CellarCellar
Architecture

Binaries

cellard, cellar, cellar-gateway, and cellar-agent roles

BinaryRole
cellardAlways-on node daemon (manager or worker). Local control over a unix socket; remote gRPC on :17946 after init/join. Runs sandboxes via host Docker.
cellarCLI client (init, join, join-token, status, api-key …, node …, sandbox …) talking to local cellard.
cellar-gatewayHTTP/JSON front door (Gin). Runs beside cellard on manager or worker hosts; proxies to manager SandboxAPI with the caller’s API key. Default listen :8080.
cellar-agentIn-sandbox PID 1 init and job supervisor. Bound into each container; exec/jobs go through the Docker API.