Complete procedures with a way back.

Terraform Error acquiring the state lock means the configured backend refused a potentially state-writing operation because another lock exists or the lock service is unavailable. The safe response is to identify the exact backend, workspace, lock owner, and active run before considering force-unlock.

Operate a protected GitLab Runner 19.x on a dedicated host with nonprivileged Docker jobs, digest-pinned image admission, trust-isolated cache, explicit tags, adversarial tests, safe cleanup, and rebuild-first recovery.

Build a one-job Linux runner with restricted repository access, an unprivileged account, verified release, minimal network, external logs, immutable updates, fork isolation, and complete post-job destruction.