Re: Changes to GitLab runners configuration
Jordan Petridis via desktop-devel-list <[email protected]>
| Newsgroups | gmane.comp.gnome.desktop |
|---|---|
| Message-ID | <m1su8EzLGdoH1FAdJeLnnxxpnE5YWNxmCyuqRhPl55j2RUxge6ijfU3SWSa9NfL_pJudT4GUWppDxcw320i3Zr5yj84Yxpv40rHm1-7Rrtg=@alatiera.com> |
On Sunday, March 22, 2020 12:56 AM, Michael Catanzaro <[email protected]> wrote: > On Sat, Mar 21, 2020 at 1:21 pm, Christian Hergert > [email protected] wrote: > > > Those words sound incompatible to me in the same way that if you have > > access to Linux's perf, you can sniff pretty much any data you want on > > the system. > > We're talking about CI runners... we only need privileged access inside > the container running our CI, not outside it. Yes? It doesn't take much effort to get access outside a privilledged contianer sadly. But maybe we can have a shared 'privilledged' runner that's setup in a VM and gets wiped daily or such for the jobs outside the GNOME group that need it, such as forked repos. Jordan _______________________________________________ desktop-devel-list mailing list [email protected] https://mail.gnome.org/mailman/listinfo/desktop-devel-list
publickey - [email protected] - 0x0BDAD30B.asc
(application/pgp-keys, 3.1 KB)
-----BEGIN PGP PUBLIC KEY BLOCK----- Version: OpenPGP.js v4.10.1 Comment: https://openpgpjs.org xsFNBFyGXlgBEADXKjn14V8AZP45OJoAuSibWi7woHU7e+qFLcQCUpSfUPXG 58TX9w4pg66/CBCSLf/4AjQx+BX7HEikl2iqSbysQbsx10VuCq5jeKhi3VZV ZyOTEBABCxwYcYK8FO4GtGGjW79MkPyRvXqkGSjVTB6wzA96Ma8wdDTkbpCe fOjUCvRdrmT4CrP0aszuFo9IrO222qFXVgKaBhu2qiy5qQL7g1gLqaFJ61Hz saO+nvkweZKnG618TRbyYGO8XQb+wBUUd8uGhQiY0jlB8+ryAadDSxa0eU3M TElXVegUXMNs/H2fWrBUCxLRfv2Q6v1vCGELTQne0EtKtdTcp273EqZUubfB HLCdGuBxkShGFi8qvtboEWaNGelbYwxylWo18USIXZV4MguQgdsCPJ1FB3B2 HpRGmrJa84DAOhN5yPq638BcTiLFZMOSNPR5HdIK5ziCYrMn1BnHPCnXBAPo TiZRsCYGeBCqa3sI9Znoz2DJKxduDolXWcOYIoSF7LqV4fqezn1yjEK4AKZL Zr5I3+P3fs5DE0L6eYducdulLfaO+ESnCYU3lvZa06V8Uq96pul5LGtftHFO uBWvYlfzgxgcc9epl5RklZ7kRFmJKD/AxUvt3zE0xD2pjFb3wY6XYJSjFJ7u ma+TRrF9dRjYkyEfgxYiazXmShN6fgqv+pjVHQARAQABzSsiam9yZGFuQGFs YXRpZXJhLmNvbSIgPGpvcmRhbkBhbGF0aWVyYS5jb20+wsF1BBABCAAfBQJc hl5YBgsJBwgDAgQVCAoCAxYCAQIZAQIbAwIeAQAKCRB0N45dEqKS1A3xD/9a MSD407OKTDWqCe3YGBLu3erX21uv4+mMiWMawyX4BChQLouajAGfcLFADV2k EdHAQmuYnwuOb4uqZ7XWEgPZg8s27i3nNiEJo25NbEkKy1diR2k52u+LJ0wr qVqpZAy99NHEigTQdZ3+sKw4NxNwIhOk/HlV/Obobi/WrMSLrM6Hex5LBax/ zBC4dqCtSvsaFLA4vkp4eg9d/NegX9Ngap4V1dISMRCbfxonxiAxZXCDgJpc 2owUEEV19pAxtOC6rTKwcMfEVD7A/OAZW+RTnAt2mBnY10O97Uh7DvKLR9kd ahJIkNx4s7nqkIoPN5radd86YoLc+rPy/+enrzFbWHdMt48BEwHgukcLQYJ6 rdqqZpTEOOrZ2hbzXPQxsQEQBFa914wK9kKvw6/yGzVlStdT70jQLJmioHnz Ughms+/e13JxKLg7K1nMGlkZRC4BCdbuh6NSB4cY/Hw3sB7TTZP7hyYxkgjV AL2bPh9e5YRMoIVfFMa9+qZBfIdJ1BX7BAqOe2Vc06aUAKrQMHYchoNoP1KO M5MPm4Q0IqfgYwFituWJEngqFuSdPRi5sVomu9FbK8XlvaECL1WZx7ZF92ff Ss3UxJFOnriB0L5SOpdMYzS3r2QXLiG7rWjwDlARCMS4hpyiflKEREIXwsFV 3q4t5dWn55NMyKAjAmLq8M7BTQRchl5YARAAstzmgNXsWgsc+fmcM3p7gq34 i+0sQsh42B/0nLyoyoAriZ7BD0P3yM4QYuc/gUtryNvylfi4Q0lPTcI0xZlG nrnbYn6Bc5HXZo65TdFemNa7rR9CshS9J3txHciovpPWQzxC+/qgV0cTTH1X lh+/zgJWuPI7RWHXOXmoZsf11luHuwuBQpDut9CrzVPCRDSfBVtYFUUL90hu QZUX5xl0Ogk4pLrljuAniZoJHb1SbIHvUdBHC3pdzUZXN07rWWHpCIQ2Y8MN BV0Qo2pVdw4PIrNcgbKCbQJfl7d8cWeXMxuv9qFCAMO0eIyA6QRKJoXbKWn4 el0jM9ZKYBi6FKf8V+ZbENmdOzWM4kAoxEMmQUdU5ZvQDbQ4JVqliX6bgzRm wql1JIJO286CEuiIwx7lREaNbRVb+3/dgCRZmpwcMnCom4ajpC3GMjpf+myM v0CZj/gPub42NWQdM3o1ShKX8KLyBh8FzSDoRnGNqQrbLpwK53+Vh/oUyzTh F6iQ02aoBMvbViDnynYtiM/zP2ApdG+QW5oOjr3T1QUPT3u/DXPx1wxCpdc6 7uhbOnbm1oIdphnMZh1NeILCCMun51oWqKLvfos25fn9HO/Nv0ieUQOBNvLu WnYcQtOnSydnu69BCCtcNVrKWJzPmudRvAItAihbLcx+YdFafIrfqfECyW0A EQEAAcLBXwQYAQgACQUCXIZeWAIbDAAKCRB0N45dEqKS1ErBEACVxWJboPjq K4NC4pMeHOYDh7FSVKXLKEqwedlxLzuA3e0FtS0Yg79QKhG49+ZUDbNkdUfr JkOF6wTPXNvgAZ6OrTPdKoVmJPnZHy6bG1kToGpLwCMIdbfKdaZ4U0giWvxP Iy+zKT2+jZrPdEmdeZtJKUyMYg/JIywWFKR63IghaAYJipHu/gwfQBWICfVC Xi2l0jUUEiXts+cn9YUaGF1mghXoxjHiJ+9hunett0LKiNIfOBNiG7EVklN4 m+FLz+W9Y+mjWZ7zg5J2HOODZCoQe+3XEE2vXkYHJnOAXrmRDTOHgwP4DQ3g B9zNmwYgYnHOArxwNPPvdVeb2a8WxUKUsZRONw+62IEbheUWErnr+CSh0VJG 1QyfLZBx03ZcD56QrBSYOaNmTNihO0rqJEIvMSwaFZu5kic5m17AHGFjMFqE Qc+xx52fk2GiQGDv7FuvwfBQUYBsYhysmzF4++2TlLcG/mXeRxDeqWsUxj4Q BOVnvDVP8tYvcyV5Qy7tw8ZCvsSevjzIyC1Ks9Mlsd26UhHz+EehM1C5VKvn 8nl4gKRG8HXMSiwCr7OiA2PSKLjvUhEGPI3tZWhHHqhhGPNL4eqW0NjPilxU ztzEPkewaFd/thkNdqcUY7vvOWC+eTpoG7qz9DMh8K1rJgtAWS49H8fHfEtr ERuc7zO3VRTFoQ== =YXLx -----END PGP PUBLIC KEY BLOCK-----
signature.asc
(application/pgp-signature, 823 B)
-----BEGIN PGP SIGNATURE----- Version: ProtonMail wsFcBAEBCAAGBQJefJ10AAoJEHQ3jl0SopLUa00P/jH90fseClUOWQy4BRPc qqTE5duzZ8k03k/ZkuNs9+f4D4bl9qllZ6+rRTBtIT2l63nYd+eW8/zwLPAj a2h9nMLS1Q55G1Nb3YWtnqxV6Nkhm4zIAMncnhyr3TwmAez1EbI/Gclb/XV2 LoQAm4G1aZNjDvVubGYRd2wFWfGXeOeK7I+FYUn9W956DK0EUl3ZsXy7mFfd k8pecHLgGGMIlpJ2UEF44hfR6mO2Suv5aIE2FrcAVgjYmNeXN3jPYp8WAYMc 6DY0gUqgIrx2bhdOlMhBCyY9CmvA/2JiAlMANk8cStQm2bFNyCikc3MRBgrz 9sh6aLt+fJDtiSxH3LWUlHU9XWYJ1KXD8RCCfrWtS3G7YDYKWkWVqBtjJNAX 87d27OTMkXUyHq+XvZdTgATxz6aagU1TaEtLIaZ6cvlB4XO9Uoy5cG8QoC7W sK9DizR69S/uqFCrQlH7VCAxfReYe56sk/wwX37DJwm3ub3KbN4ol+kRhb+D U6i1Ci49deTlmHQ4eouQKFlSTAKe+fzIjJBv600CgtNrbA2uExHUHE2FqPqj /UtI6bnZg4cqB9ZStXPyCBNQ2VHpyqU7vQxdgixePFK0rWtM/G0yeyA78tr3 hDiYwsDKkAdwDqR3ksaOrUYHye70jXBRUQFSQao+hrAdHm1jI30stS2wM/yP 359u =eRjF -----END PGP SIGNATURE-----