Issues

Windows job containers: outbound downloads stall at zero bytes on the NAT path
ephpm/ephemerd#200 · opened on Sep 10, 2026
2
macOSVMBusy's session.Run has no deadline — the busy probe can still wedge the scheduler event loop
ephpm/ephemerd#199 · opened on Sep 6, 2026
Startup CleanOrphans kills every container ungated by the busy veto — a daemon restart mid-build still destroys live runners
ephpm/ephemerd#188 · opened on Sep 1, 2026
sec(dind): does docker exec inherit host capabilities? (unverified, needs a Linux host)
ephpm/ephemerd#175 · opened on Aug 19, 2026
Release: the ~1 GB Windows asset upload fails or hangs on every release
ephpm/ephemerd#166 · opened on Aug 17, 2026
Port the #129 fixes (cleanup knob, size bound, path containment) to the cargo/npm/pip/pub proxies
ephpm/ephemerd#160 · opened on Aug 16, 2026
Kata: per-container bundle/state dir leaks on teardown
ephpm/ephemerd#159 · opened on Aug 16, 2026
sec(networking): L2Bridge host-hardening is TCP-only — host UDP and LLMNR/NBNS/mDNS poisoning unaddressed
ephpm/ephemerd#153 · opened on Aug 15, 2026
sec(dind): one job can reach and drive another job's dind API on the L2Bridge path
ephpm/ephemerd#152 · opened on Aug 15, 2026
sec(dind): dind containers get no AppArmor profile, and the privileged carve-out's justification does not hold on Linux
ephpm/ephemerd#130 · opened on Aug 2, 2026
sec(runtime): job containers share the host user namespace (container root = host root)
ephpm/ephemerd#126 · opened on Aug 1, 2026
runner: Linux job containers run with NO cgroup limits - oom-killer takes the runner listener and the logs
ephpm/ephemerd#102 · opened on Jul 9, 2026