main 33a243c

2026-10-22

33a243cbuild(go): require Go 1.27 and the ermite modules that declare it GPG Verifiedmain 4/4brice

2026-10-21

aba298dMerge branch 'perf/job-timing-and-caches' into main (!4) merge SSH Verifiedtag v0.6.02/2ermite
2b9f5c9refactor(registryproxy): simplify the proxy store, guest timing contract and size parsing GPG Verified2/2brice
25d29f5fix(dnsfwd): fall back to TCP when an upstream UDP answer is lost GPG Verifiedtag v0.5.14/4brice
57617dffeat(registryproxy): cache Docker Hub pulls of the sandboxes on the runner host GPG Verifiedbrice
09df1abMerge branch 'perf/p1-timing' into perf/job-timing-and-caches merge GPG Verifiedbrice
2b98cb5feat(timing): log the duration of each job phase on job finished GPG Verifiedbrice
be87239feat(images): preinstall Go and Node.js in the tool cache of the job image GPG Verifiedbrice
e52d13cci(workflows): bump actions/setup-go from v5 to v7 GPG Verified3/4brice

2026-10-18

5801291docs(readme): document the unprivileged container deployment next to the root host service GPG Verified2/2brice
22211fdfix(tcprelay): free-bind the relay under podman and rate-limit saturation warnings GPG Verifiedtag v0.5.01/2brice
08776effeat(container): run as an unprivileged container with a guest forge relay and first-run registration GPG Verifiedbrice
f9de495feat(images): move the job image to Ubuntu 26.04 LTS GPG Verifiedbrice
3ad0272docs(readme): rewrite README with a short overview and docs/ (#43) SSH Unverifiedbrice
edcdd4cci: run CI from .github/workflows and drop the Forgejo workflow (#42) SSH Unverifiedtag v0.4.4brice
b6b40b9docs(readme): point links to the public mirror and drop private infrastructure details (#41) SSH Unverifiedbrice

2026-10-17

bdc41cdfix(host): show the server's reason when resolving actions fails (#40) SSH Unverifiedtag v0.4.3brice
257b319fix(guest): start containerd with umask 022 so docker exec steps get it (#39) SSH Unverifiedtag v0.4.2brice
122e784fix(guest): run steps with umask 022, as GitHub's runners do (#38) SSH Unverifiedtag v0.4.1brice

2026-10-16

76a5504feat(image): binfmt_misc in the guest kernel (#37) SSH Unverifiedtag v0.4.0brice
65c7d3dreport the running version on every poll (#35) SSH Unverifiedbrice
9517f29feat(ci): OIDC ID token request variables (#34) SSH Unverifiedbrice
0e950d6feat(ci): artifacts v4 results service (#32) SSH Unverifiedbrice
cbcd612host-side action archive cache (#33) SSH Unverifiedbrice
e244502feat(image,executor): node 22 + yarn, ACTIONS_CACHE_MODE, action context test (#30) SSH Unverifiedbrice
fa0055afix(ci): annotation titles up to 4096 runes (#31) SSH Unverifiedbrice

2026-10-15

9ebdf14feat(image): add ruby to the ubuntu-24.04 image (#29) SSH Unverifiedbrice
8f98fd3build(deps): pin ermite-api v0.3.0 (#28) SSH Unverifiedtag v0.3.0brice
5df99e1feat(cache): serve the cache on the guest loopback over the host channel (#27) SSH Unverifiedbrice

2026-10-14

9c50523feat(executor): print server-side token permissions (#26) SSH Unverifiedbrice
c936897feat(executor): secrets, vars and masking from the job (#25) SSH Unverifiedbrice
49c3309feat(cache): GitHub Actions cache service v1 on the runner (#24) SSH Unverifiedbrice
43088fdbuild(deps): ermite-api and ermite-actions v0.2.0 (#23) SSH Unverifiedtag v0.2.0brice
33401b8build(image): the command-line tools of GitHub's ubuntu-24.04 image SSH Unverifiedbrice
5ac9bb1fix(sandbox): make the job's /tmp sticky SSH Unverifiedbrice
2e816bdfix(executor): composite step names see the action inputs, step names masked once SSH Unverifiedbrice
9382a0ffix(executor): give path-less annotations the line of their step log line SSH Unverifiedbrice
ec1337cfix(executor): runner steps in the steps context and composite env errors as on GitHub SSH Unverifiedbrice
a674b39fix(executor): parity for workflow commands, matchers and file commands (CI-2 compare) SSH Unverifiedbrice
9e57131fix(executor): log parity for action steps (CI-2 compare) SSH Unverifiedbrice
819edf3fix(guest): wait for the Docker API before starting the executor SSH Unverifiedbrice
298aaf7fix(executor): run node12, node16 and node20 actions on Node 24 as GitHub does SSH Unverifiedbrice
f09c6edMerge pull request 'feat(executor): job containers and service containers (CI-2 phase H)' (#13) from feat/ci2-containers into main merge SSH Unverifiedbnema
ce2fb4ffix(executor): check the cleanup budget before every cleanup command (GO-008) GPG Verifiedbrice
c724844fix(executor): register credentials before login, pass cancel to health checks, keep failed removals pending, clean by job label (GO-007-R, GO-001-R, GO-002-R, GO-003-R) GPG Verifiedbrice
ff447d8fix(executor): refuse invalid env names, accept bracketed IPv6 registries, document the accepted CLI-env risk (GO-004-R3, GO-005-R) GPG Verifiedbrice
493a3ecfix(executor): bound every docker command, clean up on an independent budget, record cleanup identifiers first and add a job-level fallback (GO-001, GO-002, GO-003, GO-007) GPG Verifiedbrice
8e03ed6fix(executor): pass container variable values and PATH through the docker process environment (GO-004) GPG Verifiedbrice
63e2006fix(executor): normalize container paths before translating and read matcher files only below shared directories (GO-006) GPG Verifiedbrice
6c6f5f6fix(executor): validate image references, service names and container ids (GO-005) GPG Verifiedbrice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 4

Tags 11

↑↓ moveenter openesc close