/ 16 entries
- .forgejo/ (directory) ci: fetch the private bnema.dev/ermite* modules through the runner's Forgejo route
- contrib/ (directory) fix(unit): drop PrivateTmp, ProtectHome, ProtectKernelModules and ProtectKernelLogs, which hide the loop mounts of container mode from Docker; test that the unit sets no option creating a mount namespace (GO-001)
- images/ (directory) build(image): a python command for shell: python; contrib: systemd unit
- internal/ (directory) docs(executor): say the truncated base64 masks go beyond actions/runner
- scripts/ (directory) test(sandbox): find VMMs by id in the integration audit, emergency reap on failure, separate namespaces for the firewall test
- .gitignore 18 B chore: bootstrap ermite-runner with license, README, lint and CI
- .golangci.yml 176 B chore: bootstrap ermite-runner with license, README, lint and CI
- LICENSE 1.0 KiB chore: bootstrap ermite-runner with license, README, lint and CI
- README.md 27.5 KiB feat(host): make runner.environment configurable, github-hosted by default
- buf.gen.yaml 113 B fix(guest): escalate cancellation SIGINT/SIGTERM/SIGKILL, stream through frame writers, forward init signals; cancel channel in Drive
- buf.yaml 224 B fix(guest): escalate cancellation SIGINT/SIGTERM/SIGKILL, stream through frame writers, forward init signals; cancel channel in Drive
- go.mod 5.0 KiB build: use the merged ermite-actions (5c0e25d)
- go.sum 21.2 KiB build: use the merged ermite-actions (5c0e25d)
- host_cmd.go 4.0 KiB fix(host): never follow redirects and refuse plain http except loopback (M1); read the register token from stdin or the environment before the flag (m5)
- main.go 2.5 KiB fix(guest): a missing step user fails the job instead of running the steps as root (m4)
- sandbox_check.go 2.4 KiB chore(build): consistent image tag, exact kernel option matching, e2fsprogs check, CI proto drift check; docs for the new limits, host lock and ip_forward