Drew Newberry 3a7fd9b16d ci(canary): switch release canary to Docker-in-Docker with single-command test ...

Switch the release canary from Docker-outside-of-Docker (host socket
mount) to true Docker-in-Docker. The CI container now starts its own
dockerd, so the gateway cluster container is a child process and
127.0.0.1 port bindings are reachable directly.

This enables testing the real zero-to-sandbox user path: a single
`openshell sandbox create` that auto-bootstraps the gateway, pulls the
cluster image, and creates a sandbox — no --gateway-host workaround.

Dockerfile.ci changes:
- Add iptables (required by dockerd for container networking)
- Extract full Docker daemon suite (dockerd, containerd, runc) instead
  of CLI only

release-canary.yml changes:
- Remove /var/run/docker.sock volume mount
- Add dockerd startup step
- Remove gateway host resolution and explicit gateway start steps
- Simplify canary to single auto-bootstrap sandbox create command

2026-03-14 23:25:46 -07:00

..

docker

ci(canary): switch release canary to Docker-in-Docker with single-command test

2026-03-14 23:25:46 -07:00

helm/openshell

feat(sandbox): inject host gateway hostAliases into sandbox pods (#306)

2026-03-14 16:54:03 -07:00

kube

feat(sandbox): inject host gateway hostAliases into sandbox pods (#306)

2026-03-14 16:54:03 -07:00

sbom

feat(sbom): add SBOM generation, license resolution, and CSV export tooling (#239)

2026-03-11 15:34:00 -07:00