From de68b8e5e884efe08a201e36f16ea8529a7b583b Mon Sep 17 00:00:00 2001 From: Doc Date: Mon, 6 Oct 2025 12:50:15 -0400 Subject: [PATCH] revisions of isolation-check --- .gitea/workflows/isolation-check.yaml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/isolation-check.yaml b/.gitea/workflows/isolation-check.yaml index 1b8f3b6..b01fea5 100644 --- a/.gitea/workflows/isolation-check.yaml +++ b/.gitea/workflows/isolation-check.yaml @@ -13,7 +13,7 @@ jobs: apt-get update -y DEBIAN_FRONTEND=noninteractive apt-get install -y \ curl iproute2 net-tools util-linux procps coreutils \ - iputils-ping dnsutils libcap2-bin + iputils-ping dnsutils libcap2-bin traceroute - name: Basic system info run: | @@ -26,6 +26,7 @@ jobs: df -h - name: Dumping environment variables + continue-on-error: true run: | echo "--- Check for parent variables ---" printenv | grep -Pi 'GITEA_RUNNER_REGISTRATION_FILE|GITEA_RUNNER_REGISTRATION_TOKEN_FILE|GITEA_RUNNER_REGISTRATION_TOKEN' @@ -42,6 +43,7 @@ jobs: cat /etc/resolv.conf - name: LAN reachability test + continue-on-error: true run: | echo "=== LAN REACHABILITY ===" for subnet in 192.168.0.1 192.168.1.1 10.0.0.1 172.16.0.1 172.17.0.1 \ @@ -58,21 +60,25 @@ jobs: || echo "No direct LAN route found." - name: Check external IP + continue-on-error: true run: | echo "--- Checking external IP (https://ifconfig.me)" curl -s https://ifconfig.me - name: Host reachability sanity check + continue-on-error: true run: | echo "=== OUTBOUND TEST ===" curl -fsSL https://google.com >/dev/null && echo "Internet access OK" || echo "No internet access?" - name: Traceroute to google.com + continue-on-error: true run: | echo "=== Traceroute to google ===" traceroute -4 -n google.com - name: Process visibility + continue-on-error: true run: | echo "=== PROCESS VISIBILITY ===" ps aux | head -20 @@ -81,6 +87,7 @@ jobs: || echo "Looks isolated." - name: Privilege and device access + continue-on-error: true run: | echo "=== PRIVILEGE CHECK ===" id -Gn @@ -91,6 +98,7 @@ jobs: || echo "No docker.sock (good)" - name: File system sanity check + continue-on-error: true run: | echo "=== FILESYSTEM ===" ls -1 / @@ -99,12 +107,14 @@ jobs: head -n 3 /etc/passwd - name: Capability check + continue-on-error: true run: | echo "=== CAPABILITIES ===" capsh --print 2>/dev/null || echo "capsh not available" dmesg 2>&1 | head -5 && echo "!! dmesg readable !!" || echo "dmesg not accessible (good)" - name: Mount Info + continue-on-error: true run: | echo "=== Mount Info ===" findmnt -a