ci-artifacts.md Raw History Folder

CI: artifacts

actions/upload-artifact and actions/download-artifact v4 and later work. ermite stores the artifacts; the runner serves them to the jobs.

ermite run artifacts <repo> <run>
ermite run download <repo> <run> [--name N]… [--dir D]

The run page lists them with download links.

Rules

A job sees only the artifacts of its own run. A re-run that uploads again replaces the earlier one.
Never served anonymously, even for a public repository: repo:read to list and download, ci:write to delete.
Contents use the shared blob store: $ERMITE_DATA_DIR/blobs/objects/ci/ by default, or the configured S3 bucket/prefix. Metadata stays in kv. Removed when they expire, or with their run or repository.
Legacy artifacts under $ERMITE_DATA_DIR/ci/artifacts remain readable until expiry, with no copy or migration. Keep that tree until its last artifact expires. Changing backends does not move blob-backed artifacts; keep the backend stable while they are live.
An upload not finished when its job ends is dropped.

Limits

Setting	Default
`ERMITE_CI_ARTIFACT_MAX` (one artifact)	`5GiB`
`ERMITE_CI_ARTIFACT_QUOTA` (per repository)	`10GiB`
`ERMITE_CI_ARTIFACT_RETENTION` (max `retention-days`)	`90d`

Also: 32 unfinished uploads per job, 1000 artifacts per run. ERMITE_CI_ARTIFACTS=0 turns artifacts off.

Not supported

Artifacts v3 (@actions/artifact v1).
The REST endpoints /actions/runs/{id}/artifacts and /actions/artifacts/{id}/zip: download-artifact with run-id and github-token gets a 404.

source

1# CI: artifacts
2
3`actions/upload-artifact` and `actions/download-artifact` v4 and later work. ermite stores the artifacts; the runner serves them to the jobs.
4
5```sh
6ermite run artifacts <repo> <run>
7ermite run download <repo> <run> [--name N]… [--dir D]
8```
9
10The run page lists them with download links.
11
12## Rules
13
14- A job sees only the artifacts of its own run. A re-run that uploads again replaces the earlier one.
15- Never served anonymously, even for a public repository: `repo:read` to list and download, `ci:write` to delete.
16- Contents use the shared [blob store](storage.md): `$ERMITE_DATA_DIR/blobs/objects/ci/` by default, or the configured S3 bucket/prefix. Metadata stays in kv. Removed when they expire, or with their run or repository.
17- Legacy artifacts under `$ERMITE_DATA_DIR/ci/artifacts` remain readable until expiry, with no copy or migration. Keep that tree until its last artifact expires. Changing backends does not move blob-backed artifacts; keep the backend stable while they are live.
18- An upload not finished when its job ends is dropped.
19
20## Limits
21
22| Setting | Default |
23|---|---|
24| `ERMITE_CI_ARTIFACT_MAX` (one artifact) | `5GiB` |
25| `ERMITE_CI_ARTIFACT_QUOTA` (per repository) | `10GiB` |
26| `ERMITE_CI_ARTIFACT_RETENTION` (max `retention-days`) | `90d` |
27
28Also: 32 unfinished uploads per job, 1000 artifacts per run. `ERMITE_CI_ARTIFACTS=0` turns artifacts off.
29
30## Not supported
31
32- Artifacts v3 (`@actions/artifact` v1).
33- The REST endpoints `/actions/runs/{id}/artifacts` and `/actions/artifacts/{id}/zip`: `download-artifact` with `run-id` and `github-token` gets a 404.