Limitations of Harden-Runner on Linux

[blackgnezdo]

It is stated that Harden-Runner is not supported when job is run in a container though this is listed in a section about GitHub runners.

Does this also apply to cases where my Self-Hosted runner is executed inside a cgroup configured via systemd?

$ cat /etc/systemd/system/actions.runner.repo.ci-bot-1.service
[Unit]
Description=GitHub Actions Runner
After=network.target

[Service]
MemoryMax=90%
OOMPolicy=kill
Restart=always
RestartSec=3s
ExecStart=/home/ci-bot/runsvc.sh
User=ci-bot
WorkingDirectory=/home/ci-bot
KillMode=process
KillSignal=SIGTERM
TimeoutStopSec=5min

[Install]
WantedBy=multi-user.target

It is also stated that for Self-Hosted runners "Only Linux jobs are supported". I take this to indicate that Rocky Linux should be a fine place for this Runner to live. Specifically, this kernel:

Linux ci-bot-1 5.14.0-503.19.1.el9_5.cloud.1.0.x86_64