[GH-ISSUE #213] Loading configuration from environment variables... Killed #225

Closed
opened 2026-04-11 09:10:30 -05:00 by GiteaMirror · 8 comments
Owner

Originally created by @RobertGonzales1 on GitHub (Mar 5, 2026).
Original GitHub issue: https://github.com/RayLabsHQ/gitea-mirror/issues/213

Originally assigned to: @arunavo4 on GitHub.

Getting this weird error when using the alt docker compose:

No custom CA certificates found in /app/certs
System CA bundle mounted, configuring Node.js to use it...
NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt
Using previously generated ENCRYPTION_SECRET
ENCRYPTION_SECRET has been set to a secure random value
Database already exists, Drizzle will check for pending migrations on startup...
Setting application version: 3.12.2
Checking for environment configuration...
Loading configuration from environment variables...
Killed

Its probably something im doing wrong but im not sure what else to check. Any help?

Originally created by @RobertGonzales1 on GitHub (Mar 5, 2026). Original GitHub issue: https://github.com/RayLabsHQ/gitea-mirror/issues/213 Originally assigned to: @arunavo4 on GitHub. Getting this weird error when using the alt docker compose: No custom CA certificates found in /app/certs System CA bundle mounted, configuring Node.js to use it... NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt Using previously generated ENCRYPTION_SECRET ENCRYPTION_SECRET has been set to a secure random value Database already exists, Drizzle will check for pending migrations on startup... Setting application version: 3.12.2 Checking for environment configuration... Loading configuration from environment variables... Killed Its probably something im doing wrong but im not sure what else to check. Any help?
GiteaMirror added the question label 2026-04-11 09:10:30 -05:00
Author
Owner

@RobertGonzales1 commented on GitHub (Mar 5, 2026):

Here is the docker compose im using:

Minimal Gitea Mirror deployment

Only includes what CANNOT be configured via the Web UI

Everything else can be set up through the web interface after deployment

services:
gitea-mirror:
image: ghcr.io/raylabshq/gitea-mirror:latest
container_name: gitea-mirror
restart: always
network_mode: bridge
ports:
- "${PORT:-4321}:4321"
volumes:
- ./data:/app/data
environment:
# === ABSOLUTELY REQUIRED ===
# This MUST be set and CANNOT be changed via UI
- BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET} # Min 32 chars, required for sessions
- BETTER_AUTH_URL=${BETTER_AUTH_URL:-http://localhost:4321}
- BETTER_AUTH_TRUSTED_ORIGINS=${BETTER_AUTH_TRUSTED_ORIGINS:-http://localhost:4321}

  # === CORE SETTINGS ===
  # These are technically required but have working defaults
  - NODE_ENV=production
  - DATABASE_URL=file:data/gitea-mirror.db
  - HOST=0.0.0.0
  - PORT=4321
  - PUBLIC_BETTER_AUTH_URL=${PUBLIC_BETTER_AUTH_URL:-http://localhost:4321}
  # Optional concurrency controls (defaults match in-app defaults)
  # If you want perfect ordering of issues and PRs, set these at 1
  - MIRROR_ISSUE_CONCURRENCY=${MIRROR_ISSUE_CONCURRENCY:-3}
  - MIRROR_PULL_REQUEST_CONCURRENCY=${MIRROR_PULL_REQUEST_CONCURRENCY:-5}
  
healthcheck:
  test: ["CMD", "wget", "--no-verbose", "--tries=3", "--spider", "http://localhost:4321/api/health"]
  interval: 30s
  timeout: 10s
  retries: 5
  start_period: 15s

=== QUICK START ===

1. Create a .env file with only ONE required variable:

BETTER_AUTH_SECRET=your-32-character-minimum-secret-key-here

2. Run:

docker-compose -f docker-compose.alt.yml up -d

3. Access at http://localhost:4321

4. Sign up for an account (first user becomes admin)

5. Configure everything else through the web UI:

- GitHub credentials

- Gitea credentials

- Mirror settings

- Scheduling options

- Auto-import settings

- Cleanup preferences

That's it! Everything else can be configured via the web interface.

<!-- gh-comment-id:4006546339 --> @RobertGonzales1 commented on GitHub (Mar 5, 2026): Here is the docker compose im using: # Minimal Gitea Mirror deployment # Only includes what CANNOT be configured via the Web UI # Everything else can be set up through the web interface after deployment services: gitea-mirror: image: ghcr.io/raylabshq/gitea-mirror:latest container_name: gitea-mirror restart: always network_mode: bridge ports: - "${PORT:-4321}:4321" volumes: - ./data:/app/data environment: # === ABSOLUTELY REQUIRED === # This MUST be set and CANNOT be changed via UI - BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET} # Min 32 chars, required for sessions - BETTER_AUTH_URL=${BETTER_AUTH_URL:-http://localhost:4321} - BETTER_AUTH_TRUSTED_ORIGINS=${BETTER_AUTH_TRUSTED_ORIGINS:-http://localhost:4321} # === CORE SETTINGS === # These are technically required but have working defaults - NODE_ENV=production - DATABASE_URL=file:data/gitea-mirror.db - HOST=0.0.0.0 - PORT=4321 - PUBLIC_BETTER_AUTH_URL=${PUBLIC_BETTER_AUTH_URL:-http://localhost:4321} # Optional concurrency controls (defaults match in-app defaults) # If you want perfect ordering of issues and PRs, set these at 1 - MIRROR_ISSUE_CONCURRENCY=${MIRROR_ISSUE_CONCURRENCY:-3} - MIRROR_PULL_REQUEST_CONCURRENCY=${MIRROR_PULL_REQUEST_CONCURRENCY:-5} healthcheck: test: ["CMD", "wget", "--no-verbose", "--tries=3", "--spider", "http://localhost:4321/api/health"] interval: 30s timeout: 10s retries: 5 start_period: 15s # === QUICK START === # # 1. Create a .env file with only ONE required variable: # BETTER_AUTH_SECRET=your-32-character-minimum-secret-key-here # # 2. Run: # docker-compose -f docker-compose.alt.yml up -d # # 3. Access at http://localhost:4321 # # 4. Sign up for an account (first user becomes admin) # # 5. Configure everything else through the web UI: # - GitHub credentials # - Gitea credentials # - Mirror settings # - Scheduling options # - Auto-import settings # - Cleanup preferences # # That's it! Everything else can be configured via the web interface.
Author
Owner

@arunavo4 commented on GitHub (Mar 5, 2026):

@RobertGonzales1 are you on a memory constrained system? if not check of you have a any default memory size assigned to your docker

<!-- gh-comment-id:4006944326 --> @arunavo4 commented on GitHub (Mar 5, 2026): @RobertGonzales1 are you on a memory constrained system? if not check of you have a any default memory size assigned to your docker
Author
Owner

@RobertGonzales1 commented on GitHub (Mar 5, 2026):

Yes, its at 1GB right now, ill try 4GB and see what happens.

<!-- gh-comment-id:4007375235 --> @RobertGonzales1 commented on GitHub (Mar 5, 2026): Yes, its at 1GB right now, ill try 4GB and see what happens.
Author
Owner

@RobertGonzales1 commented on GitHub (Mar 5, 2026):

got the same message cranking it up to 8CPU and 4GB RAM.
Same with 8CPU and 8GB RAM.
Got a new error with 8CPU and 16GB RAM:

NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt

Using previously generated ENCRYPTION_SECRET

ENCRYPTION_SECRET has been set to a secure random value

Database already exists, Drizzle will check for pending migrations on startup...

Setting application version: 3.12.2

Checking for environment configuration...

Loading configuration from environment variables...

No custom CA certificates found in /app/certs

System CA bundle mounted, configuring Node.js to use it...

NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt

Using previously generated ENCRYPTION_SECRET

ENCRYPTION_SECRET has been set to a secure random value

Database already exists, Drizzle will check for pending migrations on startup...

Setting application version: 3.12.2

Checking for environment configuration...

Loading configuration from environment variables...

============================================================

Bun v1.3.9 (cf6cdbbb) Linux x64 (baseline)

Linux Kernel v6.8.0 | glibc v2.41

Args: "bun" "dist/scripts/startup-env-config.js"

Features: jsc no_avx2 no_avx

Builtins: "bun:main"

Elapsed: 25941ms | User: 19880ms | Sys: 6021ms

RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 222 | Machine: 16.77GB

CPU lacks AVX support. Please consider upgrading to a newer CPU.

panic(main thread): Segmentation fault at address 0x20480000000

oh no: Bun has crashed. This indicates a bug in Bun, not your code.

To send a redacted crash report to Bun's team,

please file a GitHub issue using the link below:

https://bun.report/1.3.9/Ba1cf6cdbbAggggigD42qhwE+++Pgs4r9Cstp2pDkg20pD+8si1Di1l5lE0531qEw1gttF_620shE620shE620shE620shE620shE620shE620shE620shE620shE620shEA2ogBB

Illegal instruction (core dumped)

No custom CA certificates found in /app/certs

System CA bundle mounted, configuring Node.js to use it...

NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt

Using previously generated ENCRYPTION_SECRET

ENCRYPTION_SECRET has been set to a secure random value

Database already exists, Drizzle will check for pending migrations on startup...

Setting application version: 3.12.2

Checking for environment configuration...

Loading configuration from environment variables...

============================================================

Bun v1.3.9 (cf6cdbbb) Linux x64 (baseline)

Linux Kernel v6.8.0 | glibc v2.41

Args: "bun" "dist/scripts/startup-env-config.js"

Features: jsc no_avx2 no_avx

Builtins: "bun:main"

Elapsed: 25110ms | User: 19358ms | Sys: 5869ms

RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 0 | Machine: 16.77GB

CPU lacks AVX support. Please consider upgrading to a newer CPU.

panic(main thread): Segmentation fault at address 0x35924000000

oh no: Bun has crashed. This indicates a bug in Bun, not your code.

To send a redacted crash report to Bun's team,

please file a GitHub issue using the link below:

https://bun.report/1.3.9/Ba1cf6cdbbAggggigD42qhwE+++Pgs4r9Cstp2pDkg20pD+8si1Di1l5lE0531qEw1gttF_620shE620shE620shE620shE620shE620shE620shE620shE620shE620shEA2y1BgggggkB

Illegal instruction (core dumped)

No custom CA certificates found in /app/certs

System CA bundle mounted, configuring Node.js to use it...

NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt

Using previously generated ENCRYPTION_SECRET

ENCRYPTION_SECRET has been set to a secure random value

Database already exists, Drizzle will check for pending migrations on startup...

Setting application version: 3.12.2

Checking for environment configuration...

Loading configuration from environment variables...

============================================================

Bun v1.3.9 (cf6cdbbb) Linux x64 (baseline)

Linux Kernel v6.8.0 | glibc v2.41

Args: "bun" "dist/scripts/startup-env-config.js"

Features: jsc no_avx2 no_avx

Builtins: "bun:main"

Elapsed: 24773ms | User: 19293ms | Sys: 5481ms

RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 0 | Machine: 16.77GB

CPU lacks AVX support. Please consider upgrading to a newer CPU.

panic(main thread): Segmentation fault at address 0x5B1EC000000

oh no: Bun has crashed. This indicates a bug in Bun, not your code.

To send a redacted crash report to Bun's team,

please file a GitHub issue using the link below:

https://bun.report/1.3.9/Ba1cf6cdbbAggggigD42qhwE+++Pgs4r9Cstp2pDkg20pD+8si1Di1l5lE0531qEw1gttF_620shE620shE620shE620shE620shE620shE620shE620shE620shE620shEA2i7ChggggU

Illegal instruction (core dumped)

No custom CA certificates found in /app/certs

System CA bundle mounted, configuring Node.js to use it...

NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt

Using previously generated ENCRYPTION_SECRET

ENCRYPTION_SECRET has been set to a secure random value

Database already exists, Drizzle will check for pending migrations on startup...

Setting application version: 3.12.2

Checking for environment configuration...

Loading configuration from environment variables...

<!-- gh-comment-id:4007498823 --> @RobertGonzales1 commented on GitHub (Mar 5, 2026): got the same message cranking it up to 8CPU and 4GB RAM. Same with 8CPU and 8GB RAM. Got a new error with 8CPU and 16GB RAM: NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt Using previously generated ENCRYPTION_SECRET ENCRYPTION_SECRET has been set to a secure random value Database already exists, Drizzle will check for pending migrations on startup... Setting application version: 3.12.2 Checking for environment configuration... Loading configuration from environment variables... No custom CA certificates found in /app/certs System CA bundle mounted, configuring Node.js to use it... NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt Using previously generated ENCRYPTION_SECRET ENCRYPTION_SECRET has been set to a secure random value Database already exists, Drizzle will check for pending migrations on startup... Setting application version: 3.12.2 Checking for environment configuration... Loading configuration from environment variables... ============================================================ Bun v1.3.9 (cf6cdbbb) Linux x64 (baseline) Linux Kernel v6.8.0 | glibc v2.41 Args: "bun" "dist/scripts/startup-env-config.js" Features: jsc no_avx2 no_avx Builtins: "bun:main" Elapsed: 25941ms | User: 19880ms | Sys: 6021ms RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 222 | Machine: 16.77GB CPU lacks AVX support. Please consider upgrading to a newer CPU. panic(main thread): Segmentation fault at address 0x20480000000 oh no: Bun has crashed. This indicates a bug in Bun, not your code. To send a redacted crash report to Bun's team, please file a GitHub issue using the link below: https://bun.report/1.3.9/Ba1cf6cdbbAggggigD42qhwE+++Pgs4r9Cstp2pDkg20pD+8si1Di1l5lE0531qEw1gttF_620shE620shE620shE620shE620shE620shE620shE620shE620shE620shEA2ogBB Illegal instruction (core dumped) No custom CA certificates found in /app/certs System CA bundle mounted, configuring Node.js to use it... NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt Using previously generated ENCRYPTION_SECRET ENCRYPTION_SECRET has been set to a secure random value Database already exists, Drizzle will check for pending migrations on startup... Setting application version: 3.12.2 Checking for environment configuration... Loading configuration from environment variables... ============================================================ Bun v1.3.9 (cf6cdbbb) Linux x64 (baseline) Linux Kernel v6.8.0 | glibc v2.41 Args: "bun" "dist/scripts/startup-env-config.js" Features: jsc no_avx2 no_avx Builtins: "bun:main" Elapsed: 25110ms | User: 19358ms | Sys: 5869ms RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 0 | Machine: 16.77GB CPU lacks AVX support. Please consider upgrading to a newer CPU. panic(main thread): Segmentation fault at address 0x35924000000 oh no: Bun has crashed. This indicates a bug in Bun, not your code. To send a redacted crash report to Bun's team, please file a GitHub issue using the link below: https://bun.report/1.3.9/Ba1cf6cdbbAggggigD42qhwE+++Pgs4r9Cstp2pDkg20pD+8si1Di1l5lE0531qEw1gttF_620shE620shE620shE620shE620shE620shE620shE620shE620shE620shEA2y1BgggggkB Illegal instruction (core dumped) No custom CA certificates found in /app/certs System CA bundle mounted, configuring Node.js to use it... NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt Using previously generated ENCRYPTION_SECRET ENCRYPTION_SECRET has been set to a secure random value Database already exists, Drizzle will check for pending migrations on startup... Setting application version: 3.12.2 Checking for environment configuration... Loading configuration from environment variables... ============================================================ Bun v1.3.9 (cf6cdbbb) Linux x64 (baseline) Linux Kernel v6.8.0 | glibc v2.41 Args: "bun" "dist/scripts/startup-env-config.js" Features: jsc no_avx2 no_avx Builtins: "bun:main" Elapsed: 24773ms | User: 19293ms | Sys: 5481ms RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 0 | Machine: 16.77GB CPU lacks AVX support. Please consider upgrading to a newer CPU. panic(main thread): Segmentation fault at address 0x5B1EC000000 oh no: Bun has crashed. This indicates a bug in Bun, not your code. To send a redacted crash report to Bun's team, please file a GitHub issue using the link below: https://bun.report/1.3.9/Ba1cf6cdbbAggggigD42qhwE+++Pgs4r9Cstp2pDkg20pD+8si1Di1l5lE0531qEw1gttF_620shE620shE620shE620shE620shE620shE620shE620shE620shE620shEA2i7ChggggU Illegal instruction (core dumped) No custom CA certificates found in /app/certs System CA bundle mounted, configuring Node.js to use it... NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt Using previously generated ENCRYPTION_SECRET ENCRYPTION_SECRET has been set to a secure random value Database already exists, Drizzle will check for pending migrations on startup... Setting application version: 3.12.2 Checking for environment configuration... Loading configuration from environment variables...
Author
Owner

@arunavo4 commented on GitHub (Mar 6, 2026):

@RobertGonzales1 Looks like Bun v1.3.9 is crashing with a segfault on your CPU because it lacks AVX instruction support.
Found some bun issues that was fixed two weeks ago.

Fix:
https://github.com/oven-sh/bun/pull/26922

realated issues:
https://github.com/oven-sh/bun/issues/26864
https://github.com/oven-sh/bun/issues/27340

Looks like bun 1.3.10 has the fix https://github.com/oven-sh/bun/releases/tag/bun-v1.3.10

I have updated the docker file to use the latest verison of bun so we should be good. v3.12.3

<!-- gh-comment-id:4009196477 --> @arunavo4 commented on GitHub (Mar 6, 2026): @RobertGonzales1 Looks like Bun v1.3.9 is crashing with a segfault on your CPU because it lacks AVX instruction support. Found some bun issues that was fixed two weeks ago. Fix: https://github.com/oven-sh/bun/pull/26922 realated issues: https://github.com/oven-sh/bun/issues/26864 https://github.com/oven-sh/bun/issues/27340 Looks like bun 1.3.10 has the fix https://github.com/oven-sh/bun/releases/tag/bun-v1.3.10 I have updated the docker file to use the latest verison of bun so we should be good. v3.12.3
Author
Owner

@RobertGonzales1 commented on GitHub (Mar 6, 2026):

We got further, new error this time, Im going to try to rebuild the VM with a CPU with AVX:

No custom CA certificates found in /app/certs

System CA bundle mounted, configuring Node.js to use it...

NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt

Generating a secure random ENCRYPTION_SECRET

ENCRYPTION_SECRET has been set to a secure random value

Database not found. It will be created and initialized via Drizzle migrations on first app startup...

Setting application version: 3.12.3

Checking for environment configuration...

No GitHub/Gitea environment variables found, skipping env config initialization.

Environment configuration loaded successfully

Running startup recovery...

Running startup recovery using compiled script...

============================================================

Bun v1.3.10 (30e609e0) Linux x64 (baseline)

Linux Kernel v6.8.0 | glibc v2.41

Args: "bun" "dist/scripts/startup-recovery.js" "--timeout=30000"

Features: jsc no_avx2 no_avx

Builtins: "bun:main"

Elapsed: 32458ms | User: 21420ms | Sys: 11030ms

RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 0 | Machine: 16.77GB

CPU lacks AVX support. Please consider upgrading to a newer CPU.

panic(main thread): Segmentation fault at address 0x58D8C000000

oh no: Bun has crashed. This indicates a bug in Bun, not your code.

To send a redacted crash report to Bun's team,

please file a GitHub issue using the link below:

https://bun.report/1.3.10/Ba130e609eAggggigD40guyE+++Pgky19CmrtoqDk95mqD+l0m2DorzvnE6xt2sEw+towF_iznziEiznziEiznziEiznziEiznziEiznziEiznziEiznziEiznziEiznziEA264Chgggg0D

Startup recovery failed with exit code 132

Running repository status repair...

Running repository repair using compiled script...

Illegal instruction (core dumped)

<!-- gh-comment-id:4009542964 --> @RobertGonzales1 commented on GitHub (Mar 6, 2026): We got further, new error this time, Im going to try to rebuild the VM with a CPU with AVX: No custom CA certificates found in /app/certs System CA bundle mounted, configuring Node.js to use it... NODE_EXTRA_CA_CERTS set to: /etc/ssl/certs/ca-certificates.crt Generating a secure random ENCRYPTION_SECRET ENCRYPTION_SECRET has been set to a secure random value Database not found. It will be created and initialized via Drizzle migrations on first app startup... Setting application version: 3.12.3 Checking for environment configuration... No GitHub/Gitea environment variables found, skipping env config initialization. ✅ Environment configuration loaded successfully Running startup recovery... Running startup recovery using compiled script... ============================================================ Bun v1.3.10 (30e609e0) Linux x64 (baseline) Linux Kernel v6.8.0 | glibc v2.41 Args: "bun" "dist/scripts/startup-recovery.js" "--timeout=30000" Features: jsc no_avx2 no_avx Builtins: "bun:main" Elapsed: 32458ms | User: 21420ms | Sys: 11030ms RSS: 15.96GB | Peak: 8.63GB | Commit: 15.96GB | Faults: 0 | Machine: 16.77GB CPU lacks AVX support. Please consider upgrading to a newer CPU. panic(main thread): Segmentation fault at address 0x58D8C000000 oh no: Bun has crashed. This indicates a bug in Bun, not your code. To send a redacted crash report to Bun's team, please file a GitHub issue using the link below: https://bun.report/1.3.10/Ba130e609eAggggigD40guyE+++Pgky19CmrtoqDk95mqD+l0m2DorzvnE6xt2sEw+towF_iznziEiznziEiznziEiznziEiznziEiznziEiznziEiznziEiznziEiznziEA264Chgggg0D ❌ Startup recovery failed with exit code 132 Running repository status repair... Running repository repair using compiled script... Illegal instruction (core dumped)
Author
Owner

@RobertGonzales1 commented on GitHub (Mar 6, 2026):

IT WORKS! For anyone running into the same issue, if your running this on Proxmox, Make sure your using a CPU with AVX Support (I changed my VM CPU to Host in Proxmox.).

<!-- gh-comment-id:4009632883 --> @RobertGonzales1 commented on GitHub (Mar 6, 2026): IT WORKS! For anyone running into the same issue, if your running this on Proxmox, Make sure your using a CPU with AVX Support (I changed my VM CPU to Host in Proxmox.).
Author
Owner

@arunavo4 commented on GitHub (Mar 6, 2026):

Awesome!

<!-- gh-comment-id:4009742088 --> @arunavo4 commented on GitHub (Mar 6, 2026): Awesome!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea-mirror#225