Guides

Use these guides after completing Getting Started:

• Named Profiles - run independent worker pools on one host.
• Custom Profiles - define a specialized image and verification contract.
• Repository-Owned Worker Images - publish, activate, update, and roll back an external OCI runner image.
• Automation Control Runners - route repository policy and orchestration to a minimal, non-root, scale-set-only image.
• Read-Only External Data Volumes - attach operator-provisioned immutable datasets to workers without exposing storage credentials.
• Pool-Local Services - reach operator-owned services through stable, profile-scoped Docker DNS without worker mounts or host ports.
• Isolated Image Builder - publish OCI images through an mTLS BuildKit service without exposing the orchestration socket.
• Android Emulator Runners - run disposable Android 14 emulators with typed KVM access.
• Routing Workloads - target the correct pool from GitHub Actions.
• Host-Local Admission - calibrate service classes, coordinate host budget, diagnose withheld demand, and roll policy back through supported setup paths.
• Demand-Driven Autoscaling - shrink idle pools and automatically restore capacity for queued work.
• Rolling Updates - replace managers immediately, roll safe idle workers, and preserve active jobs.
• Security Boundaries - protect the Docker host and workflow credentials.
• Support Broker Access - grant the diagnostics broker inherited access only inside dedicated profile and connector-health evidence directories.
• Copilot CLI Operations - install repeatable capacity and version-update skills.