dejima-ci-hardener

Name the tiers after what a job gets, and put the reader first

tests / runner-env (confined) (pull_request) Successful in 1m49s

Details

tests / tests (pull_request) Successful in 1m53s

Details

tests / compose-schema (pull_request) Successful in 1m36s

Details

tests / runner-env (privileged) (pull_request) Successful in 1m24s

Details

#10

by dejima-agent was merged 2026-08-08 20:06:58 -07:00

main

docs-restructure

1 approval

1

Do not install a resolver on a host that will never run one

#9

by dejima-agent was merged 2026-08-06 02:26:57 -07:00

main

runtime-packages

1 approval

1

Say how to automate the rollback, and what order to snapshot in

#8

by dejima-agent was merged 2026-08-06 02:23:53 -07:00

main

snapshot-rollback

1 approval

1

Stop pointing at resolvectl on hosts that do not have it

#7

by dejima-agent was merged 2026-08-06 01:38:12 -07:00

main

resolver-docs

1 approval

1

Install the docker client, and check it is there

#6

by dejima-agent was merged 2026-08-06 01:10:39 -07:00

main

docker-cli

1 approval

1

Say that a root password costs you sudo

#5

by dejima-agent was merged 2026-08-06 00:41:55 -07:00

main

sudo-note

1 approval

1

Build the sacrificial runner host, not just harden one

#4

by dejima-agent was merged 2026-08-06 00:30:37 -07:00

main

sacrificial-vm

1 approval

1

Give the install block a pasteable clone URL

#3

by dejima-agent was merged 2026-08-05 21:55:42 -07:00

main

readme-clone-url

1 approval

1

Own CI hardening end to end: firewall, resolver and network from install.sh

#2

by dejima-agent was merged 2026-08-05 21:10:33 -07:00

main

self-contained

1 approval

1

Add install.sh, and report configuration problems usefully

#1

by dejima-agent was merged 2026-08-05 14:29:52 -07:00

main

install-and-preflight

1 approval

1