Re: Changes to GitLab runners configuration

Jordan Petridis via desktop-devel-list <[email protected]>
Newsgroups gmane.comp.gnome.desktop
Message-ID <m1su8EzLGdoH1FAdJeLnnxxpnE5YWNxmCyuqRhPl55j2RUxge6ijfU3SWSa9NfL_pJudT4GUWppDxcw320i3Zr5yj84Yxpv40rHm1-7Rrtg=@alatiera.com>
On Sunday, March 22, 2020 12:56 AM, Michael Catanzaro <[email protected]> wrote:

> On Sat, Mar 21, 2020 at 1:21 pm, Christian Hergert
> [email protected] wrote:
> 

> > Those words sound incompatible to me in the same way that if you have
> > access to Linux's perf, you can sniff pretty much any data you want on
> > the system.
> 

> We're talking about CI runners... we only need privileged access inside
> the container running our CI, not outside it. Yes?

It doesn't take much effort to get access outside a privilledged contianer sadly. But maybe we can have a shared 'privilledged' runner that's setup in a VM and gets wiped daily or such for the jobs outside the GNOME group that need it, such as forked repos.


Jordan

_______________________________________________
desktop-devel-list mailing list
[email protected]
https://mail.gnome.org/mailman/listinfo/desktop-devel-list
publickey - [email protected] - 0x0BDAD30B.asc (application/pgp-keys, 3.1 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: OpenPGP.js v4.10.1
Comment: https://openpgpjs.org
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=YXLx
-----END PGP PUBLIC KEY BLOCK-----
signature.asc (application/pgp-signature, 823 B)
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
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=eRjF
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.