docs(security): remove SSH username/host specifics from public docs

ci: trigger CI after runner-image registry auth fix
fix(ci): correct image digest separator (@ not :)
2026-05-02 14:43:14 +02:00 · 2026-05-02 12:58:51 +02:00 · 2026-04-30 12:20:19 +02:00 · 2026-04-30 12:17:34 +02:00 · 2026-04-30 11:53:41 +02:00 · 2026-04-30 00:17:05 +02:00
4 changed files with 5 additions and 5 deletions
@@ -10,9 +10,9 @@ jobs:
  ci:
    runs-on: ubuntu-latest
    # Bespoke runner image (Ubuntu 24.04 + make + git + node + go via
-    # actions/setup-go). See git.librete.ch/libretech/runner-image.
+    # actions/setup-go). See git.librete.ch/public/runner-image.
    container:
-      image: git.librete.ch/libretech/runner-image:v1
+      image: git.librete.ch/public/runner-image:v0.1.0@sha256:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5
    timeout-minutes: 5
    steps:
      - name: Checkout
@@ -34,7 +34,7 @@ jobs:
    # + perl + ssh, runner user pre-joined to docker gid 998 so the
    # auto-mounted /var/run/docker.sock is writable without --user root.
    container:
-      image: git.librete.ch/libretech/runner-image:v1
+      image: git.librete.ch/public/runner-image:v0.1.0@sha256:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5
    timeout-minutes: 20
    if: ${{ vars.DEPLOY_ENABLED == 'true' }}
    steps:
@@ -5,7 +5,7 @@ Cloud-native multi-tenant notes application built on Notesium (MIT).
 ## Project

 - Repo: https://git.librete.ch/public/librenotes
- Remote: `https://git.librete.ch/public/librenotes.git`
+- Remote: `ssh://git.librete.ch:41240/public/librenotes.git` (configure SSH user in `~/.ssh/config`)
 - Stack: Go backend (forked from Notesium), vanilla JS frontend
 - License: MIT (inherited from Notesium)

@@ -70,7 +70,7 @@ docker compose -f compose.yaml -f compose.netcup.yaml up -d

 Workflows run on the netcup `act_runner` (see `runner/` stack in
 the netcup umbrella). Both `ci.yml` and `deploy.yml` declare
-`container: image: git.librete.ch/libretech/runner-image:v1` —
+`container: image: git.librete.ch/public/runner-image:v1` —
 a bespoke Ubuntu 24.04 image (built and signed by us, hosted on
 the same Gitea instance) that bundles `git`, `make`, `node`,
 `perl`, `ssh`, and a docker CLI. The image's `runner` user is
Author	SHA1	Message	Date
libretech	8b3d53b3c5	docs(security): remove SSH username/host specifics from public docs	2026-05-02 14:43:14 +02:00
libretech	61f5133388	ci: trigger CI after runner-image registry auth fix	2026-05-02 12:58:51 +02:00
libretech	2b148e9531	fix(ci): correct image digest separator (@ not :)	2026-04-30 12:20:19 +02:00
libretech	6cf99ab280	ci: digest-pin runner-image v0.1.0 (was :v2) Drops the ad-hoc :vN tag scheme — see runner-image#semver. Consumers now reference tag + digest so the resolved image is byte-identical across runs.	2026-04-30 12:17:34 +02:00
libretech	3ded11283b	ci: update runner-image path to public/ namespace The runner-image repo moved from libretech/ to public/ on Gitea; ci.yml and deploy.yml + docs reference public/runner-image.	2026-04-30 11:53:41 +02:00
libretech	1374f55783	ci: pin runner-image v2 (adds gcc for cgo, fixes go test -race) v1 lacked gcc, so 'go test -race' (in Makefile) failed in CI with 'go: -race requires cgo'. v2 of the runner image installs gcc, libc6-dev, and pkg-config.	2026-04-30 00:17:05 +02:00