ci: run the jobs in the runner image (#120)

The workflows' containers are now lithosananke-runner:72b6cf370db1, built and published by runner-image.yml, with everything init installs and Maven already in it; the install steps are gone, except the documents' packages in nightly-docs.yml and release.yml. The registry refuses anonymous pulls, so each job pulls with PACKAGES_TOKEN. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2
2026-11-07 00:57:35 +00:00
parent 72b6cf370d
commit fb24d3f482
7 changed files with 36 additions and 27 deletions
@@ -1,5 +1,13 @@
 # Changelog

+## 2026-11-07 — CI jobs start ready: the runner image
+
+The CI jobs now run in `lithosananke-runner` (`ci/runner-image`, #120), an image with everything
+`make ARCH=amd64,aarch64,riscv64 init INIT_DOCS=0` installs and Maven already in it, so they no
+longer install the toolchain at their start; only the document jobs still install the documents'
+packages. `runner-image.yml` builds and publishes it, tagged with its commit; the workflows name
+that tag, and a new one reaches them like any change: by a pull request that passed acceptance.
+
 ## 2026-11-06 — One process from developer to master: the acceptance gate, the nightlies to Nexus, one repository

 Every pull request into `master` now runs the acceptance protocol (`acceptance.yml`): the three