For this example, we chose my macOS-based machine. This can be a Linux virtual machine or your laptop—any machine that can run a recent version of the GitLab Runner software. The only function this host will have is executing the GitLab Runner software with the Docker Machine executor. It should be tightly secured as a bastion to withstand attacks since it can control multiple Runner instances through the docker-machine commands, and that makes it a target.