cesnimda
137 lines
6.0 KiB
JSON
137 lines
6.0 KiB
JSON
{
|
|
"schemaVersion": 1,
|
|
"observedUtc": "2026-10-24T06:49:22Z",
|
|
"verdict": "BLOCKED",
|
|
"scope": "Hosted MariaDB runner isolation and qualification only",
|
|
"baselineSha": "549b2cba5a791862ba3f854312ea819a86dc42a0",
|
|
"giteaVersion": "1.26.0",
|
|
"apiPermissions": {
|
|
"repository": {
|
|
"admin": true,
|
|
"push": true,
|
|
"pull": true
|
|
},
|
|
"userHttpStatus": 403,
|
|
"instanceRunnersHttpStatus": 403
|
|
},
|
|
"repositoryRunner": {
|
|
"id": 3,
|
|
"name": "pi-runner-1",
|
|
"status": "offline",
|
|
"labels": [
|
|
"ubuntu-latest",
|
|
"ubuntu-22.04"
|
|
],
|
|
"version": null
|
|
},
|
|
"baselineRun": {
|
|
"id": 844,
|
|
"jobId": 1734,
|
|
"runnerId": 5,
|
|
"runnerName": "Live-Runner",
|
|
"runnerReportedVersion": "v0.4.1",
|
|
"label": "ubuntu-latest",
|
|
"conclusion": "failure",
|
|
"jobImage": "node:20-bookworm",
|
|
"mergedNetworkMode": "host",
|
|
"mergedDockerSocketMount": true,
|
|
"mergedPrivileged": false,
|
|
"publishedPorts": [],
|
|
"sdkInstalled": "9.0.317",
|
|
"pythonGuardTests": {
|
|
"passed": 5,
|
|
"kind": "unit guards; mocked infrastructure"
|
|
},
|
|
"dockerFailure": "command not found",
|
|
"dockerExitCode": 127,
|
|
"mariaDbIntegrationExecuted": false,
|
|
"integrationArtifactUploaded": false,
|
|
"stepMetadataCaveat": "API marks all steps failure; raw log establishes SDK installation and five passing guard tests"
|
|
},
|
|
"officialSourceResearch": {
|
|
"runnerTag": "v0.4.1",
|
|
"runnerCommit": "9aafec169b7ebf3d71df2b06780868fb552b435e",
|
|
"executionEngine": "gitea.com/gitea/act v0.261.10",
|
|
"installedBinaryMatchedToSource": false,
|
|
"sourceCapability": "Native services with generated network only when configured network is empty; socket suppression requires operator configuration; normal cleanup attempts removal",
|
|
"effectivePrivateNetworkingProven": false,
|
|
"runtimeLifecycleProven": false
|
|
},
|
|
"blockers": [
|
|
"Effective job uses host networking and host Docker socket; daemon ownership and production separation unknown",
|
|
"Actual runner is absent from repository-only runner listing; instance API forbidden",
|
|
"Installed runner build identity and effective private service configuration unverified",
|
|
"Success/failure/cancellation/interruption service cleanup unproven",
|
|
"Current test transport deliberately accepts only loopback; private service transport not implemented or approved"
|
|
],
|
|
"workflowChange": {
|
|
"addedPushBranch": "fix/p9-ci-and-requalification",
|
|
"originalPushBranchRetained": true,
|
|
"unconditionalIsolationBlockBeforeDocker": true,
|
|
"isolationBlockIsFirstStep": true,
|
|
"variableBypass": false,
|
|
"nativeServicesAdded": false,
|
|
"runnerConfigurationChanged": false,
|
|
"deploymentWorkflowsChanged": false,
|
|
"hostedRunStartedByInvestigation": false
|
|
},
|
|
"freshHostedBlockerVerification": {
|
|
"commit": "75cd04cfc2da0837b556bdcf1424846349c4c73d",
|
|
"runId": 847,
|
|
"jobId": 1737,
|
|
"runnerId": 5,
|
|
"runnerName": "Live-Runner",
|
|
"status": "completed",
|
|
"conclusion": "failure",
|
|
"blockedMessageUtc": "2026-10-24T06:56:14Z",
|
|
"firstStep": "Require verified runner isolation",
|
|
"explicitBlockedMessage": true,
|
|
"exitCode": 1,
|
|
"checkoutExecuted": false,
|
|
"sdkSetupExecuted": false,
|
|
"repositoryTestsExecuted": false,
|
|
"workflowDockerComposeCommandsExecuted": false,
|
|
"mariaDbServiceStarted": false,
|
|
"integrationArtifactUploaded": false,
|
|
"runnerPreparationCaveat": "Runner created its job container with existing host socket/network and prefetched actions before the first step; preflight cannot prevent runner preparation",
|
|
"jobContainerAndWorkspaceRemovalLogged": true,
|
|
"privateServiceLifecycleProven": false,
|
|
"qualification": "Expected fail-closed blocker verified; hosted MariaDB remains BLOCKED"
|
|
},
|
|
"futureImage": "mariadb:12.2.2@sha256:42a27baaba3e8f3f0159d16381d5a7156661aa91dcc65f663cabb6a6f9503c00",
|
|
"nextAction": "Infrastructure owner supplies dedicated-runner identity, effective private network/socket suppression and complete lifecycle proof; repository owner reviews transport/workflow before enabling execution",
|
|
"rawEvidenceSha256": {
|
|
".artifacts/mariadb/requal-ci-api.json": "1ef25fa5433e8151d3ac6c6b368ba0212410cfca8033e2fb9620d5e3c33d8bc0",
|
|
".artifacts/mariadb/requal-ci-api-847.json": "9ed3863cd897c52bcc87d09956464813d16c36e744d465a8cfc41bd6a4327db9",
|
|
".artifacts/mariadb/hosted-ci-847.log": "251b863b10d0ec3d8a94103367ae41d5d259cc7cf6e103870d219b4910545c68",
|
|
".artifacts/mariadb/hosted-ci-843.log": "47ba05d12f08eb7a16a5649f71dde18cd582176a2bed818f3e045932ec025891",
|
|
".artifacts/mariadb/hosted-ci-844.log": "e03d82a3d24329482b9acd66866bdc500244a85af89932691d09f00d881fdaf9",
|
|
".artifacts/mariadb/act-runner-v0.4.1/go.mod": "9863a6049f423c537b02caf6307c8bb6c7dcfe809fb314193b1856274a160824",
|
|
".artifacts/mariadb/act-runner-v0.4.1/internal_pkg_config_config.example.yaml": "e47d046dc368eb85b35665b4a5dba57ce0be4053c665ff737916a7561f7337fa",
|
|
".artifacts/mariadb/act-runner-v0.4.1/runner.go": "857b163f42aeb350aa32fbdc884e8d2ceb738d77e8a25504ac38c3e0035ab590",
|
|
".artifacts/mariadb/act-runner-v0.4.1/pkg_runner_run_context.go": "45aea88466bc40c1cddad7ee6cfe98444ffd225a719683ee319c909075466c2c"
|
|
},
|
|
"latestInspectedHostedRun": {
|
|
"observedUtc": "2026-10-24T11:24:57.184119+00:00",
|
|
"runId": 849,
|
|
"jobId": 1739,
|
|
"sourceCommit": "1a1b7c82213c24fbbc9bd4e1553a92f4c76eabd9",
|
|
"runnerId": 5,
|
|
"runnerName": "Live-Runner",
|
|
"verdict": "BLOCKED",
|
|
"actualGuardExitCode": 1,
|
|
"mariaDbExecution": false,
|
|
"mergedHostNetwork": true,
|
|
"mergedDockerSocketBind": true,
|
|
"apiStepStatusCaveat": "API marks downstream steps failure; raw log explicitly confirms checkout/setup main steps skipped. No database command executed.",
|
|
"log": {
|
|
"path": ".artifacts/p9-requal-01/hosted-849.log",
|
|
"sha256": "4aeee7452db935ecf01afad44d2812e7fb9160239317c87d6a3d429cbdd128de"
|
|
},
|
|
"apiEvidence": {
|
|
"path": ".artifacts/p9-requal-01/hosted-prepublication.json",
|
|
"sha256": "a87ecca391c7617ec05efa64776f9ff365b1afe296c76eb958e52bbfee0646a1"
|
|
}
|
|
}
|
|
}
|