Commit `57707aebf9`

57707aebf93abd4ad205cc48cc4725d113f26c40

Verified · cmc

cmc <hello@cleberg.net> · 2026-09-09 03:30 UTC

deploy: the bay1 runner claims untrusted builds; release ships gitbay-runner

Ref #184

deploy/gitbay-runner.override.conf +3 −1

		@@ -70,8 +70,10 @@ TimeoutStopSec=50min
70	70	# already dead. mixed signals the main process only; whatever is left
71	71	# when it exits is killed.
72	72	KillMode=mixed
	73	# -untrusted: this runner isolates in podman, so it takes merge request
	74	# heads from forks; a runner without a container must not.
73	75	ExecStart=
74		ExecStart=/usr/local/bin/gitbay-runner -remote git@127.0.0.1 -workdir /var/lib/gitbay-runner/work -poll 5s -timeout 45m -repos krz/gitbay,cmc/ci-smoke -isolation podman -image localhost/gitbay-ci:1 -cpus 3 -memory 6g
	76	ExecStart=/usr/local/bin/gitbay-runner -remote git@127.0.0.1 -workdir /var/lib/gitbay-runner/work -poll 5s -timeout 45m -repos krz/gitbay,cmc/ci-smoke -isolation podman -image localhost/gitbay-ci:1 -cpus 3 -memory 6g -untrusted
75	77	Nice=10
76	78	CPUWeight=30
77	79	IOWeight=30

deploy/release.sh +3 −3

		@@ -1,6 +1,6 @@
1	1	#!/bin/sh
2		# Build release binaries for a tag: reproducible cross-compiled gitbay and
3		# gitbayd with a checksum manifest.
	2	# Build release binaries for a tag: reproducible cross-compiled gitbay,
	3	# gitbayd and gitbay-runner with a checksum manifest.
4	4	#
5	5	# git checkout v0.2.0 && ./deploy/release.sh v0.2.0
6	6	#
		@@ -19,7 +19,7 @@ mkdir -p "$out"
19	19	for target in linux/amd64 linux/arm64 darwin/arm64; do
20	20	goos="${target%/*}"
21	21	goarch="${target#*/}"
22		for bin in gitbay gitbayd; do
	22	for bin in gitbay gitbayd gitbay-runner; do
23	23	name="${bin}-${V}-${goos}-${goarch}"
24	24	echo "building $name"
25	25	CGO_ENABLED=0 GOOS="$goos" GOARCH="$goarch" \

Commit 57707aebf9