Commits

history of deploy/gitbay-runner.override.conf

• runner host: builds reach only the forge's public ports on it

  cmc · 2026-09-28 07:25 UTC

  Verified · cmc 9809a86bfc

• deploy, ci: gitbay-ci:2 carries python3-venv

  cmc · 2026-09-10 02:28 UTC

  success Verified · cmc 3baebeeec5

• deploy, wiki: the bay1 runner is bounded by its attachments, not -repos

  cmc · 2026-09-10 01:26 UTC

  success Verified · cmc 8e2dbc6807

• deploy: the bay1 runner claims untrusted builds; release ships gitbay-runner

  cmc · 2026-09-09 03:30 UTC

  Verified · cmc 57707aebf9

• deploy: ProtectControlGroups=no so the runner can write its build cgroups

  cmc · 2026-09-07 20:48 UTC

  success Verified · cmc d4c806be81

• runner, deploy, wiki: the runner owns a cgroup per build, so -memory and -cpus apply

  cmc · 2026-09-07 20:37 UTC

  success Verified · cmc c14c881e38

• runner, deploy, wiki: a build home per repository, and caps on the runner unit

  cmc · 2026-09-07 18:47 UTC

  success Verified · cmc 0caaaedf8f

• deploy, wiki: KillMode=mixed so a stop reaches only the runner

  cmc · 2026-09-07 06:52 UTC

  success Verified · cmc 5ffa892991

• runner, deploy, wiki: drain on SIGTERM

  cmc · 2026-09-07 05:06 UTC

  success Verified · cmc 65f453dc9b

• deploy, wiki: the runner claims the isolation canary too

  cmc · 2026-09-07 03:37 UTC

  failure Verified · cmc 5bd5b27bc1

• runner, deploy, wiki: -cpus and -memory cap a build's container

  cmc · 2026-09-07 02:27 UTC

  Verified · cmc 89eba6adea

• deploy, wiki: ProtectKernelTunables=no so a container can mount proc

  cmc · 2026-09-07 01:27 UTC

  failure Verified · cmc 7d675c19a7

• deploy: pin podman's run root under the runner's home; end the pause process with the service

  cmc · 2026-09-07 01:23 UTC

  Verified · cmc 94bf85e690

• runner, deploy, wiki: images are provisioned, never pulled by a build

  cmc · 2026-09-07 00:27 UTC

  failure Verified · cmc 44c2c11f58

• deploy, wiki: NoNewPrivileges=no so rootless podman can start

  cmc · 2026-09-06 23:26 UTC

  failure Verified · cmc d6632e706a

• runner, ci, store, wiki: run build steps in a rootless podman container

  cmc · 2026-09-06 21:52 UTC

  success Verified · cmc 76668f2f38

• deploy, wiki: prepare a runner host for rootless podman

  cmc · 2026-09-06 18:48 UTC

  success Verified · cmc f32cde0608

• runner: -jobs N runs that many builds at once

  cmc · 2026-09-04 16:49 UTC

  success Verified · cmc 3b4f05eb52

• runner: a key scope that reaches the runner protocol and nothing else

  cmc · 2026-09-03 15:37 UTC

  success Verified · cmc b15d84acd6

• deploy: resumable copies, and a runner drop-in that cannot starve the host

  cmc · 2026-09-02 03:57 UTC

  success Verified · cmc dfbcb970a3