Skip to content

ci: rotate ec2-github-runner SHA to Phase 4 retry tip (non-root + --ephemeral)#188

Merged
kurok merged 1 commit into
masterfrom
fix/rotate-runner-phase4-retry
Apr 21, 2026
Merged

ci: rotate ec2-github-runner SHA to Phase 4 retry tip (non-root + --ephemeral)#188
kurok merged 1 commit into
masterfrom
fix/rotate-runner-phase4-retry

Conversation

@kurok
Copy link
Copy Markdown
Collaborator

@kurok kurok commented Apr 21, 2026

Dogfood rotation for namecheap/ec2-github-runner#26. Pins both refs to 0fdd401 — Phase 4 retry with the .sha256 404 bug fixed via a hardcoded checksum table.

High-stakes rotation — Phase 4 failed twice before on the provider (see #182, #183 in the closed list). This time:

  1. The actual failing line (curl .sha256 | awk under set -e) is gone; replaced with a table lookup in-JS + shell sha256sum -c against a baked-in expected hash.
  2. The checksum table is cross-checked against upstream's release body on every PR to ec2-github-runner via an overhauled verify-runner-url job.
  3. If something new breaks, I have the aws ec2 get-console-output --latest diagnostic recipe ready.

Everything else from the original Phase 4 ships here: non-root runner user (no more RUNNER_ALLOW_RUNASROOT=1), --ephemeral / --unattended / --disableupdate on config.sh, new optional runner-version input, set -euo pipefail.

…phemeral)

namecheap/ec2-github-runner#26 merged. Phase 4 retry lands all
requirements from the original issue #10, with the .sha256 sidecar
404 bug fixed by a hardcoded {arch-version → sha256} table kept in
sync with upstream by a new CI check.

Rotation: 6bb148b (Phase 6.a, IMDSv2) -> 0fdd401 (Phase 4 retry).

Critical dogfood. If start-runner fails, I have the console-output
recipe ready — diagnosis turnaround is minutes, not a day.

Signed-off-by: yuriyryabikov <22548029+kurok@users.noreply.github.com>
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 21, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.76%. Comparing base (0d8dde5) to head (4a5a654).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #188   +/-   ##
=======================================
  Coverage   87.76%   87.76%           
=======================================
  Files           4        4           
  Lines         711      711           
=======================================
  Hits          624      624           
  Misses         52       52           
  Partials       35       35           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@kurok kurok merged commit 26a6323 into master Apr 21, 2026
12 checks passed
@kurok kurok deleted the fix/rotate-runner-phase4-retry branch April 21, 2026 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant