Documentation
¶
Overview ¶
Command wardyn-rec is Wardyn's per-workspace PTY session recorder. It runs INSIDE the agent container as a thin wrapper around the agent process.
License hygiene: asciinema is GPL. wardyn-rec only ever *execs* it as a subprocess (never linked), so Wardyn stays Apache-2.0. When asciinema is not present on PATH, wardyn-rec falls back to piping combined output to a plain .log file so a recording always exists.
Delivery modes (after the recording is captured):
- -out-dir <path> Copy the finished cast file into path/<run-id>.cast (or .log for the fallback). This is the shared-volume path used in compose/kind deployments.
- -upload-url <url> HTTP PUT the cast to <url> with a Bearer token from -run-token (or WARDYN_RUN_TOKEN env). Used when the control plane is reachable from the agent container.
-upload-url takes precedence. The control plane's launcher (RecorderArgv, internal/runner/sandbox.go) never passes both: when an upload URL is offered it suppresses -out-dir, so no unmasked cast reaches a path the API serves; -out-dir is only the fallback when no upload URL exists. Setting both by hand is a masking bypass, not a supported mode. If neither is set the recording is left in -cast-dir (the original behavior).
Usage:
wardyn-rec -cast-dir /var/log/wardyn -run <uuid> [options] -- <agent argv...>
Source Files