4404c02967
- AGENTS.md: run-commando bijgewerkt (verwijder brede /run/user/1000 mount en DBUS_SESSION_BUS_ADDRESS); notitie D-Bus niet meer vereist - SAFE_FILES.md: verwijder DBUS_SESSION_BUS_ADDRESS; beschrijf concrete mounts (Podman socket + helper directory) - podman-helper-rationale.md: daemon-reload sectie bijgewerkt — gaat nu via helper ipv D-Bus; samenvattingstabel gecorrigeerd Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
94 lines
1.6 KiB
Markdown
94 lines
1.6 KiB
Markdown
# SAFE FILES — podman-mvp
|
|
|
|
These files and runtime assumptions are considered infrastructure-critical.
|
|
|
|
Changes are NOT forbidden, but must ALWAYS be proposed first
|
|
and explicitly approved before implementation.
|
|
|
|
---
|
|
|
|
## Runtime architecture (critical)
|
|
|
|
Do not change without agreement:
|
|
|
|
- Pod name: mvp-pod
|
|
- Port mappings:
|
|
- 8080 → backend
|
|
- 8081 → webui proxy
|
|
- userns=keep-id
|
|
|
|
Backend runtime assumptions:
|
|
|
|
- XDG_RUNTIME_DIR=/run/user/1000 (env var voor Podman socket pad)
|
|
- Podman unix socket: /run/user/1000/podman/podman.sock
|
|
- Helper socket directory: /run/user/1000/podman-mvp → /run/podman-mvp
|
|
- host PID namespace
|
|
- host IPC namespace
|
|
|
|
Reason:
|
|
Backend communicates with user-session Podman via unix socket.
|
|
Alle systemctl-acties (start/stop/restart/daemon-reload) gaan via
|
|
podman-helper. D-Bus is niet gemount.
|
|
|
|
---
|
|
|
|
## Infrastructure sensitive files
|
|
|
|
High risk files:
|
|
|
|
control/Dockerfile
|
|
webui/conf/httpd.conf
|
|
|
|
Changes must be proposed first.
|
|
|
|
---
|
|
|
|
## Core API stability
|
|
|
|
Files requiring caution:
|
|
|
|
control/app.py
|
|
control/app_files.py
|
|
control/app_images.py
|
|
control/app_networks.py
|
|
control/app_pods.py
|
|
control/app_system.py
|
|
control/common.py
|
|
|
|
Rules:
|
|
- Never rewrite structure without agreement.
|
|
- Extend endpoints instead of replacing logic.
|
|
|
|
---
|
|
|
|
## Frontend stability
|
|
|
|
Files:
|
|
|
|
webui/html/index.html
|
|
|
|
Avoid:
|
|
- framework migrations
|
|
- large UI rewrites
|
|
|
|
Prefer incremental improvements.
|
|
|
|
---
|
|
|
|
## Allowed improvements
|
|
|
|
Safe changes include:
|
|
|
|
- new API endpoints
|
|
- optional JSON response fields
|
|
- new UI tabs
|
|
- bug fixes
|
|
- performance improvements
|
|
|
|
---
|
|
|
|
## Goal
|
|
|
|
System stability has priority over architectural perfection.
|
|
Prefer minimal and predictable changes.
|