This lab is currently in Beta, content may be updated as we refine the material
LABINTERMEDIATE

Hardened Disposable Project Runner

Harden a disposable Docker runner and prove its trust boundary without registering a live runner.

40 minutes
gitlab/cicd
Hardened Disposable Project Runner - Platform Engineering Hands-On Lab Icon
Share this Lab

Lab Overview

Use the course-owned gitlab-delivery-demo checkpoint and sanitized runner events to harden a project-scoped, tagged Docker runner. You will reject privileged job assumptions, preserve the pinned workload image, and prove teardown without a GitLab account, runner token, or live service.

What You'll Learn

Configure project scope, tags, a pinned Docker image, and non-privileged execution

Detect jobs that would escape the intended runner trust boundary

Record an idempotent teardown that removes registration material and workspace state

Explain why a disposable runner is safer than a shared shell executor for project code

Prerequisites

gitlab-cicd-for-platform-engineers

Technologies Covered

gitlabrunnerdockersecurityscenario

Part of a Course

This lab is part of the GitLab CI/CD for Platform Engineers course

View All Courses

Choose your plan

Simple, Transparent Pricing

Unlock full access to TeKanAid courses, labs, and bootcamps

Buying for a team? Private corporate training is available for up to 15 learners.View team training
MonthlyQuarterly
Try Premium free for 7 days →

Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).

Pro

All courses, with lab scripts to run on your own machine

$59/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Full access to all courses
  • Lab scripts to download and run on your own machine (hosted labs not included)
  • Progress tracking
  • Certificate of completion
  • Community access
  • Self-paced bootcamps
  • Premium puzzle library not included (5 free puzzles available)
  • New content access
Recommended

Premium

Full access, including unlimited hosted labs

$99/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Everything in Pro
  • Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
  • Full access to the puzzle library
  • Lab AI Assistant
  • Priority support

Prefer a single course?

Purchase individual courses for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.

Browse Courses

Just exploring? Start free, no account needed

Three free ways to start. All bridge into the paid Premium catalog when you're ready.

Not ready to commit? The crash course is email-only. No academy account required.

Ready to Get Started?

Start this hands-on lab and build real-world Platform Engineering skills

Get Access Now