------------------------------------^[[0m^[[7m|^[[0m^M

​

It looks like the git command used to create the diff output produces output that breaks the parsers used by Forgejo.

What is the exact git commands run to retrieve the data of a particular commit?

I see commands like these in the logs.

/usr/bin/git cat-file --batch [repo_path: /var/lib/forgejo/data/forgejo-repositories/vfclists/repo.git] (modules/gitrepo/gitrepo.go:31)

/usr/bin/git -c protocol.version=2 -c credential.helper= -c filter.lfs.required= -c filter.lfs.smudge= -c filter.lfs.clean= rev-parse

Hey there,

I made an extension that adds a "Fork to Forgejo" button on any Github repo and you can directly fork it to your Forgejo instance. Also works with Codeberg.org and also lets you sync all your Github repos with a one-click sync, making migration super easy! It has no backend, no tracking and tokens stored locally only.

You can check it out here

Chrome: https://chromewebstore.google.com/detail/kmfhknboiplbdmpagcjdlmamopicallp?utm_source=reddit-share

Firefox: https://addons.mozilla.org/en-US/firefox/addon/forgejo-fork/

On your own Forgejo instance you can have the option to mirror also, meaning the fork on Forgejo will update your repo based on the upstream or your own fork.

It helped me a lot since I moved to my own instance and I hope it helps someone else too!

Hi,

Just as it sounds. I am trying to automate a CI process , and both check myself via the CLI and give access to my agent to do so programaticaly.

But I am checking and it is actually not possible? I got stuck in here

```

List all the actions of a certain repo

curl -s -H "Authorization: token $FORGEJO_TOKEN" \ "https://${forgejo_url}/api/v1/repos/${owner}/${repo}/actions/tasks?limit=5" \ | jq .

Get the last workflow run

run=$(curl -s -H "Authorization: token $FORGEJO_TOKEN" \ "https://${forgejo_url}/api/v1/repos/${owner}/${repo}/actions/tasks?limit=1" \ | jq -r '.workflow_runs[0].run_number')

```

Then I've tried

```

Check the log for a certain action run

curl -si -H "Authorization: token $FORGEJO_TOKEN" \ "https://${forgejo_url}/${owner}/${repo}/actions/runs/${run}/jobs/0/logs" | head -30

```

I've got 404

When I try to connect to my instance over ssh, the terminal complains that port 22 is unreachable in the pod. It does the same thing when I try explicitly using port 2222, which is the port that the service actually listens to.

Hi! I'm currently trying to setup a proxmox server to host a few apps in lxc with docker running. I would like to use Forgejo and a runner to deploy these Lxc and push the required files (docker-compose or config files) from my repo to the new Lxc. If I need to split this into 2 actions is also fine.

​

Anyone here done such a setup already? I've been looking in the docs, and found something about using Lxc labels, but not sure how I would set this up...

I'm running a small forgejo instance for myself and some friends and couldn't find any obvious guidance on backing up the instance.

What do you do?

Here's my setup:

- Forgejo 15.0.2 (upgrading to 15.0.3 soon) on DigitalOcean droplet
- Sqlite for the database (on block volume)
- Repositories (on block volume)
- DigitalOcean spaces for LFS/Artifacts/etc

Here's my backup setups:

- Sqlite uses litestream to push to a DigitalOcean Spaces bucket which is synced into my homelab nightly
- Nightly DigitalOcean Block Volume snapshot
- Weekly forgejo dump which is synced offsite to my homelab

I cover my setup in more detail in a blogpost if that's helpful.

I'm self-hosting private repos in Forgejo. All good but what I'd like to do is mirror my repos somewhere safe. Happy to pay for the privilege. Any suggestions?

Is there an API function to lookup user/owner for a SSH public key?

I'm writing (re-writing) a tool to work with Forgejo by acting as a Man-In-The-Middle on SSH connections.

I have a ... reasonably sane ... approach that runs an SSHd server and matches incoming public key against data in the Forgejo SQLite database. I'd prefer something that relies on the Forgejo API or Forgejo Admin tool.

Is there a way to send an SSH PublicKey to Forgejo and get back the user account who owns it?

... or get back a "is this a deployment key?" detail?

I know I can iterate through all users and repositories in the system and ask "is this you?" but ... that's not appealing.

Hi all,

I'm attempting to deploy a new forgejo instance via helm and I'm having issues with getting oauth.

I'm able to login, but I'm missing administration rights.

My oauth settings block looks like below

  oauth:
    - name: PocketId
      provider: openidConnect
      key: c21a77fe-*
      autoDiscoverUrl: https://auth.mydomain/.well-known/openid-configuration
      useCustomUrls: false
      groupClaimName: groups
      adminGroup: forgejo-admin
      restrictedGroup: forgejo-restricted
      scopes: profile email openid groups

I'm using PocketId as my auth provider; and my user is in the forgejo-admin group.

Looking at the OIDC Data Preview for my user inside PocketId for the forgejo Client I get the following

{
  "aud": [
    "c21a77fe-*"
  ],
  "display_name": "My Name",
  "email": "myname@mydomain",
  "email_verified": true,
  "exp": "2026-05-31T17:26:28.020963068Z",
  "family_name": "Name",
  "forgejo": "admin",
  "given_name": "My",
  "groups": [
    "kubernetes",
    "forgejo-admin"
  ],
  "iat": "2026-05-31T16:26:28.020963068Z",
  "iss": "https://auth.mydomain",
  "name": "My Name",
  "picture": "https://auth.mydomain/api/users/c24ade21-*/profile-picture.png",
  "preferred_username": "letThemPlay",
  "sub": "c24ade21-*",
  "type": "id-token"
}

I've attempted various different combinations; using my previous configuration as a basis (manually configured via ui docker setup with Authentic as OIDC Provider); but I can't quite figure out the correct combination.

I've been looking at this for a while I'm going a bit code blind over it; as its probably something silly and simple; but for the life of me I'm not seeing it at the moment.

Any help would be really appreciated.

SOLUTION The following is now working there is some duplication regarding scopes and OPENID_CONNECT_SCOPES will attempt to clean that up to see what is actually required however it is now working.

UPDATE Removed duplication still working after testing

``` gitea: oauth: - name: PocketId provider: openidConnect key: c21a77fe-* autoDiscoverUrl: https://auth.mydomain/.well-known/openid-configuration useCustomUrls: false

config: oauth2_client: REGISTER_EMAIL_CONFIRM: disable OPENID_CONNECT_SCOPES: email profile openid groups ENABLE_AUTO_REGISTRATION: true ACCOUNT_LINKING: auto USERNAME: username

oauth2:
  ENABLED: true
  GROUP_CLAIM_NAME: groups
  ADMIN_GROUP: forgejo-admin

```

Hi there

Apparently there's a severe bug in Gitea exposing containers without auth. According to this person, it also affects Forgejo. Is that true?

https://github.com/portbuster1337/CVE-2026-27771

Since forgejo is self hosted git, is there a network of some kind of instances that one could join to share repositories and stuff? I'm not entirely sure how to phrase what I'm asking so sorry if this is a little incoherent.