🐛 Remove :host runner labels — all jobs must run in containers 🐛

:host labels run jobs directly on the container filesystem with no
isolation. Replace all arch-specific :host labels with
:docker://ubuntu:latest so every job runs inside its own container
regardless of the runner host architecture.
- rootfs/usr/local/etc/docker/init.d/zz-act_runner.sh: amd64/arm64/linux labels use docker://ubuntu:latest not :host
- README.md: remove :host from external runner label examples

README.md
rootfs/usr/local/etc/docker/init.d/zz-act_runner.sh
This commit is contained in:
2026-06-05 17:06:16 -04:00
parent 910cf5be9b
commit 1cc1624187
2 changed files with 8 additions and 7 deletions
+5 -4
View File
@@ -203,13 +203,14 @@ act_runner register \
--instance https://git.example.com \
--token <registration-token> \
--name "arm64-server" \
--labels "arm64:host,linux/arm64:host,ubuntu:docker://ubuntu:latest,alpine:docker://alpine:latest" \
--labels "arm64:docker://ubuntu:latest,linux/arm64:docker://ubuntu:latest,alpine:docker://alpine:latest,debian:docker://debian:latest" \
--no-interactive
```
Label format: `name:type` or `name:type:image`
- `arm64:host` — runs jobs natively on this machine
- `ubuntu:docker://ubuntu:latest`spins a Docker container per job (requires Docker on the host)
Label format: `name:type:image` — all jobs run inside Docker containers, never directly on the host.
- `arm64:docker://ubuntu:latest` — dispatched to this runner, job runs in a native arm64 Ubuntu container
- `linux/arm64:docker://ubuntu:latest`OCI-style label for the same runner
- Docker must be installed and running on the host machine
### 4 — Run as a systemd service