Skip to content

Console Reference

The Console is embedded in the daemon and manages one daemon on one host.

The default address is http://127.0.0.1:8080.

PageData
OverviewDaemon uptime, GitHub connection, runner counts, job counts, config state, and current host use
JobsStored jobs, filters, pagination, detail, logs, resource samples, and GitHub Actions links
Runner SetsConfigured scope, backend, image, labels, capacity, GitHub connection, and live runners
ConfigActive and disk identity, strict validation, editor, diff, restart commands, and ten revisions
SystemBuild, platform, storage paths, storage size, current host use, and host history

Overview, Jobs, Runner Sets, Config, System, and host history refresh every five seconds.

The daemon checks the disk config every two seconds.

A running job log requests new chunks every two seconds. A running job resource chart refreshes every five seconds.

Jobs supports:

  • Result
  • Runner set
  • Repository
  • Workflow
  • One hour, 24 hour, 7 day, or 30 day range

The UI requests 50 jobs per page and uses a cursor for the next page.

StateMeaning
preparingBackend creation and runner registration are in progress
idleRunner is ready for work
busyRunner is running a job

Each runner set has its own GitHub connection state.

The Console displays running, success, failure, or canceled.

Job detail can contain queued, Scale Set assigned, runner assigned, started, and completed times. A field is Unavailable when GitHub did not provide it.

StateMeaning
In syncDisk config matches active config
Restart requiredValid disk config differs from active config
Disk config invalidDisk file is not usable. Active config is unchanged

Saving or restoring config writes disk only. The Console never restarts the service or hot reloads controllers.

The daemon stores the newest ten full config revisions.

The Console supports one local admin.

  • First setup requires a one time code from the local daemon log.
  • Password length is 12 through 256 characters.
  • Passwords are stored as bcrypt hashes.
  • A session lasts 24 hours.
  • Session cookies are HttpOnly and SameSite Strict.
  • Write calls require the session and a CSRF token.
  • Repeated failed sign in attempts are rate limited.
  • Password reset removes every active session.

Config responses mask PAT values and do not return private key contents.

The daemon does not provide TLS. Keep the default local address or place the service behind a trusted TLS reverse proxy.

Do not expose the Console directly to the public internet.