The drain in 65f453d never protected a build on bay1: the unit's default control-group kill mode sends SIGTERM to every process in the cgroup, so the ssh log session and the build's container died in the same instant the runner began draining. mixed signals the main process alone and kills what remains once it has exited.
Ref #179