oblachno-oss/grm
2
0
Fork 0
Code Issues 12 Pull Requests 1 Actions Packages Projects Releases 7 Wiki Activity

GRM-159: Docker daemon hardening, healthcheck improvements, and devx lint checks #235

Merged
emil merged 0 commits from GRM-159-docker-hardening-and-lint into master 2026-08-12 13:45:21 +00:00
Conversation 10 Commits - Files Changed -
emil commented 2026-08-12 12:45:05 +00:00
Owner
Copy Link
Copy Source

Closes GRM-159

Recovers and consolidates Docker hardening work lost during the outage:

  • Harden rootless Docker daemon for parallel DinD reliability
  • Pin Docker 28.x + disable containerd snapshotter
  • Pre-configure daemon.json before rootless setuptool
  • Add DBUS_SESSION_BUS_ADDRESS for rootless Docker
  • Pin containerd.io to compatible version
  • Move StartLimit to [Unit], make prune timer reload conditional
  • Two-tier disk prune with critical threshold
  • Split gentle prune (until filter incompatible with --volumes)
  • Disable systemd-oomd memory pressure kill for runner users
  • Add debug logging to healthcheck
  • Wire devx lint checks
  • Use Gitea mirror for Ansible collection installs
Closes GRM-159 Recovers and consolidates Docker hardening work lost during the outage: - Harden rootless Docker daemon for parallel DinD reliability - Pin Docker 28.x + disable containerd snapshotter - Pre-configure daemon.json before rootless setuptool - Add DBUS_SESSION_BUS_ADDRESS for rootless Docker - Pin containerd.io to compatible version - Move StartLimit to [Unit], make prune timer reload conditional - Two-tier disk prune with critical threshold - Split gentle prune (until filter incompatible with --volumes) - Disable systemd-oomd memory pressure kill for runner users - Add debug logging to healthcheck - Wire devx lint checks - Use Gitea mirror for Ansible collection installs
emil reviewed 2026-08-12 12:46:27 +00:00
emil left a comment
Author
Owner
Copy Link
Copy Source

Automated PR Review

  • Architecture compliance: OK
  • Best practices: OK
  • Security: OK
  • i18n: OK
  • Resource management: OK
  • Documentation: OK
  • Tests: WARNING — source files changed but no test files updated
  • Commit conventions: OK

No issues found by automated checks.

Auto-merge: If all CI checks pass, this PR will be merged automatically.

## Automated PR Review - Architecture compliance: OK - Best practices: OK - Security: OK - i18n: OK - Resource management: OK - Documentation: OK - Tests: WARNING — source files changed but no test files updated - Commit conventions: OK No issues found by automated checks. --- **Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto approved these changes 2026-08-12 12:47:38 +00:00
Dismissed
kireto left a comment
Member
Copy Link
Copy Source

Auto-approved: all CI checks passed (validate, molecule-tests).

Auto-approved: all CI checks passed (validate, molecule-tests).
emil reviewed 2026-08-12 13:02:09 +00:00
emil left a comment
Author
Owner
Copy Link
Copy Source

Automated PR Review

  • Architecture compliance: OK
  • Best practices: OK
  • Security: OK
  • i18n: OK
  • Resource management: OK
  • Documentation: OK
  • Tests: WARNING — source files changed but no test files updated
  • Commit conventions: OK

No issues found by automated checks.

Auto-merge: If all CI checks pass, this PR will be merged automatically.

## Automated PR Review - Architecture compliance: OK - Best practices: OK - Security: OK - i18n: OK - Resource management: OK - Documentation: OK - Tests: WARNING — source files changed but no test files updated - Commit conventions: OK No issues found by automated checks. --- **Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto approved these changes 2026-08-12 13:03:22 +00:00
Dismissed
kireto left a comment
Member
Copy Link
Copy Source

Auto-approved: all CI checks passed (validate, molecule-tests).

Auto-approved: all CI checks passed (validate, molecule-tests).
emil dismissed kireto's review 2026-08-12 13:05:05 +00:00
Reason:

New commits pushed, approval review dismissed automatically according to repository settings

emil reviewed 2026-08-12 13:06:27 +00:00
emil left a comment
Author
Owner
Copy Link
Copy Source

Automated PR Review

  • Architecture compliance: OK
  • Best practices: OK
  • Security: OK
  • i18n: OK
  • Resource management: OK
  • Documentation: OK
  • Tests: WARNING — source files changed but no test files updated
  • Commit conventions: OK

No issues found by automated checks.

Auto-merge: If all CI checks pass, this PR will be merged automatically.

## Automated PR Review - Architecture compliance: OK - Best practices: OK - Security: OK - i18n: OK - Resource management: OK - Documentation: OK - Tests: WARNING — source files changed but no test files updated - Commit conventions: OK No issues found by automated checks. --- **Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto approved these changes 2026-08-12 13:08:57 +00:00
Dismissed
kireto left a comment
Member
Copy Link
Copy Source

Auto-approved: all CI checks passed (validate, molecule-tests).

Auto-approved: all CI checks passed (validate, molecule-tests).
emil reviewed 2026-08-12 13:09:17 +00:00
emil left a comment
Author
Owner
Copy Link
Copy Source

Automated PR Review

  • Architecture compliance: OK
  • Best practices: OK
  • Security: OK
  • i18n: OK
  • Resource management: OK
  • Documentation: OK
  • Tests: WARNING — source files changed but no test files updated
  • Commit conventions: OK

No issues found by automated checks.

Auto-merge: If all CI checks pass, this PR will be merged automatically.

## Automated PR Review - Architecture compliance: OK - Best practices: OK - Security: OK - i18n: OK - Resource management: OK - Documentation: OK - Tests: WARNING — source files changed but no test files updated - Commit conventions: OK No issues found by automated checks. --- **Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto approved these changes 2026-08-12 13:12:48 +00:00
Dismissed
kireto left a comment
Member
Copy Link
Copy Source

Auto-approved: all CI checks passed (validate, molecule-tests).

Auto-approved: all CI checks passed (validate, molecule-tests).
emil added the ready-to-merge label 2026-08-12 13:26:43 +00:00
emil reviewed 2026-08-12 13:31:31 +00:00
emil left a comment
Author
Owner
Copy Link
Copy Source

Automated PR Review

  • Architecture compliance: OK
  • Best practices: OK
  • Security: OK
  • i18n: OK
  • Resource management: OK
  • Documentation: OK
  • Tests: WARNING — source files changed but no test files updated
  • Commit conventions: OK

No issues found by automated checks.

Auto-merge: If all CI checks pass, this PR will be merged automatically.

## Automated PR Review - Architecture compliance: OK - Best practices: OK - Security: OK - i18n: OK - Resource management: OK - Documentation: OK - Tests: WARNING — source files changed but no test files updated - Commit conventions: OK No issues found by automated checks. --- **Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto approved these changes 2026-08-12 13:32:47 +00:00
kireto left a comment
Member
Copy Link
Copy Source

Auto-approved: all CI checks passed (validate, molecule-tests).

Auto-approved: all CI checks passed (validate, molecule-tests).
emil merged commit 3686ab5170 into master 2026-08-12 13:45:21 +00:00
emil deleted branch GRM-159-docker-hardening-and-lint 2026-08-12 13:45:22 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
emil
kireto
Labels
Clear labels
bug
Something is not working
 ci-improvement
CI workflow improvements
 doc-improvement
Documentation improvements
 feedback
Issues from subagent or agent feedback
 ready-to-merge
Auto-merge PR when all CI checks pass
 tooling
Tool-related feedback or improvements
 workflow-improvement
Workflow alignment or pattern improvements
No labels ready-to-merge
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
emil (emil User) kireto
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: oblachno-oss/grm#235