Skip to content

ci: rotate ec2-github-runner SHA to Phase 4 safe tip#183

Closed
kurok wants to merge 1 commit into
masterfrom
fix/rotate-runner-phase4-safe
Closed

ci: rotate ec2-github-runner SHA to Phase 4 safe tip#183
kurok wants to merge 1 commit into
masterfrom
fix/rotate-runner-phase4-safe

Conversation

@kurok
Copy link
Copy Markdown
Collaborator

@kurok kurok commented Apr 21, 2026

Second attempt at the Phase 4 dogfood after #182 failed. The action-repo PR #19 reverted the non-root user transition that broke registration and kept everything else from Phase 4. This pin rotation (a1bd2f9 → 78f98d1) is the verification.

namecheap/ec2-github-runner#19 merged after #18's non-root change
broke dogfood on #182 (runner registration timeout). The new tip
keeps Phase 4's safe subset: runner-version input, --ephemeral /
--unattended / --disableupdate on config.sh, SHA-256 verification
of the runner tarball, set -euo pipefail. Non-root runner user
reverted for separate investigation.

Rotation: a1bd2f9 (Phase 1) -> 78f98d1 (Phase 4 safe).
Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 21, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.76%. Comparing base (7fd0e00) to head (ff3d042).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #183   +/-   ##
=======================================
  Coverage   87.76%   87.76%           
=======================================
  Files           4        4           
  Lines         711      711           
=======================================
  Hits          624      624           
  Misses         52       52           
  Partials       35       35           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@kurok
Copy link
Copy Markdown
Collaborator Author

kurok commented Apr 21, 2026

Closing — Phase 4 'safe' also failed registration timeout. The breaker is in one of the five Phase-4 changes kept after the non-root revert, not in the non-root move itself.

Full rollback of Phase 4 up on action repo at #21 — restores Phase 1 bootstrap byte-for-byte. Fresh dogfood PR will open against that tip once #21 merges.

Phase 4 work moves to individual small PRs, one change per dogfood, so the next failure isolates itself.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant