Agent skill · magnus919
github-runner
Deploy, manage, and troubleshoot self-hosted GitHub Actions runners.
What it needs
About 4k tokens when loaded.
What this skill does
Self-Hosted GitHub Actions Runner Deploy and manage self-hosted GitHub Actions runners — the machines that execute CI/CD workflow jobs. Self-hosted runners give you control over hardware, OS, and toolchain, at the cost of requiring you to maintain the environment. When to Use Trigger What to do --------- ------------ "Set up CI for my project", "deploy a self-hosted runner for [repo/org]" Read deployment — choose systemd, Docker, or ARC "Runner won't register / keeps failing", "runner gets 404", "registration token expired" Read management — ACCESSTOKEN vs RUNNERTOKEN, groups "How to scale runners automatically", "auto-scale runners", "too many queued jobs" Read scaling — ARC, Scale Set Client, ephemeral "Secure my self-hosted runners", "hardening runners", "runner security", "public repo risk" Read security — public repo risks, ephemeral, JIT, groups "Make a custom runner image", "build a runner Dockerfile", "custom runner with Python" Read custom-images — Dockerfile, ARC container modes "What domains does a runner need to reach?", "runner firewall rules", "runner network setup" Read network — firewall rules, TLS, proxy "Labels, groups, or both for routing?", "how to target specific runners" Read management — labels and groups sections "Monitor / troubleshoot runner issues", "runner offline", "runner not picking up jobs" Read management — monitoring and troubleshooting sections Quick Reference Deployment Spectrum Approach Complexity Autoscaling Best For ---------- ------------ ------------- ---------- systemd service Low Manual Single machine, simple CI Docker container Medium Manual replicas Homelab, small team ARC (Kubernetes) High Built-in Teams with K8s expertise Scale Set Client High Custom Non-K8s platform teams Critical: ACCESSTOKEN vs RUNNERTOKEN This is the most common setup failure. The myoung34/github-runner Docker entrypoint unexports RUNNERTOKEN at startup — it's only used for de-registration. Registration requires ACCESSTOKEN (a GitHub PAT). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills magnus919/github-runner