- AGENTS.md: run-commando bijgewerkt (verwijder brede /run/user/1000 mount en DBUS_SESSION_BUS_ADDRESS); notitie D-Bus niet meer vereist - SAFE_FILES.md: verwijder DBUS_SESSION_BUS_ADDRESS; beschrijf concrete mounts (Podman socket + helper directory) - podman-helper-rationale.md: daemon-reload sectie bijgewerkt — gaat nu via helper ipv D-Bus; samenvattingstabel gecorrigeerd Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1.6 KiB
SAFE FILES — podman-mvp
These files and runtime assumptions are considered infrastructure-critical.
Changes are NOT forbidden, but must ALWAYS be proposed first and explicitly approved before implementation.
Runtime architecture (critical)
Do not change without agreement:
- Pod name: mvp-pod
- Port mappings:
- 8080 → backend
- 8081 → webui proxy
- userns=keep-id
Backend runtime assumptions:
- XDG_RUNTIME_DIR=/run/user/1000 (env var voor Podman socket pad)
- Podman unix socket: /run/user/1000/podman/podman.sock
- Helper socket directory: /run/user/1000/podman-mvp → /run/podman-mvp
- host PID namespace
- host IPC namespace
Reason: Backend communicates with user-session Podman via unix socket. Alle systemctl-acties (start/stop/restart/daemon-reload) gaan via podman-helper. D-Bus is niet gemount.
Infrastructure sensitive files
High risk files:
control/Dockerfile webui/conf/httpd.conf
Changes must be proposed first.
Core API stability
Files requiring caution:
control/app.py control/app_files.py control/app_images.py control/app_networks.py control/app_pods.py control/app_system.py control/common.py
Rules:
- Never rewrite structure without agreement.
- Extend endpoints instead of replacing logic.
Frontend stability
Files:
webui/html/index.html
Avoid:
- framework migrations
- large UI rewrites
Prefer incremental improvements.
Allowed improvements
Safe changes include:
- new API endpoints
- optional JSON response fields
- new UI tabs
- bug fixes
- performance improvements
Goal
System stability has priority over architectural perfection. Prefer minimal and predictable changes.