3c7a1fbbb5
The prior fix (5745db51) copied the fedimint-clientd/barkd data_uid pattern (1001) without verifying it against this image. Live on x250-beta the container still crash-looped with the same SqliteError: unable to open database file — `podman exec botfights id` showed uid=999(botfights) gid=999(botfights), not 1001. The image's Dockerfile does `useradd --system` with no explicit UID, which lands at 999, and security.user in the manifest is descriptive only — it is not read by this app's (non-Quadlet) install path, so it can't be used as the source of truth either. Fixed data_uid to 999:999 and corrected security.user to 999 to match reality. Verified live: manually re-chowned the existing bind mount to 999:999 on x250-beta, restarted the container, confirmed `database migrated` + `listening on http://localhost:9100` + `/api/health` returns ok, and confirmed /api/bots on x250-beta returns identical data to the canonical arena (arena-proxy forwarding correctly). Regenerated catalog; cargo test -p archipelago-container manifest passes (38/38). Co-Authored-By: Claude <noreply@anthropic.com>
Archipelago App Manifests
Containerized applications for the Archipelago Bitcoin Node OS. All apps run in rootless Podman with security hardening (cap-drop ALL, readonly root, non-root user, memory limits).
App Categories
Bitcoin & Lightning
- bitcoin-knots — Full Bitcoin node (v28.1)
- lnd — Lightning Network Daemon (v0.17.4-beta)
- btcpay-server — Payment processor (v1.13.5)
- mempool — Block explorer and fee estimator (v2.5.0)
- electrumx — Electrum server
- fedimint — Federated Bitcoin minting (v0.10.0)
Nostr
- nostr-rs-relay — High-performance Rust relay (v0.9.0)
- nostrudel — Nostr web client (v0.40.0)
Web5 & Identity
- did-wallet — Web5 DID Wallet
Self-Hosted Services
- nextcloud (v28), jellyfin (v10.8.13), immich (release), photoprism (v240915)
- vaultwarden (v1.30.0-alpine), penpot (v2.4)
- homeassistant (v2024.1), filebrowser (v2.27.0), searxng (2024.11.17)
- ollama (v0.5.4), grafana (v10.2.0), portainer (v2.19.4)
Networking
- tailscale (stable), nginx-proxy-manager (v2.12.1)
Custom & External
- indeedhub — Bitcoin documentary streaming (custom build)
- router — Mesh routing and network management
- botfights — External web app
Manifest Format
Each app has a manifest.yml defining container image, resources, dependencies, security policies, health checks, and network config. See docs/app-manifest-spec.md for the spec.
Quick Reference
- PORTS.md — Complete port mapping
- QUICKSTART.md — Build and run apps
- DEVELOPMENT.md — Development workflow