gitlab_runner: Add VM based executor (libvirt-executor)
- Jul 30, 2022
-
-
Kristian Klausen authored"Disabling revoked keys in keyring" when running "pacman-key --populate" is very slow (easily +20 seconds), in our case the boot is now ~27 seconds faster (tested on secure-runner1). The pacman master private key is removed to prevent malicious actors from injecting packages, a new key is generated by pacman-init.service on boot.
-
Kristian Klausen authored
-
-
Kristian Klausen authored
Changes: - Switch to arch-boxes' base image - Verify the base image's signature - Use the new "latest" symlink, instead of parsing the HTML for finding the latest arch-boxes image[1] - Create the base image by using arch-chroot and friends, instead of creating a full-blown VM - Create the VMs from domain XML template instead of virt-clone - Switch mirror to geo.mirror.pkgbuild.com - Try to follow "filesystem hierarchy" standards for where to place configuration (id_ed25519) and "vendor data" (arch-boxes.asc and domain_template.xml) - Use a ed25519 key instead of RSA key - Only start the "update base image" server if network and DNS are up - Misc fixes and cleanups [1] !552
-
- Jul 29, 2022
-
-
Kristian Klausen authored
Upstream now provides a solution for setting the "staging dir" for fastzip[1]. [1] https://gitlab.com/gitlab-org/gitlab-runner/-/merge_requests/3130
-
Kristian Klausen authored
The runner was accidentally made "specific", which can't be reverted[1]. [1] https://gitlab.com/gitlab-org/gitlab/-/issues/16167
-
Kristian Klausen authored
For some workloads running in a container is too restrictive, ex: arch-boxes (loop device, filesystem mount, pacstrap) and archiso (pacstrap). Currently they both run a TCG accelerated QEMU VM, which is very slow and painful to work with. We should provide a better option to our users! This adds a hardware accelerated VM for this kinds of workloads, which is way faster and you can do whatever you like (mostly)! Fix #283
-
Kristian Klausen authored
-