Files

T

Developer 1d345eba32 fix: use runuser for privilege drop and capture container stderr in logs

The container still exited immediately after the su-based fix.  can
interfere with TTY/stdin handling for interactive shells. Switch to
, which is root-only, skips PAM, and preserves file descriptors so
bash stays interactive.

Also improve container failure diagnostics:
-  now combines stdout and stderr
- This helps surface the real reason when a container exits with code 0

Quality gates:
- pytest tests/unit: 219 passed
- ruff: clean on changed files
- mypy: clean on changed files

2026-06-15 10:41:37 +00:00

693 B

Raw Blame History

apps/api/src/services/docker (index)

dir: apps/api/src/services/docker

role

Provides Docker infrastructure automation for container lifecycle management, service composition, secure configuration deployment, and external network tunneling.

parent

index: apps/api/src/services/.pi-map.index.md map: apps/api/src/services/.pi-map.md

children

files

__init__.py
compose.py
config_staging.py
container.py
tunnel.py

links

index: apps/api/src/services/docker/.pi-map.index.md map: apps/api/src/services/docker/.pi-map.md

workflows

change docker behavior read: __init__.py, compose.py, config_staging.py
change docker config read: config_staging.py

693 B Raw Blame History