lfg2025/archy
1
0
Fork 0
Code Issues 24 Pull Requests 4 Actions Packages Projects Releases 71 Wiki Activity

docs(architecture): correct the "apps run as Quadlet units" overstatement

Browse Source 
The overview stated apps install as user.slice Quadlet units. Verified against
prod_orchestrator.rs: use_quadlet_backends defaults to false, so regular apps
install via the raw podman path today; the companion UI containers are the ones
that run as Quadlet units (companion.rs owns them), and the Quadlet flip to
default for all apps is opt-in/held.

Reworded both places (the layer diagram and the App Platform section) to match
reality and the container-lifecycle / quadlet-compilation dev docs: the
orchestrator owns and self-heals app containers; companion UIs run as Quadlet
units, the validated path being flipped to default. Everything else in the doc
verified accurate — crate table, module map, data paths, security model, and
the note that the four orphan crates still exist.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
archipelago
2026-08-07 19:41:20 -04:00
co-authored by Claude Opus 5
parent 4155cefdf5
commit f55ed6bf45
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/architecture.md
+7 -5
View File
@@ -29,8 +29,8 @@
│ Podman REST API socket + systemd Quadlet units │ Podman REST API socket + systemd Quadlet units
┌──────────────────────┴───────────────────────────────┐ ┌──────────────────────┴───────────────────────────────┐
│ ROOTLESS PODMAN CONTAINERS │ │ ROOTLESS PODMAN CONTAINERS │
│ 50+ manifest-driven apps as user.slice Quadlet │ │ 50+ manifest-driven apps the orchestrator owns and │
│ units — survive backend restarts, self-heal │ │ self-heals; companion UIs run as systemd Quadlet │
└──────────────────────────────────────────────────────┘ └──────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────┐ ┌──────────────────────────────────────────────────────┐
@@ -104,9 +104,11 @@ never appear in `podman inspect` or unit files), `generated_secrets` /
`generated_certs` (self-healing), `network_aliases`, `data_uid`, and `generated_certs` (self-healing), `network_aliases`, `data_uid`, and
allow-listed `post_install` hooks that run inside the app's own sandbox. allow-listed `post_install` hooks that run inside the app's own sandbox.
**Install** compiles the manifest to a rootless **Quadlet unit under **Install** creates a rootless container the orchestrator owns; the companion
`user.slice`** — containers survive backend restarts and reboots. UI containers run as systemd **Quadlet units under `user.slice`** (the
Multi-container apps (BTCPay, Mempool, Immich, NetBird, IndeeHub) are sets of validated path being flipped to default for all apps), so those survive backend
restarts and reboots outright, and the reconciler rebuilds any container that
vanishes. Multi-container apps (BTCPay, Mempool, Immich, NetBird, IndeeHub) are sets of
per-member manifests installed via the stack orchestrator on an app-local per-member manifests installed via the stack orchestrator on an app-local
network with readiness gates and generated cross-service secrets. A network with readiness gates and generated cross-service secrets. A
level-triggered **boot reconciler** converges actual state to desired state level-triggered **boot reconciler** converges actual state to desired state