install

Overview ¶

Package install is the operator-facing install layer: install.sh, the compose bundle and its dev/demo overlay, the hardened daemon.json, the systemd unit, the seccomp and AppArmor profiles and the demo scripts. It contains no runtime Go code.

The _test.go files next to it are the regression tests that pin the bundle's security-relevant facts without running Docker or spawning a shell: the http->https redirect target, the AppArmor pass-through and the shipped profile, the build-context exclusions that keep demo secrets out of image layers, and the installer's symlink-safe handling of the container-writable data tree.