Post #2098486
2026-04-15 12:06 UTC
@halfbyte @marijn build docker/oci images on Codeberg is a PITA. I have given up for now to look for a solution.
I don't recall exactly what the reason was, that you cannot use Docker on Codeberg with Forgejo Actions, but it was for security reasons to isolate the host from jobs.
The thread is PRs from others, but also supply chain isolation. You don't want your next compromised npm package to be able to get persisted on your CI host.
Replies (1)
-
@tisba@ruby.social 2026-04-15 12:12
@halfbyte @marijn It’s a little outside my area of expertise, but I'd like to see some kind of microVM-based setup, so that you can do basically what you want in your CI job, with much better levels of isolation.