Doc/work_flow_tester
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

revisions of isolation-check

Browse Source
This commit is contained in:
Doc
2025-10-06 12:56:24 -04:00
parent de68b8e5e8
commit 096fd28c36
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
.gitea/workflows/isolation-check.yaml
View File

@@ -28,10 +28,12 @@ jobs:
- name: Dumping environment variables - name: Dumping environment variables
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "--- Check for parent variables ---" echo "--- Check for parent variables ---"
printenv | grep -Pi 'GITEA_RUNNER_REGISTRATION_FILE|GITEA_RUNNER_REGISTRATION_TOKEN_FILE|GITEA_RUNNER_REGISTRATION_TOKEN' printenv | grep -Pi 'GITEA_RUNNER_REGISTRATION_FILE|GITEA_RUNNER_REGISTRATION_TOKEN_FILE|GITEA_RUNNER_REGISTRATION_TOKEN'
echo "--- List all variables ---" echo "--- List all variables ---"
printenv printenv
true
- name: Network routes and interfaces - name: Network routes and interfaces
run: | run: |
@@ -45,6 +47,7 @@ jobs:
- name: LAN reachability test - name: LAN reachability test
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "=== LAN REACHABILITY ===" echo "=== LAN REACHABILITY ==="
for subnet in 192.168.0.1 192.168.1.1 10.0.0.1 172.16.0.1 172.17.0.1 \ for subnet in 192.168.0.1 192.168.1.1 10.0.0.1 172.16.0.1 172.17.0.1 \
172.18.0.1 172.19.0.1 172.20.0.1 172.21.0.1 172.22.0.1 172.23.0.1 \ 172.18.0.1 172.19.0.1 172.20.0.1 172.21.0.1 172.22.0.1 172.23.0.1 \
@@ -62,12 +65,15 @@ jobs:
- name: Check external IP - name: Check external IP
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "--- Checking external IP (https://ifconfig.me)" echo "--- Checking external IP (https://ifconfig.me)"
curl -s https://ifconfig.me curl -s https://ifconfig.me
true
- name: Host reachability sanity check - name: Host reachability sanity check
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "=== OUTBOUND TEST ===" echo "=== OUTBOUND TEST ==="
curl -fsSL https://google.com >/dev/null && echo "Internet access OK" || echo "No internet access?" curl -fsSL https://google.com >/dev/null && echo "Internet access OK" || echo "No internet access?"
@@ -80,6 +86,7 @@ jobs:
- name: Process visibility - name: Process visibility
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "=== PROCESS VISIBILITY ===" echo "=== PROCESS VISIBILITY ==="
ps aux | head -20 ps aux | head -20
ps aux | grep -E "dockerd|systemd|sshd|python" \ ps aux | grep -E "dockerd|systemd|sshd|python" \
@@ -89,6 +96,7 @@ jobs:
- name: Privilege and device access - name: Privilege and device access
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "=== PRIVILEGE CHECK ===" echo "=== PRIVILEGE CHECK ==="
id -Gn id -Gn
ls -l /dev | head -30 ls -l /dev | head -30
@@ -100,6 +108,7 @@ jobs:
- name: File system sanity check - name: File system sanity check
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "=== FILESYSTEM ===" echo "=== FILESYSTEM ==="
ls -1 / ls -1 /
echo echo
@@ -109,6 +118,7 @@ jobs:
- name: Capability check - name: Capability check
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "=== CAPABILITIES ===" echo "=== CAPABILITIES ==="
capsh --print 2>/dev/null || echo "capsh not available" capsh --print 2>/dev/null || echo "capsh not available"
dmesg 2>&1 | head -5 && echo "!! dmesg readable !!" || echo "dmesg not accessible (good)" dmesg 2>&1 | head -5 && echo "!! dmesg readable !!" || echo "dmesg not accessible (good)"
@@ -116,6 +126,7 @@ jobs:
- name: Mount Info - name: Mount Info
continue-on-error: true continue-on-error: true
run: | run: |
set +e
echo "=== Mount Info ===" echo "=== Mount Info ==="
findmnt -a findmnt -a