fix/exec-umask 2cd66dc

history of README.md at fix/exec-umask

2026-10-16

76a5504feat(image): binfmt_misc in the guest kernel (#37) SSH Unverifiedtag v0.4.0brice
0e950d6feat(ci): artifacts v4 results service (#32) SSH Unverifiedbrice
cbcd612host-side action archive cache (#33) SSH Unverifiedbrice

2026-10-15

5df99e1feat(cache): serve the cache on the guest loopback over the host channel (#27) SSH Unverifiedbrice

2026-10-14

49c3309feat(cache): GitHub Actions cache service v1 on the runner (#24) SSH Unverifiedbrice
298aaf7fix(executor): run node12, node16 and node20 actions on Node 24 as GitHub does SSH Unverifiedbrice
77f4a19docs(runner): job containers and service containers GPG Verifiedbrice

2026-10-13

e59b2f0test(guest): results frames over the stream; docs: attribution for the ported code GPG Verifiedbrice
ea3c7aafix(externals): build stubs once via rename, record alpine checksums, retry on a timer GPG Verifiedbrice
ad47140feat(externals): provide pinned Node.js to sandboxes outside the image GPG Verifiedbrice
a236b1ddocs(readme): warn that guest forge traffic comes from a private address GPG Verifiedbrice
6699244feat(runner): opt-in guest access to the forge host:port of ERMITE_RUNNER_URL GPG Verifiedbrice

2026-10-12

61fc6eefeat(host): make runner.environment configurable, github-hosted by default GPG Verifiedbrice
0642256test(host): check the API path for base URLs with a prefix and a trailing slash GPG Verifiedbrice
fd4fcdbdocs: the state directory and its parents must be root-owned GPG Verifiedbrice
4bce7e0docs: what the root-only paths showed on a real KVM host GPG Verifiedbrice
63269d4fix(unit): drop PrivateTmp, ProtectHome, ProtectKernelModules and ProtectKernelLogs, which hide the loop mounts of container mode from Docker; test that the unit sets no option creating a mount namespace (GO-001) GPG Verifiedbrice
3f47b6ddocs: leave UMask out of the unit and say why (G5) GPG Verifiedbrice
01928f4docs: systemd unit with hardening and the list of what is absent, register with systemd-run and stdin, logs under journald, stop budget (G5, G6) GPG Verifiedbrice
610fdc0refactor(container): rename the rootless option UnsafeAllowRootlessForTests and test that production never sets it (G4) GPG Verifiedbrice
96d8ce3docs(readme): service installation, image requirements, job limits, end-to-end tests GPG Verifiedbrice
b70b211feat(host): register and run subcommands, README, lint fixes GPG Verifiedbrice
6be4205chore(build): consistent image tag, exact kernel option matching, e2fsprogs check, CI proto drift check; docs for the new limits, host lock and ip_forward GPG Verifiedbrice
b5ce612docs(readme): document sandboxes, configuration and integration tests GPG Verifiedbrice
885c03fchore: bootstrap ermite-runner with license, README, lint and CI GPG Verifiedbrice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 4

Tags 11

↑↓ moveenter openesc close