revisions of isolation-check
This commit is contained in:
@@ -28,10 +28,12 @@ jobs:
|
||||
- name: Dumping environment variables
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "--- Check for parent variables ---"
|
||||
printenv | grep -Pi 'GITEA_RUNNER_REGISTRATION_FILE|GITEA_RUNNER_REGISTRATION_TOKEN_FILE|GITEA_RUNNER_REGISTRATION_TOKEN'
|
||||
echo "--- List all variables ---"
|
||||
printenv
|
||||
true
|
||||
|
||||
- name: Network routes and interfaces
|
||||
run: |
|
||||
@@ -45,6 +47,7 @@ jobs:
|
||||
- name: LAN reachability test
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "=== LAN REACHABILITY ==="
|
||||
for subnet in 192.168.0.1 192.168.1.1 10.0.0.1 172.16.0.1 172.17.0.1 \
|
||||
172.18.0.1 172.19.0.1 172.20.0.1 172.21.0.1 172.22.0.1 172.23.0.1 \
|
||||
@@ -62,12 +65,15 @@ jobs:
|
||||
- name: Check external IP
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "--- Checking external IP (https://ifconfig.me)"
|
||||
curl -s https://ifconfig.me
|
||||
true
|
||||
|
||||
- name: Host reachability sanity check
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "=== OUTBOUND TEST ==="
|
||||
curl -fsSL https://google.com >/dev/null && echo "Internet access OK" || echo "No internet access?"
|
||||
|
||||
@@ -80,6 +86,7 @@ jobs:
|
||||
- name: Process visibility
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "=== PROCESS VISIBILITY ==="
|
||||
ps aux | head -20
|
||||
ps aux | grep -E "dockerd|systemd|sshd|python" \
|
||||
@@ -89,6 +96,7 @@ jobs:
|
||||
- name: Privilege and device access
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "=== PRIVILEGE CHECK ==="
|
||||
id -Gn
|
||||
ls -l /dev | head -30
|
||||
@@ -100,6 +108,7 @@ jobs:
|
||||
- name: File system sanity check
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "=== FILESYSTEM ==="
|
||||
ls -1 /
|
||||
echo
|
||||
@@ -109,6 +118,7 @@ jobs:
|
||||
- name: Capability check
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "=== CAPABILITIES ==="
|
||||
capsh --print 2>/dev/null || echo "capsh not available"
|
||||
dmesg 2>&1 | head -5 && echo "!! dmesg readable !!" || echo "dmesg not accessible (good)"
|
||||
@@ -116,6 +126,7 @@ jobs:
|
||||
- name: Mount Info
|
||||
continue-on-error: true
|
||||
run: |
|
||||
set +e
|
||||
echo "=== Mount Info ==="
|
||||
findmnt -a
|
||||
|
||||
|
||||
Reference in New Issue
Block a user