Improve Docker Sandboxes resilience and onboarding - #16
Merged
Conversation
Present Docker Sandboxes as EPAR's public-facing provider, hide compatibility providers behind an explicit wizard reveal, retire Tart from onboarding, and require explicit provider types while preserving existing provider defaults and runtime compatibility.
Default Docker Sandboxes to best-effort architecture emulation so unsupported binfmt_misc hosts continue after exact native guest and Docker verification. Preserve required and native-only modes, emit visible warnings, and update onboarding, template assets, tests, and documentation.
Route Windows overlay traffic through an authenticated host relay with separate workflow and private-dockerd TLS paths so host-approved inspection roots work without Docker Sandboxes credential injection. Scope admission to capabilities attached to the exact EPAR sandbox, scrub Docker credentials, enforce the job-start egress boundary, retain best-effort architecture emulation, and add lifecycle, race, template, checksum, and documentation coverage.
Keep unattended EPAR controllers alive across typed transient GitHub, registry, image, and runner-download failures with durable bounded or continuous supervision. Preserve fail-fast defaults, exact cleanup, local-first status, and documented autorun behavior.
Move successful Docker Sandboxes host-trust relay refresh diagnostics to debug while keeping info as the default. Expose logging.level through configuration, generated examples, documentation, and tests.
Recover a cached installation token rejected with HTTP 401 by invalidating it and retrying once with a freshly minted token. Keep repeated 401 responses terminal and preserve typed transient refresh failures for outage supervision.
Throttle host-trust transport reconciliation to its lease refresh cadence, retry one malformed read-only inventory response without weakening strict parsing, suppress shutdown-only health warnings, and terminate interactive preparation progress cleanly.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Testing