2026-05-12 16:21:12 -04:00
1 changed files with 6 additions and 3 deletions
@@ -97,9 +97,12 @@ Mirror the pipelock layout:
  egress network, `docker start`. `stop` is idempotent `docker rm
  -f`. Container name: `claude-bottle-ssh-gate-<slug>`.

-Forwarder image: `alpine/socat`, pinned by digest. One socat
-process per ssh entry, multiplexed inside the same gate container
-via an entrypoint script that backgrounds N socat invocations:
+Forwarder image: `alpine/socat`, pinned by digest. Must be
+self-sufficient at boot (no apk/apt pulls on first run) because
+the gate's agent-facing leg sits on the `--internal` network and
+has no internet at startup. One socat process per ssh entry,
+multiplexed inside the same gate container via an entrypoint
+script that backgrounds N socat invocations:

 ```
 socat TCP-LISTEN:<port_i>,reuseaddr,fork TCP:<Hostname_i>:<Port_i>