docs(security): remove SSH username/host specifics from public docs

ci: trigger CI after runner-image registry auth fix
fix(ci): correct image digest separator (@ not :)
2026-05-02 14:43:14 +02:00 · 2026-05-02 12:58:51 +02:00 · 2026-04-30 12:20:19 +02:00 · 2026-04-30 12:17:34 +02:00 · 2026-04-30 11:53:41 +02:00 · 2026-04-30 00:17:05 +02:00
5 changed files with 7 additions and 7 deletions
@@ -10,9 +10,9 @@ jobs:
  ci:
    runs-on: ubuntu-latest
    # Bespoke runner image (Ubuntu 24.04 + make + git + node + go via
-    # actions/setup-go). See git.librete.ch/libretech/runner-image.
+    # actions/setup-go). See git.librete.ch/public/runner-image.
    container:
-      image: git.librete.ch/libretech/runner-image:v1
+      image: git.librete.ch/public/runner-image:v0.1.0@sha256:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5
    timeout-minutes: 5
    steps:
      - name: Checkout
@@ -9,7 +9,7 @@ on:
 #   REGISTRY            registry hostname (git.librete.ch)
 #   REGISTRY_USER       robot account or PAT username (libretech-bot)
 #   REGISTRY_PASS       PAT with write:package
-#   DEPLOY_HOST         SSH target, e.g. root@cloud.librete.ch
+#   DEPLOY_HOST         SSH target, e.g. user@your-deploy-host
 #   DEPLOY_KEY          passphrase-less private key (PEM)
 #   DEPLOY_PATH         remote stack dir (/srv/librenotes)
 #   HEALTH_URL          https://ln.cloud.librete.ch/healthz
@@ -34,7 +34,7 @@ jobs:
    # + perl + ssh, runner user pre-joined to docker gid 998 so the
    # auto-mounted /var/run/docker.sock is writable without --user root.
    container:
-      image: git.librete.ch/libretech/runner-image:v1
+      image: git.librete.ch/public/runner-image:v0.1.0@sha256:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5
    timeout-minutes: 20
    if: ${{ vars.DEPLOY_ENABLED == 'true' }}
    steps:
@@ -5,7 +5,7 @@ Cloud-native multi-tenant notes application built on Notesium (MIT).
 ## Project

 - Repo: https://git.librete.ch/public/librenotes
- Remote: `ssh://tengo@git.librete.ch:41240/public/librenotes.git`
+- Remote: `ssh://git.librete.ch:41240/public/librenotes.git` (configure SSH user in `~/.ssh/config`)
 - Stack: Go backend (forked from Notesium), vanilla JS frontend
 - License: MIT (inherited from Notesium)

@@ -16,7 +16,7 @@ The fastest path is the Nix flake. The `dev` shell drops you
 into a working Go toolchain without any sandbox wrapping:

 ```sh
-git clone ssh://tengo@git.librete.ch:41240/public/librenotes.git
+git clone https://git.librete.ch/public/librenotes.git
 cd librenotes
 nix develop .#dev
 make build && make test
@@ -70,7 +70,7 @@ docker compose -f compose.yaml -f compose.netcup.yaml up -d

 Workflows run on the netcup `act_runner` (see `runner/` stack in
 the netcup umbrella). Both `ci.yml` and `deploy.yml` declare
-`container: image: git.librete.ch/libretech/runner-image:v1` —
+`container: image: git.librete.ch/public/runner-image:v1` —
 a bespoke Ubuntu 24.04 image (built and signed by us, hosted on
 the same Gitea instance) that bundles `git`, `make`, `node`,
 `perl`, `ssh`, and a docker CLI. The image's `runner` user is
Author	SHA1	Message	Date
libretech	0688cb83dd	docs(security): remove SSH username/host specifics from public docs	2026-05-02 14:43:14 +02:00
libretech	41fd424a8e	ci: trigger CI after runner-image registry auth fix CI / ci (pull_request) Successful in 12m10s Details	2026-05-02 12:58:51 +02:00
libretech	d34df180fd	fix(ci): correct image digest separator (@ not :) CI / ci (pull_request) Successful in 14m48s Details	2026-04-30 12:20:19 +02:00
libretech	c9470d199f	ci: digest-pin runner-image v0.1.0 (was :v2) CI / ci (pull_request) Failing after 0s Details Drops the ad-hoc :vN tag scheme — see runner-image#semver. Consumers now reference tag + digest so the resolved image is byte-identical across runs.	2026-04-30 12:17:34 +02:00
libretech	6dd20cc9bd	ci: update runner-image path to public/ namespace CI / ci (pull_request) Failing after 1s Details The runner-image repo moved from libretech/ to public/ on Gitea; ci.yml and deploy.yml + docs reference public/runner-image.	2026-04-30 11:53:41 +02:00
libretech	ecd0ae69da	ci: pin runner-image v2 (adds gcc for cgo, fixes go test -race) v1 lacked gcc, so 'go test -race' (in Makefile) failed in CI with 'go: -race requires cgo'. v2 of the runner image installs gcc, libc6-dev, and pkg-config.	2026-04-30 00:17:05 +02:00