🐛 Remove :host runner labels — all jobs must run in containers 🐛

:host labels run jobs directly on the container filesystem with no
isolation. Replace all arch-specific :host labels with
:docker://ubuntu:latest so every job runs inside its own container
regardless of the runner host architecture.
- rootfs/usr/local/etc/docker/init.d/zz-act_runner.sh: amd64/arm64/linux labels use docker://ubuntu:latest not :host
- README.md: remove :host from external runner label examples

README.md
rootfs/usr/local/etc/docker/init.d/zz-act_runner.sh
This commit is contained in:
2026-06-05 17:06:16 -04:00
parent 910cf5be9b
commit 1cc1624187
2 changed files with 8 additions and 7 deletions
@@ -270,9 +270,9 @@ case "$_HOST_ARCH" in
aarch64) _ARCH_LABEL="arm64" ;;
*) _ARCH_LABEL="$_HOST_ARCH" ;;
esac
RUNNER_LABELS="${_ARCH_LABEL}:host,"
RUNNER_LABELS+="linux:host,"
RUNNER_LABELS+="linux/${_ARCH_LABEL}:host,"
RUNNER_LABELS="${_ARCH_LABEL}:docker://ubuntu:latest,"
RUNNER_LABELS+="linux:docker://ubuntu:latest,"
RUNNER_LABELS+="linux/${_ARCH_LABEL}:docker://ubuntu:latest,"
RUNNER_LABELS+="node14:docker://node:14,"
RUNNER_LABELS+="node16:docker://node:16,"
RUNNER_LABELS+="node18:docker://node:18,"