Architecture
Binaries
cellard, cellar, cellar-gateway, and cellar-agent roles
| Binary | Role |
|---|---|
cellard | Always-on node daemon (manager or worker). Local control over a unix socket; remote gRPC on :17946 after init/join. Runs sandboxes via host Docker. |
cellar | CLI client (init, join, join-token, status, api-key …, node …, sandbox …) talking to local cellard. |
cellar-gateway | HTTP/JSON front door (Gin). Runs beside cellard on manager or worker hosts; proxies to manager SandboxAPI with the caller’s API key. Default listen :8080. |
cellar-agent | In-sandbox PID 1 init and job supervisor. Bound into each container; exec/jobs go through the Docker API. |