.gitea/workflows/ci.yml

@@ -10,9 +10,9 @@ jobs:
   ci:
     runs-on: ubuntu-latest
     # Bespoke runner image (Ubuntu 24.04 + make + git + node + go via
-    # actions/setup-go). See git.librete.ch/libretech/runner-image.
+    # actions/setup-go). See git.librete.ch/public/runner-image.
     container:
-      image: git.librete.ch/libretech/runner-image:v1
+      image: git.librete.ch/public/runner-image:v0.1.0@sha256:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5
     timeout-minutes: 5
     steps:
       - name: Checkout

.gitea/workflows/deploy.yml

@@ -34,7 +34,7 @@ jobs:
     # + perl + ssh, runner user pre-joined to docker gid 998 so the
     # auto-mounted /var/run/docker.sock is writable without --user root.
     container:
-      image: git.librete.ch/libretech/runner-image:v1
+      image: git.librete.ch/public/runner-image:v0.1.0@sha256:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5
     timeout-minutes: 20
     if: ${{ vars.DEPLOY_ENABLED == 'true' }}
     steps:

docs/operations.md

@@ -70,7 +70,7 @@ docker compose -f compose.yaml -f compose.netcup.yaml up -d
 
 Workflows run on the netcup `act_runner` (see `runner/` stack in
 the netcup umbrella). Both `ci.yml` and `deploy.yml` declare
-`container: image: git.librete.ch/libretech/runner-image:v1` —
+`container: image: git.librete.ch/public/runner-image:v1` —
 a bespoke Ubuntu 24.04 image (built and signed by us, hosted on
 the same Gitea instance) that bundles `git`, `make`, `node`,
 `perl`, `ssh`, and a docker CLI. The image's `runner` user is