eirikhanasand/hanasand_privileged_api
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
82 commits 1 branch 0 tags 200 KiB
Find a file
Exact
eirikhanasand 8d8e4f7b48 v2.0.6 resolve vm addresses from lxc
2026-04-27 02:50:02 +02:00
docs/endpoint-snapshots v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
scripts v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
src v2.0.6 resolve vm addresses from lxc 2026-04-27 02:50:02 +02:00
.dockerignore v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
.gitignore v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
bun.lock v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
docker-compose.yml v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
Dockerfile v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
package.json v2.0.6 resolve vm addresses from lxc 2026-04-27 02:50:02 +02:00
README.md v2.0.5 productionize internal docker runtime 2026-04-27 02:45:54 +02:00
tsconfig.json Base working project 2025-10-11 00:04:45 +02:00
types.d.ts v2.0.3: continued development on vms and vulnerabilities 2026-04-22 17:34:00 +02:00

README.md

Hanasand Internal

Privileged internal API for Hanasand host and VM operations.

Docker

The service is intended to run through Docker Compose on the dev host:

PORT=8001 INTERNAL_HOST_PORT=8001 DOCKER_GID=988 LXD_GID=101 docker compose up -d --build internal

The container runs the API process as UID/GID 1000:1000 and receives host access through explicit mounts and host groups:

  • Docker socket: /var/run/docker.sock
  • host workspaces: /home/dev and /home/ubuntu
  • nginx config: /home/dev/nginx/default.conf
  • host logs: /var/log

Endpoint snapshots live in docs/endpoint-snapshots.

INTERNAL_BASE_URL=http://127.0.0.1:8001 bun run snapshot:endpoints

Side-effecting endpoints are skipped by default. Set INTERNAL_SNAPSHOT_INCLUDE_SIDE_EFFECTS=true only when intentionally testing actions such as backup, scan, deploy, or VM mutations.