Introducing phantomci – A lean, mean, Rust‑powered, headless self‑hosted runner that doesn’t phone home

106 points blueeyesginger 14 comments

I’ve been tinkering with something I couldn’t find in existing runners—so I built it myself. Meet phantomci:

  • Rust-based & headless — No GUI, no excess, just a compiled binary.
  • Zero outbound connections — PhantomCI communicates strictly with GitHub Actions; it won’t call back home for gossip. (See “no unnecessary outbound connections”) 
  • Self-hosted runner — Light, secure, and predictable. Great if you’re fed up with the bloated, flaky defaults. Here’s the GitHub repo: helloimalemur/phantomci.

Why it matters for sysadmins, bug bounty hunters, and security nerds:

  • Eliminates attack surface by cutting outbound noise.
  • Streamlined for production—zero fluff, just performance.
  • Fits perfectly for environments that scream “minimum privilege.”

Check it out if you:

  • Want a leaner GitHub Actions runner.
  • Hate surprises or unnecessary network chatter.
  • Value control above convenience.

Feedback, criticism, or war stories welcome—I’m here to iterate, fortify, and evolve this into something we all deploy without second thoughts.