didericis c05d1ddcdb feat(ssh-gate): add DockerSSHGate sidecar lifecycle ...

PRD 0007: Docker-specific start/stop for the SSH egress gate.
Mirrors DockerPipelockProxy: docker create on the internal
network with /bin/sh entrypoint, docker cp the staged entrypoint
script in, attach to the egress network, docker start. Image is
alpine/socat pinned by digest — self-sufficient at boot so the
gate's agent-facing leg can stay on the --internal network.

Not yet wired into the bottle launch path; that lands next.

2026-05-12 15:57:56 -04:00

..

provision

feat(provision): install pipelock CA into the agent + add curl

2026-05-12 14:50:20 -04:00

__init__.py

refactor(docker): split backend.py into prepare / launch / cleanup

2026-05-12 10:56:22 -04:00

backend.py

feat(provision): install pipelock CA into the agent + add curl

2026-05-12 14:50:20 -04:00

bottle_cleanup_plan.py

refactor: rename platform abstraction to backend

2026-05-10 23:59:38 -04:00

bottle_plan.py

feat(bottle-plan): render TLS interception in the dry-run preflight

2026-05-12 14:52:53 -04:00

bottle.py

feat(bottle): add exec method to the bottle abstraction

2026-05-12 11:18:43 -04:00

cleanup.py

refactor(docker): split backend.py into prepare / launch / cleanup

2026-05-12 10:56:22 -04:00

launch.py

feat(provision): install pipelock CA into the agent + add curl

2026-05-12 14:50:20 -04:00

network.py

style: pass explicit check= to every subprocess.run call

2026-05-12 10:13:56 -04:00

pipelock.py

feat(pipelock): enable tls_interception with per-bottle ephemeral CA

2026-05-12 14:45:36 -04:00

prepare.py

refactor(docker): split backend.py into prepare / launch / cleanup

2026-05-12 10:56:22 -04:00

ssh_gate.py

feat(ssh-gate): add DockerSSHGate sidecar lifecycle

2026-05-12 15:57:56 -04:00

util.py

refactor(docker): move force_remove_container into the docker util module

2026-05-12 10:58:05 -04:00