Achilleas PipinellisTitle changed from Show what executor each shared Runner is configured with to Show the type of executor each shared Runner is configured with
Title changed from Show what executor each shared Runner is configured with to Show the type of executor each shared Runner is configured with
For that we need to send such information from the runner to coordinator. We currently do this for some data such like version, platform or architecture (those are showed only to runners "owner" - person who has master privileges on the project where a runner is used).
I created a related issue in GitLab Runner's issue tracker: gitlab-org/gitlab-ci-multi-runner#1182.
The question is: is this safe to show such information? I don't see any negative consequences but are we sure that this is good?
The question is: is this safe to show such information? I don't see any negative consequences but are we sure that this is good?
A malicious actor could potentially use the executor and runner version to target that runner by exploiting unpatched security holes. However, the executor and runner version are already exposed in the first two lines of the build log:
gitlab-ci-multi-runner 1.1.0~beta.174.g7dc623f (7dc623f)Using Docker executor with image ruby:2.1 ...
@markglenfletcher We do not have information about executor runner is configured with in the database, so we may want to check if this issue does not need changes on the Runner side first /cc @tmaczukin😸
First of all, thank you for raising an issue to help improve the GitLab product. This issue was labelled as a ~"feature proposal" in the past. In order to maintain order in the issue tracker, we are starting to close off old, unpopular feature proposals that have not gained many votes since opening.
This issue will be marked for closure, as it meets the following criteria:
Created over 1 year ago
Labelled as a ~"feature proposal"
Unscheduled (not associated with a milestone)
Less than 10 upvotes
Thanks for your help and please raise any new feature proposals as a new issue.