From 0dfdbd46c8f94e2220a327945465dd353accdc66 Mon Sep 17 00:00:00 2001 From: panxiao81 Date: Wed, 16 Sep 2026 15:57:15 +0000 Subject: [PATCH] =?UTF-8?q?=E5=8D=87=E7=BA=A7=E5=8A=A8=E6=80=81=20Runner?= =?UTF-8?q?=20=E5=88=B0=203.5.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 3 ++- container/runner.Dockerfile | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index fc50461..e292367 100644 --- a/README.md +++ b/README.md @@ -25,7 +25,8 @@ runs-on: [self-hosted, vm] - `guest-runner`：在 guest 中领取一次性 runner registration token，注册 ephemeral runner，执行一个 job 后关机。 - `pod-worker`：在 Kubernetes 中创建一次性 privileged Pod；Pod 内的 workflow 使用 - host executor，Docker、BuildKit 和 kind 等工具由 pipeline 按需 setup。 + host executor，Docker、BuildKit 和 kind 等工具由 pipeline 按需 setup。Runner 固定在 + 支持原生 job hooks 的 3.x 版本，在 workflow 第一步前等待实际任务对应的 SVID。 - `jwt-broker`：早期共享 Kubernetes runner 的过渡实验；目标架构不部署它，每个 动态 Pod 或 VM 直接取得自己的 SPIFFE 身份。 diff --git a/container/runner.Dockerfile b/container/runner.Dockerfile index f354c49..5c4ae30 100644 --- a/container/runner.Dockerfile +++ b/container/runner.Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/spiffe/spire-agent:1.15.3@sha256:41b0dcd8b258a69db9e2768292a060766fb76fd866e4bc925849981ea1b825ff AS spire -FROM docker.io/gitea/runner:2@sha256:66d80966792e621c9761c47919644198d35fd1c297e9a01e69ed3c1ae37db0c7 +FROM docker.io/gitea/runner:3.5.0@sha256:66b7da94dc7dcadb2e076bec6928221336a9a637196399281c4b766fe1288242 USER root COPY --from=spire /opt/spire/bin/spire-agent /opt/spire/bin/spire-agent COPY config/runner.yaml /etc/gitea-runner/config.yaml