vole

Clone

Read only, no credentials:

https://rodent.software/git/vole.git

Write over SSH with a registered key:

git clone ssh://git@0.0.0.0:2222/vole.git

A free and open-source forge that lives in your Git repo.

Store CI run records in the database, not the repository

b312e1660ac3d570fc35350a22b3514c56ab466f · Keenan Nemetz · 11d ago · parent db5e4382

Store CI run records in the database, not the repository

A finished attempt was a set of files on the vole branch: a record, step
ranges, and artifact pointers, pushed as a commit. At 959 files, CI records
were 849 of them, and every human metadata write had to carry them.

The runner now sends the record with its finish message over the SSH channel
that holds the lease. The server checks the account, the job, and the log and
artifact pointers, then writes the attempt, steps, artifacts, attestation, and
run result in one transaction in data/runs.db. A tagged build still pushes its
release pointers to the branch after the record is stored.

Pre-receive refuses a new runs/ file. vole admin index rebuild imports records
still on an old branch; records written since are never deleted by a rebuild.
The run page reads the stored attempt, and runs.db is now a source that must be
backed up.

This stops new CI history from entering Git. Existing commits keep the records
they already have; removing those would require rewriting the protected vole
branch, which this change does not do.

server/ssh/limits_test.go +5−6

@@ -168,12 +168,11 @@ func TestRunnerRequestLineIsBounded(t *testing.T) {
	168	168	h := newHarness(t)
	169	169	c := h.runner(t, h.keyPath)
	170	170
	171		// A --repos list is the one field a client can grow without bound, and every
	172		// name in it would otherwise be looked up.
	173		huge := runnerRequest{Op: "lease", Repos: make([]string, 0, 64)}
	174		for i := 0; i < 64; i++ {
	175		huge.Repos = append(huge.Repos, strings.Repeat("r", 32<<10))
	176		}
		171	// A --repos list is a field a client can grow without bound, and every name in
		172	// it would otherwise be looked up.
		173	huge := runnerRequest{Op: "lease", Repos: []string{
		174	strings.Repeat("r", int(maxRunnerRequestBytes)+1024),
		175	}}
	177	176	if err := c.enc.Encode(huge); err != nil {
	178	177	t.Fatal(err)
	179	178	}