Audit the remaining repositories for runner egress exposure #788

New issue

Open

opened 2026-08-11 23:35:16 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-08-11 23:35:16 +00:00

Member

Four repositories were checked while investigating the pre-commit network
failures: deploy, sirens-echo, agentic-os, infrastructure. Roughly twenty were
not.

Every repository whose CI runs runs-on: docker and fetches from the network
takes the same DinD path. website, eco-app, ward, ward-mcp, cli-guard, atlas,
galaxy-gen, voice-corpus, steam-ops, eco-mods and the rest are unmeasured.

Scope

Per repository, record whether CI fetches from the network, whether it caches,
and whether it opts into the egress proxy. The MTU fix would cover all of them
at once, so this is mainly worth doing to size the problem and to catch
repositories that need neither.

Four repositories were checked while investigating the pre-commit network failures: deploy, sirens-echo, agentic-os, infrastructure. Roughly twenty were not. Every repository whose CI runs `runs-on: docker` and fetches from the network takes the same DinD path. website, eco-app, ward, ward-mcp, cli-guard, atlas, galaxy-gen, voice-corpus, steam-ops, eco-mods and the rest are unmeasured. ## Scope Per repository, record whether CI fetches from the network, whether it caches, and whether it opts into the egress proxy. The MTU fix would cover all of them at once, so this is mainly worth doing to size the problem and to catch repositories that need neither.

coilyco-ops referenced this issue

2026-08-14 05:10:02 +00:00

galaxy-gen CI has been red since 03:04 today: rustup downloads time out on the gaming runner, the #783 symptom class is back #824

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

coilyco-flight-deck/infrastructure#788

No description provided.

Rows
Columns