fix(runtime): harden smoke and credential boundaries

2026-08-04 16:05:06 +00:00
parent 09d849de07
commit c49989631f
16 changed files with 517 additions and 8 deletions
@@ -5,14 +5,37 @@ ACME_EMAIL=admin@example.com
 HTTP_PORT=80
 HTTPS_PORT=443

+# Runtime hard limits. Keep swap equal to memory so the container cannot consume host swap.
+RUNTIME_MEMORY_LIMIT=4g
+RUNTIME_MEMORY_SWAP_LIMIT=4g
+RUNTIME_CPU_LIMIT=4
+RUNTIME_PIDS_LIMIT=256
+# Optional smoke-only limits used with compose.smoke.yaml (maximum supported defaults shown).
+# SMOKE_RUNTIME_MEMORY_LIMIT=4g
+# SMOKE_RUNTIME_MEMORY_SWAP_LIMIT=4g
+# SMOKE_RUNTIME_CPU_LIMIT=4
+# SMOKE_RUNTIME_PIDS_LIMIT=256
+
 # Core2026 source. A public HTTPS URL needs no extra credential.
 CORE_REPOSITORY_URL=https://github.com/your-org/core2026.git
 CORE_BOOTSTRAP_REF=main

+# Optional private repository authentication. Keep only one mode enabled.
+# HTTPS mode uses a read-only token through GIT_ASKPASS and never embeds it in the URL.
+CORE_REPOSITORY_USERNAME=
+CORE_REPOSITORY_TOKEN=
+# SSH mode accepts base64-encoded deploy key and known_hosts contents.
+CORE_SSH_PRIVATE_KEY_BASE64=
+CORE_SSH_KNOWN_HOSTS_BASE64=
+
 # Development bind override (used only with compose.dev.yaml).
 # CORE_DEV_PATH=../core2026
 # DEV_UID=1000
 # DEV_GID=1000
+# DEV_RUNTIME_MEMORY_LIMIT=4g
+# DEV_RUNTIME_MEMORY_SWAP_LIMIT=4g
+# DEV_RUNTIME_CPU_LIMIT=4
+# DEV_RUNTIME_PIDS_LIMIT=256

 # Persistent services. Use long random values; do not commit .env.
 POSTGRES_DB=sammo