Post #1805290
2026-04-30 11:23 UTC
To the folks running #forgejo: How are you running your runners safely?
I don’t want to run them on docker on a shared system in case some npm script breaks out, but spinning up an entire VM seems like a lot of work.
Share your experiences please 🙏
cc @forgejo@floss.social
Replies (3)
-
@maswan@mastodon.acc.sunet.se 2026-04-30 11:27
@jorijn@toot.community @forgejo@floss.social This seems like a resaonable approach: https://social.treehouse.systems/@whitequark/116493092831461657
-
@dhd6@jasette.facil.services 2026-05-03 15:05
@jorijn@toot.community @forgejo@floss.social rootless Podman (the default) works really well but doesn't have the security of a full VM... Easy to set up as well: https://forgejo.org/docs/next/admin/actions/installation/binary/
-
@dhd6@jasette.facil.services 2026-05-03 15:06
@jorijn@toot.community @forgejo@floss.social I suppose you could have a persistently running VM and spawn containers inside that 😀