Capabilities
As the hosted runners are open to everyone and run in a semi-public context, the security settings must be “relatively strict”. This means that certain features, such as
- running containers as privileged
- mounting external volumes
are not available.1
Footnotes
Section titled “Footnotes”-
Theoretically, it is possible to do so when you attached your own runners. However, the flexibility of detecting this must first be added to the respective services. Right now, there is no way to allow it only for certain agents. ↩