job "drone-runner" {
  datacenters = ["neptune"]
  type = "system"

  group "runner-vm" {
    network {
      port "ssh" {
        static = 22544
      }
    }

    constraint {
      attribute = "${attr.unique.hostname}"
      operator = "="
      value = "caribou"
    }

    task "drone-runner-vm" {
      driver = "qemu"

      config {
        image_path = "local/drone-runner.qcow2"
        accelerator = "kvm"
        args = [
          "-drive", "index=1,file=fat:rw:/var/lib/nomad/alloc/${NOMAD_ALLOC_ID}/${NOMAD_TASK_NAME}/secrets,format=raw,media=disk",
          "-device", "e1000,netdev=user.0",
          "-netdev", "user,id=user.0,hostfwd=tcp::${NOMAD_PORT_ssh}-:22",
        ]
        port_map {
          ssh = 22
        }
      }

      artifact {
        source = "https://alex.web.deuxfleurs.fr/drone-runner.qcow2.zst"
        destination = "local/drone-runner.qcow2"
        mode = "file"
      }

      template {
        data = <<EOH
DRONE_RPC_SECRET={{ key "secrets/drone-ci/rpc_secret" | trimSpace }}
DRONE_RUNNER_NAME={{ env "attr.unique.hostname" }}
EOH
        destination = "secrets/secret_env"
      }

      resources {
        memory = 2000
      }
    }
  }
}