Gitea/Runner
4
0
Fork 0
mirror of https://gitea.com/gitea/runner.git synced 2026-09-03 01:47:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: automatically add the workspace mount to allowed volumes (#1203)

Browse Source 
Automatically allow workspace mounts in `valid_volumes` for the mounts done via `bind_workdir`, this obsoletes the need for `/workspace/**` or other insecure configurations which would expose workspaces between tasks.

Reviewed-on: https://gitea.com/gitea/runner/pulls/1203
Reviewed-by: bircni <bircni@icloud.com>
Co-authored-by: silverwind <me@silverwind.io>
This commit is contained in:
silverwind
2026-09-02 20:32:41 +00:00
committed by silverwind
parent b9018aca31
commit fca6b44c60
3 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/pkg/config/config.example.yaml
+1 -1
View File
@@ -260,7 +260,7 @@ container:
# This is required for Docker-in-Docker (DinD) setups when jobs use docker compose
# with bind mounts (e.g., ".:/app"), as volume-based workspaces are not accessible
# from the DinD daemon's filesystem. When enabled, ensure the workspace parent
# directory is also mounted into the runner container and listed in valid_volumes.
# directory is also mounted into the runner container.
#bind_workdir: false
# How long a job waits for a service container that declares a healthcheck to become
# healthy. A negative value (e.g. -1s) starts the steps without waiting.