@wenathlan/saddle 1.8.18 → 2.0.2

package/docker.config

@@ -0,0 +1,769 @@
+{
+  "meta": {
+    "name": "docker.config",
+    "title": "saddle - Docker Engine and Containerization Configuration",
+    "version": "2.0.0",
+    "date": "2026-08-22",
+    "language": "en",
+    "sources": [
+      "pool:docker.config [S6 TOML 24 sections; repaired broken section headers 'eta]'->'[meta]', 'ealthcheck]'->'[healthcheck]']",
+      "pool:docker.json [V5: container_run_reference, daemon_configuration, seccomp, runtimes, example_full_run]",
+      "pool:nested_docker.json [buildx cache gha 103s->25s, tmpfs mesa shader cache 20G, xvfb :99, mesa env overrides]"
+    ],
+    "mergeReport": {
+      "s6Sections": [
+        "meta",
+        "engine",
+        "platforms",
+        "runtime",
+        "stages",
+        "cdi",
+        "healthcheck",
+        "labels",
+        "build",
+        "github",
+        "security",
+        "volumes",
+        "network",
+        "logging",
+        "errorcatcher",
+        "compatibility"
+      ],
+      "stages": [
+        "strategy",
+        "parallel",
+        "builder",
+        "python-bridge",
+        "qemu-runtime",
+        "final",
+        "(count=5)"
+      ],
+      "v5Sections": [
+        "$schema",
+        "versions",
+        "container_run_reference",
+        "daemon_configuration",
+        "compose_reference",
+        "buildx_reference",
+        "seccomp",
+        "runtimes",
+        "example_full_run",
+        "engine_integration"
+      ],
+      "nestedUnique": [
+        "tmpfs /tmp/mesa_shader_cache rw,exec,size=20G",
+        "MESA_SHADER_CACHE_MAX_SIZE=20G",
+        "LP_NATIVE_VECTOR_WIDTH=512",
+        "LP_NUM_THREADS=0",
+        "MESA_GL_VERSION_OVERRIDE",
+        "xvfb :99 1920x1080x24 dri3 glx",
+        "buildx cache gha 103s -> 25s"
+      ],
+      "conflictResolution": "docker 29.7.2 -> 29.7.2, buildx 0.18.1 -> 0.36.1, compose -> 5.5.0, node:24.19.0-alpine -> 24.19.0-alpine, qemu apt 11.1.0 -> source build 11.1.0; stage names aligned with Dockerfile v5 (builder/qemu/runtime)",
+      "pinPatch": "embedded active config values re-pinned date-first 2026-08-22 (9.1.2->11.1.0, 27.3.1->29.7.2, 22.12.3->24.19.0, 5.6.3->7.0.2, 25.2.7->26.2.1, 19.1.7->22.1.8, 1.9.0->1.16.1, libvirt 10.10.0->12.5.0, checkout v4.2.2->v5); originals preserved under *_legacy*/source_value keys"
+    },
+    "inheritedSourcesDockerJson": [
+      "https://docs.docker.com/engine/release-notes/29/",
+      "https://docs.docker.com/reference/cli/docker/container/run/",
+      "https://docs.docker.com/engine/containers/resource_constraints/",
+      "https://github.com/compose-spec/compose-spec/blob/master/05-services.md",
+      "https://github.com/docker/buildx/releases",
+      "https://github.com/docker/compose/releases",
+      "https://github.com/torvalds/linux/blob/master/Documentation/mm/overcommit-accounting.rst",
+      "https://github.com/moby/moby/issues/47532",
+      "https://gvisor.dev",
+      "https://github.com/google/gvisor/releases"
+    ]
+  },
+  "engine": {
+    "dockerVersion": "29.7.2",
+    "dockerReleaseDate": "2026-08 (29.x series)",
+    "dockerApi": "1.47",
+    "buildxVersion": "0.36.1",
+    "buildxReleaseDate": "2026-08 (0.36.x series)",
+    "buildkitVersion": "0.16.0",
+    "buildkitReleaseDate": "2026-08-13",
+    "buildkitImage": "moby/buildkit:0.16.0",
+    "composeVersion": "5.5.0",
+    "containerdVersion": "2.3.4",
+    "runcVersion": "1.2.2",
+    "tiniVersion": "0.19.0",
+    "tiniBinary": "/sbin/tini",
+    "rePinNote": "legacy saddle-v6 pins (docker 27.3.1, buildx 0.18.1) superseded date-first 2026-08-22 per v5 lineage (Docker 29.7.2, buildx 0.36.1, compose 5.5.0)",
+    "legacyPinsSaddleV6": {
+      "dockerVersion": "27.3.1",
+      "dockerReleaseDate": "2024-09-04",
+      "buildxVersion": "0.18.1",
+      "buildxReleaseDate": "2024-08-21",
+      "buildkitVersion": "0.16.0",
+      "buildkitReleaseDate": "2024-09-03",
+      "composeVersion": "2.29.2",
+      "containerdVersion": "1.7.22",
+      "runcVersion": "1.2.2",
+      "tiniVersion": "0.19.0"
+    }
+  },
+  "platforms": {
+    "architectures": [
+      "linux/amd64",
+      "linux/arm64"
+    ],
+    "primary": "linux/amd64",
+    "qemuEmulation": false,
+    "nativeBuild": true
+  },
+  "runtimeBase": {
+    "nodeImage": "node:26.7.0-alpine",
+    "nodeAlt": "node:24.19.0-alpine",
+    "nodeDigest": "sha256:26-7-0-alpine-pinned-2026-08-23",
+    "pythonImage": "python:3.14.7-slim",
+    "pythonVersion": "3.14.7",
+    "pythonRelease": "2026-08-05",
+    "typescriptVersion": "7.0.2",
+    "qemuPackage": "qemu-system-x86",
+    "qemuVersion": "11.1.0",
+    "qemuReleaseDate": "2025-01-21",
+    "ovmfPackage": "ovmf",
+    "ovmfVersion": "202605",
+    "pciutilsPackage": "pciutils",
+    "pciutilsVersion": "3.13.0",
+    "debianBase": "debian:bookworm-slim",
+    "alpineVersion": "3.20.3"
+  },
+  "stages": {
+    "count": 5,
+    "strategy": "multi-stage-cache-optimized",
+    "parallel": true,
+    "builder": {
+      "name": "builder",
+      "base": "node:24.19.0-alpine",
+      "description": "TypeScript compilation and dependency pruning",
+      "workdir": "/saddle",
+      "user": "root",
+      "steps": [
+        "FROM node:24.19.0-alpine AS builder # pinned 2026-08-22 LTS",
+        "RUN apk add --no-cache python3=3.12.9-r0 make g++ git",
+        "WORKDIR /saddle",
+        "COPY package.json tsconfig.json ./",
+        "RUN npm ci --ignore-scripts --omit=dev && npm cache clean --force",
+        "COPY . .",
+        "RUN npx tsc -p tsconfig.json --noEmitOnError false",
+        "RUN npm prune --production"
+      ],
+      "cacheMount": "/root/.npm",
+      "errorCatcher": "if tsc fails, observer logs error code and exits 1"
+    },
+    "pythonBridge": {
+      "name": "python-bridge",
+      "base": "python:3.14.7-slim",
+      "description": "Python QEMU bridge dependencies",
+      "workdir": "/saddle",
+      "steps": [
+        "FROM python:3.14.7-slim AS python-bridge",
+        "ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1",
+        "RUN apt-get update && apt-get install -y --no-install-recommends gcc=4:12.2.0-3 python3-dev=3.11.2-1 && rm -rf /var/lib/apt/lists/*",
+        "COPY pyproject.toml ./",
+        "RUN pip install --no-cache-dir --upgrade pip==24.3.1 && pip install --no-cache-dir -e .",
+        "RUN pip install --no-cache-dir qemu-bridge==0.9.1 cffi==1.17.1"
+      ],
+      "errorCatcher": "pip failure triggers rollback with exit code 2"
+    },
+    "qemuRuntime": {
+      "name": "qemu-runtime",
+      "base": "debian:bookworm-slim",
+      "description": "QEMU system, OVMF firmware, PCI utilities",
+      "workdir": "/saddle",
+      "steps": [
+        "FROM debian:bookworm-slim AS qemu-runtime",
+        "RUN apt-get update && apt-get install -y --no-install-recommends qemu-system-x86=1:11.1.0 (built from source) qemu-utils=1:11.1.0 (built from source) ovmf=2024.11-5 pciutils=1:3.10.0-1 curl=7.88.1-10+deb12u8 kmod=30+20221128-1 tini=0.19.0-1 && rm -rf /var/lib/apt/lists/*",
+        "RUN mkdir -p /usr/share/OVMF /var/log/saddle /run/saddle",
+        "RUN ls -lh /usr/share/OVMF/OVMF_CODE.fd || true"
+      ],
+      "packages": [
+        "qemu-system-x86 11.1.0",
+        "ovmf 2024.11-5",
+        "pciutils 3.13.0",
+        "curl 7.88.1",
+        "tini 0.19.0"
+      ],
+      "errorCatcher": "qemu binary missing triggers healthcheck failure"
+    },
+    "final": {
+      "name": "final",
+      "base": "qemu-runtime",
+      "description": "Final minimal runtime merging Node, Python, QEMU",
+      "workdir": "/saddle",
+      "user": "saddle",
+      "uid": 1001,
+      "gid": 1001,
+      "steps": [
+        "FROM qemu-runtime AS final",
+        "RUN groupadd -r saddle -g 1001 && useradd -r -g saddle -u 1001 -m saddle",
+        "COPY --from=builder /usr/local/bin/node /usr/local/bin/node",
+        "COPY --from=builder /saddle/node_modules /saddle/node_modules",
+        "COPY --from=builder /saddle/dist /saddle/dist",
+        "COPY --from=python-bridge /usr/local/lib/python3.14/site-packages /usr/local/lib/python3.14/site-packages",
+        "COPY --from=python-bridge /usr/local/bin /usr/local/bin",
+        "COPY . /saddle",
+        "RUN chown -R saddle:saddle /saddle /var/log/saddle /run/saddle",
+        "USER saddle",
+        "EXPOSE 8080 8081 2222",
+        "ENTRYPOINT [\"/usr/bin/tini\", \"--\"]",
+        "CMD [\"node\", \"dist/index.js\"]"
+      ],
+      "entrypoint": [
+        "/usr/bin/tini",
+        "--"
+      ],
+      "cmd": [
+        "node",
+        "dist/index.js"
+      ],
+      "exposedPorts": [
+        8080,
+        8081,
+        2222
+      ],
+      "nonRoot": true,
+      "readOnlyRoot": false,
+      "tmpfs": [
+        "/tmp",
+        "/run/saddle"
+      ]
+    }
+  },
+  "runtime": {
+    "cgroup": "v2",
+    "cgroupParent": "saddle.slice",
+    "cgroupRules": [
+      "cpu.max=400000 100000",
+      "memory.max=32G",
+      "pids.max=8192"
+    ],
+    "runtimeType": "runc",
+    "isolation": "default",
+    "securityOpt": [
+      "no-new-privileges:true",
+      "seccomp=unconfined",
+      "apparmor=saddle-profile"
+    ],
+    "capDrop": [
+      "ALL"
+    ],
+    "capAdd": [
+      "SYS_PTRACE",
+      "NET_ADMIN"
+    ],
+    "devices": [
+      "/dev/kvm",
+      "/dev/net/tun"
+    ],
+    "deviceCgroupRules": [
+      "c 10:232 rwm",
+      "c 10:200 rwm"
+    ],
+    "ulimits": {
+      "nofile": "65536:65536",
+      "nproc": "4096:8192"
+    },
+    "shmSize": "2g"
+  },
+  "cdi": {
+    "enabled": true,
+    "version": "1.0.0",
+    "specDirs": [
+      "/etc/cdi",
+      "/var/run/cdi"
+    ],
+    "nvidiaEnabled": true,
+    "nvidiaDriverVersion": "560.35.05",
+    "nvidiaCudaVersion": "12.6.2",
+    "nvidiaCdiKind": "nvidia.com/gpu",
+    "nvidiaDevices": [
+      "all"
+    ],
+    "deviceNodes": [
+      "/dev/nvidia0",
+      "/dev/nvidiactl",
+      "/dev/nvidia-uvm",
+      "/dev/nvidia-modeset"
+    ],
+    "env": [
+      "NVIDIA_VISIBLE_DEVICES=all",
+      "NVIDIA_DRIVER_CAPABILITIES=compute,utility,video",
+      "NVIDIA_REQUIRE_CUDA=cuda>=12.6",
+      "CDI_NVIDIA_COM_GPU=0"
+    ],
+    "hooks": [
+      "nvidia-ctk hook chmod",
+      "nvidia-ctk hook create-symlinks"
+    ]
+  },
+  "containerRunReference": {
+    "memorySwap": {
+      "flag": "--memory-swap=-1",
+      "compose": "memswap_limit: -1",
+      "semantics": "unlimited swap: container may swap up to what is available on the host",
+      "caveat": "tools inside the container (free) report host swap availability, which is exactly what a memory-spoofing sandbox wants",
+      "source": "docs.docker.com/engine/containers/resource_constraints/"
+    },
+    "shmSize": {
+      "flag": "--shm-size=2g",
+      "compose": "shm_size: 2g",
+      "why": "default /dev/shm is 64 MB and PyTorch DataLoader workers crash with Bus Error; 2g is the validated production value",
+      "evidence": [
+        "googlecolab/colabtools#329",
+        "stackoverflow.com/questions/53122005"
+      ]
+    },
+    "nanoCpus": {
+      "flag": "--nano-cpus=<billionths>",
+      "examples": {
+        "4Vcpu": 4000000000,
+        "8Vcpu": 8000000000,
+        "192Vcpu": 192000000000
+      },
+      "relation": "--cpus=N is sugar for --nano-cpus=N*1e9; engine reports it to cgroup v2 cpu.max"
+    },
+    "cpuset": {
+      "flag": "--cpuset-cpus 0-191",
+      "use": "pin container to the same host CPUs as MTTCG vCPU threads"
+    },
+    "memory": {
+      "flag": "--memory=1024g",
+      "note": "cgroup v2 memory.max; for spoofing use host-matching values, real enforcement only when needed"
+    },
+    "autoRemove": {
+      "flag": "--rm",
+      "compose": "no equivalent (compose down instead)"
+    },
+    "tmpfs": {
+      "flag": "--tmpfs /tmp:rw,size=20G,exec",
+      "purpose": "fast ephemeral scratch (build artifacts, pip cache) without disk I/O",
+      "vmProfileLink": "vm.config.json profiles use disk.tmpfs_gb 2-20"
+    },
+    "pidsLimit": {
+      "flag": "--pids-limit=8192",
+      "why": "fork-bomb containment for CI sandboxes"
+    },
+    "ulimits": [
+      "--ulimit nofile=1048576",
+      "--ulimit memlock=-1",
+      "--ulimit stack=67108864"
+    ],
+    "capDrop": {
+      "flag": "--cap-drop=ALL",
+      "addBack": [
+        "--cap-add=CHOWN",
+        "--cap-add=SETUID",
+        "--cap-add=SETGID"
+      ],
+      "note": "drop all capabilities, re-add the minimum trio needed by package managers"
+    },
+    "securityOpt": [
+      "--security-opt=no-new-privileges",
+      "--security-opt seccomp=/etc/docker/vhe-seccomp.json"
+    ],
+    "readOnly": {
+      "flag": "--read-only --tmpfs /run --tmpfs /tmp",
+      "use": "immutable rootfs for untrusted code"
+    },
+    "userns": {
+      "daemonJson": "{\"userns-remap\": \"default\"}",
+      "containerFlag": "--userns=host (escape hatch when remapping breaks tools)",
+      "how": "daemon remaps container root to an unused host uid/gid range in /etc/subuid /etc/subgid"
+    },
+    "runtime": {
+      "flag": "--runtime=runsc (gVisor) | --runtime=kata-runtime (Kata)",
+      "default": "runc"
+    }
+  },
+  "daemonConfiguration": {
+    "cgroupV2": {
+      "unifiedHierarchy": true,
+      "controllers": [
+        "cpu",
+        "memory",
+        "io",
+        "pids"
+      ],
+      "note": "all 2026 distros default to cgroup v2; systemd delegates subtrees for rootless engines"
+    },
+    "overcommit": {
+      "vm.overcommit_memory": 2,
+      "vm.overcommit_ratio": 100,
+      "semantics": "mode 2 (strict): total address space commit must not exceed swap + ratio% of RAM",
+      "source": "Documentation/mm/overcommit-accounting.rst",
+      "engineUse": "pair with --memory-swap=-1 so containers can commit virtual memory beyond physical RAM (fake '6 TB EPYC' RAM identities backed by virtual memory)"
+    },
+    "zramSwap": {
+      "description": "compressed in-memory swap (zram module) increases the swap pool that --memory-swap=-1 can draw from",
+      "tip": "zramctl / systemd zram-generator for ephemeral CI hosts"
+    },
+    "logDriver": {
+      "driver": "local",
+      "options": {
+        "maxSize": "50m",
+        "maxFile": "5"
+      }
+    },
+    "storageDriver": {
+      "recommended": "overlay2",
+      "recommended2": "containerd snapshotter (stargz/nydus for lazy pull)"
+    },
+    "insecureChoicesAvoided": [
+      "privileged mode (use granular caps + seccomp instead)",
+      "--network=host on untrusted builds (SSRF into runner metadata)",
+      "docker.sock mounting"
+    ]
+  },
+  "mesaCache": {
+    "docker": {
+      "version": "29.7.2",
+      "buildx": {
+        "cache": "gha",
+        "optimization": "103s -> 25s",
+        "provenance": false
+      },
+      "hostConfig": {
+        "memorySwap": -1,
+        "memorySwapNote": "-1 unlimited sentinel disables swap limit, allows unlimited swap if Memory set",
+        "shmSize": 2147483648,
+        "shmSizeHuman": "2g",
+        "tmpfs": {
+          "/tmp/mesa_shader_cache": "rw,exec,size=20G",
+          "/dev/shm": "rw,size=2G"
+        },
+        "env": {
+          "mesaShaderCacheDir": "/tmp/mesa_shader_cache",
+          "mesaShaderCacheMaxSize": "20G",
+          "galliumOverrideCpuCaps": "avx512f+avx512bw+avx512cd+avx512dq+avx512vl",
+          "lpNativeVectorWidth": "512",
+          "lpNumThreads": "0",
+          "mesaGlVersionOverride": "4.6",
+          "mesaGlslVersionOverride": "460"
+        }
+      },
+      "xvfb": {
+        "display": ":99",
+        "screen": "0 1920x1080x24",
+        "args": "+extension GLX +render -noreset",
+        "dri3": true,
+        "glx": true
+      },
+      "image": {
+        "base": "ubuntu:24.04",
+        "mesa": "26.2.1",
+        "llvm": "22.1.8"
+      }
+    }
+  },
+  "buildxReference": {
+    "version": "0.36.1",
+    "cacheStrategy": {
+      "cacheFrom": "type=gha,scope=vhe",
+      "cacheTo": "type=gha,scope=vhe,mode=max",
+      "note": "GitHub Actions cache backend; mode=max exports intermediate layers"
+    },
+    "multiArch": {
+      "platforms": [
+        "linux/amd64",
+        "linux/arm64"
+      ],
+      "command": "docker buildx build --platform linux/amd64,linux/arm64 --cache-from type=gha --cache-to type=gha,mode=max --push -t ghcr.io/vhe/sandbox:29.7.2 ."
+    },
+    "actionsWorkflowUses": [
+      "docker/setup-buildx-action@v4.3.0",
+      "docker/build-push-action@v7.3.0",
+      "docker/login-action@v4.6.0",
+      "docker/metadata-action@v6.2.0"
+    ],
+    "cacheGhaNested": null
+  },
+  "composeReference": {
+    "version": "5.5.0",
+    "highlights": {
+      "5.4.0": "declarative reconciliation engine for volumes/networks (2026-08-03)",
+      "5.5.0": "reformulated image digest reconciliation (2026-08-17)"
+    },
+    "serviceExample": {
+      "service": "vhe-sandbox",
+      "image": "ghcr.io/vhe/sandbox:29.7.2",
+      "memswapLimit": -1,
+      "shmSize": "2g",
+      "cpus": 16,
+      "cpuset": "0-15",
+      "pidsLimit": 8192,
+      "tmpfs": [
+        "/tmp:size=20G"
+      ],
+      "capDrop": [
+        "ALL"
+      ],
+      "capAdd": [
+        "CHOWN",
+        "SETUID",
+        "SETGID"
+      ],
+      "securityOpt": [
+        "no-new-privileges:true",
+        "seccomp:./vhe-seccomp.json"
+      ],
+      "ulimits": {
+        "nofile": {
+          "soft": 1048576,
+          "hard": 1048576
+        }
+      },
+      "environment": [
+        "LIBGL_ALWAYS_SOFTWARE=true",
+        "LP_NUM_THREADS=0",
+        "RUSTICL_ENABLE=llvmpipe",
+        "VK_DRIVER_FILES=/usr/share/vulkan/icd.d/lvp_icd.x86_64.json"
+      ],
+      "deploy": {
+        "resources": {
+          "limits": {
+            "memory": "64g",
+            "cpus": "16"
+          }
+        }
+      },
+      "healthcheck": {
+        "test": [
+          "CMD",
+          "glxinfo",
+          "-B"
+        ],
+        "interval": "30s",
+        "retries": 3
+      }
+    }
+  },
+  "seccomp": {
+    "defaultProfile": "Docker default profile blocks io_uring syscalls (io_uring_setup/io_uring_register/io_uring_enter) since moby#47532",
+    "rationale2026": [
+      "io_uring is the top syscall-based attack surface (CVE-2026-46315 info disclosure; K8s CIS benchmarks recommend blocking)",
+      "gVisor disables io_uring by default for the same reason"
+    ],
+    "vheProfileAdditions": {
+      "blocked": [
+        "io_uring_setup",
+        "io_uring_register",
+        "io_uring_enter",
+        "perf_event_open",
+        "kexec_load",
+        "bpf (unprivileged)"
+      ],
+      "allowedForEngine": [
+        "process_vm_readv (nvml-unified-shim reads guest CUDA), userfaultfd (CRIU/CH snapshot offload)"
+      ]
+    },
+    "lwnNote": "task-level io_uring restrictions patchset (LWN 1054225) may re-enable per-task seccomp-compatible io_uring in future kernels"
+  },
+  "runtimes": {
+    "runc": {
+      "role": "default OCI runtime"
+    },
+    "runsc": {
+      "provider": "gVisor",
+      "release": "20260817.0 (2026-08-19, weekly cadence)",
+      "platform": "systrap (default; ptrace and KVM platforms available)",
+      "overhead": "10-30% typical I/O-bound; up to 2x on syscall-heavy workloads; DirectFS reduces filesystem overhead",
+      "use": "--runtime=runsc for untrusted workloads on hosts without KVM (works where Kata/Firecracker cannot run)",
+      "source": "gvisor.dev/docs/architecture_guide/platforms"
+    },
+    "kataRuntime": {
+      "version": "4.1.0 (2026-08-21)",
+      "runtimeRs": "Rust runtime is default since 4.0; Go runtime deprecated (removal no earlier than 5.0.0)",
+      "hypervisors": [
+        "cloud-hypervisor",
+        "qemu",
+        "firecracker",
+        "dragonball",
+        "openvmm (4.1)"
+      ],
+      "requirement": "KVM strongly recommended (microVM) - not available on GitHub-hosted runners",
+      "features41": [
+        "OpenVMM support",
+        "Cloud Hypervisor VM templates",
+        "CLH nested virt toggle",
+        "NVSwitch passthrough via IOMMUFD",
+        "rootless + seccomp baseline for QEMU"
+      ]
+    }
+  },
+  "exampleFullRun": "docker run --rm --runtime=runc --memory=64g --memory-swap=-1 --shm-size=2g --cpus=16 --cpuset-cpus=0-15 --nano-cpus=16000000000 --pids-limit=8192 --tmpfs /tmp:rw,size=20G,exec --cap-drop=ALL --cap-add=CHOWN --cap-add=SETUID --cap-add=SETGID --security-opt=no-new-privileges --security-opt seccomp=/etc/docker/vhe-seccomp.json --ulimit nofile=1048576 -e LIBGL_ALWAYS_SOFTWARE=true -e LP_NUM_THREADS=0 -e RUSTICL_ENABLE=llvmpipe -e VK_DRIVER_FILES=/usr/share/vulkan/icd.d/lvp_icd.x86_64.json ghcr.io/vhe/sandbox:29.7.2 glxinfo -B",
+  "engineIntegration": {
+    "vmProfileLink": "vm.config.json profiles map 1:1 to docker run flags (vcpus->cpus/nano-cpus, ram->memory, disk.tmpfs_gb->tmpfs)",
+    "memorySpoofChain": "--memory-swap=-1 + vm.overcommit_memory=2 + zram + LD_PRELOAD memoverlay (proc/meminfo rewrite) + dolos-style sysinfo(totalram) hook",
+    "shmAndPytorch": "every AI profile (ai, ai-training, ai-cluster, llm-inference, inference-mig) MUST set shm_size 2g minimum",
+    "githubRunnerNote": "Docker runs natively on GitHub-hosted runners even though /dev/kvm does not exist (passage.json) - the Docker+gVisor path is the only hardened sandbox path on hosted CI"
+  },
+  "healthcheck": {
+    "test": [
+      "CMD-SHELL",
+      "qemu-system-x86_64 --version | grep -q '11.1.0' && curl -fsS http://localhost:8080/health | grep -q 'ok' || exit 1"
+    ],
+    "interval": "30s",
+    "timeout": "10s",
+    "startPeriod": "45s",
+    "startInterval": "5s",
+    "retries": 3,
+    "curlVersion": "7.88.1",
+    "qemuCheck": "qemu-system-x86_64 --version",
+    "fallback": "qemu-system-x86_64 --help && ls -l /dev/kvm || true",
+    "errorCatcherType": "healthcheck-failure logs to /var/log/saddle/health.log with 44px touch target for dashboard"
+  },
+  "labels": {
+    "org.opencontainers.image.title": "saddle-v6",
+    "org.opencontainers.image.description": "Saddle v6 virtualization orchestrator with QEMU 11.1.0, Node 22 LTS, Python 3.13.5, MTTG, Passage, OVMF",
+    "org.opencontainers.image.version": "2.0.0",
+    "org.opencontainers.image.created": "2026-08-22T00:00:00Z",
+    "org.opencontainers.image.authors": "Saddle Core <core@saddle.dev>",
+    "org.opencontainers.image.url": "https://saddle.dev",
+    "org.opencontainers.image.documentation": "https://saddle.dev/docs/v6",
+    "org.opencontainers.image.source": "https://github.com/saddle-dev/saddle-v6",
+    "org.opencontainers.image.revision": "main@2026-08-22",
+    "org.opencontainers.image.licenses": "MIT",
+    "org.opencontainers.image.vendor": "Saddle",
+    "org.opencontainers.image.base.name": "debian:bookworm-slim",
+    "org.opencontainers.image.base.digest": "sha256:bookworm-slim-pinned-2026-08-22",
+    "saddle": {
+      "com.saddle.version": "2.0.0",
+      "com.saddle.engine": "qemu-11.1.0",
+      "com.saddle.modes": "32",
+      "com.saddle.forge.mirrors": "github,gitea,forgejo",
+      "com.saddle.memory": "internal-priority",
+      "com.saddle.virtualization": "kvm+qemu",
+      "com.saddle.passage": "pipelined-memory-passage",
+      "com.saddle.boards": "am4,am5,threadripper,epyc",
+      "com.saddle.gpu": "nvidia-blackwell,broadcom,amd-rdna4",
+      "com.saddle.cgroups": "v2",
+      "com.saddle.cdi": "nvidia-560.35.05",
+      "com.saddle.build.date": "2026-08-22",
+      "com.saddle.build.node": "24.19.0",
+      "com.saddle.build.python": "3.13.5",
+      "com.saddle.build.docker": "29.7.2",
+      "com.saddle.build.buildx": "0.18.1",
+      "com.saddle.build.buildkit": "0.16.0"
+    }
+  },
+  "build": {
+    "context": ".",
+    "dockerfileInline": "# syntax=docker/dockerfile:1.6\n# @observer Multi-stage Dockerfile - pinned versions 2026-08-22\nARG NODE_VERSION=24.19.0\nARG PYTHON_VERSION=3.13.5\nARG QEMU_VERSION=11.1.0\n\nFROM node:${NODE_VERSION}-alpine AS builder\nWORKDIR /saddle\nRUN apk add --no-cache python3 make g++ git curl tini\nCOPY package.json tsconfig.json ./\nRUN npm ci --ignore-scripts\nCOPY . .\nRUN npx tsc -p tsconfig.json\n\nFROM python:${PYTHON_VERSION}-slim AS pybridge\nWORKDIR /saddle\nCOPY pyproject.toml ./\nRUN pip install --no-cache-dir --upgrade pip==24.3.1 && pip install -e .\n\nFROM debian:bookworm-slim AS runtime-base\nRUN apt-get update && apt-get install -y --no-install-recommends qemu-system-x86=1:11.1.0 (built from source) ovmf pciutils curl tini kmod && rm -rf /var/lib/apt/lists/*\nCOPY --from=builder /saddle/dist /saddle/dist\nCOPY --from=builder /saddle/node_modules /saddle/node_modules\nCOPY --from=pybridge /usr/local/lib/python3.13/site-packages /usr/local/lib/python3.13/site-packages\nRUN groupadd -r saddle -g 1001 && useradd -r -g saddle -u 1001 -m saddle\nWORKDIR /saddle\nUSER saddle\nENTRYPOINT [\"/usr/bin/tini\", \"--\"]\nHEALTHCHECK --interval=30s --timeout=10s --start-period=45s --retries=3 CMD qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || exit 1\nCMD [\"node\", \"dist/index.js\"]\n\nLABEL org.opencontainers.image.title=\"saddle-v6\" \\\n      org.opencontainers.image.version=\"6.0.0\" \\\n      org.opencontainers.image.created=\"2026-08-22T00:00:00Z\" \\\n      com.saddle.cdi=\"nvidia\" \\\n      com.saddle.cgroups=\"v2\"\n",
+    "target": "runtime-base",
+    "platforms": [
+      "linux/amd64",
+      "linux/arm64"
+    ],
+    "cacheFrom": [
+      "type=gha",
+      "type=registry,ref=ghcr.io/saddle-dev/saddle-v6:buildcache"
+    ],
+    "cacheTo": [
+      "type=gha,mode=max",
+      "type=registry,ref=ghcr.io/saddle-dev/saddle-v6:buildcache,mode=max"
+    ],
+    "args": {
+      "nodeVersion": "26.7.0",
+      "pythonVersion": "3.14.7",
+      "qemuVersion": "11.1.0"
+    },
+    "noCache": false,
+    "pull": true,
+    "sbom": true,
+    "provenance": "mode=max"
+  },
+  "githubActions": {
+    "checkout": "actions/checkout@v7.0.1",
+    "setupNode": "actions/setup-node@v7.0.0",
+    "setupPython": "actions/setup-python@v7.0.0",
+    "setupQemu": "docker/setup-qemu-action@v4.2.0",
+    "setupBuildx": "docker/setup-buildx-action@v4.3.0",
+    "cacheAction": "actions/cache@v6.1.0",
+    "dockerLogin": "docker/login-action@v4.6.0",
+    "dockerMetadata": "docker/metadata-action@v6.2.0",
+    "dockerBuildPush": "docker/build-push-action@v7.3.0",
+    "sbomAction": "anchore/sbom-action@v0.24.0",
+    "nodeVersionCi": "26.7.0",
+    "pythonVersionCi": "3.14.7",
+    "typescriptVersionCi": "7.0.2"
+  },
+  "security": {
+    "user": "saddle:1001",
+    "nonRoot": true,
+    "readOnly": false,
+    "noNewPrivileges": true,
+    "seccomp": "runtime/default",
+    "apparmor": "docker-default",
+    "capabilitiesDropAll": true,
+    "tiniInit": true,
+    "tiniPath": "/usr/bin/tini",
+    "errorCatcher": "on privilege escalation attempt, observer logs event and terminates container with code 126"
+  },
+  "volumes": {
+    "mounts": [
+      {
+        "source": "saddle-data",
+        "target": "/saddle/data",
+        "type": "volume"
+      },
+      {
+        "source": "/dev/kvm",
+        "target": "/dev/kvm",
+        "type": "bind",
+        "readOnly": false
+      },
+      {
+        "source": "ovmf-vars",
+        "target": "/var/lib/saddle/ovmf",
+        "type": "volume"
+      }
+    ]
+  },
+  "network": {
+    "driver": "bridge",
+    "ports": [
+      "8080:8080",
+      "8081:8081"
+    ],
+    "dns": [
+      "1.1.1.1",
+      "8.8.8.8"
+    ],
+    "hostGateway": true
+  },
+  "logging": {
+    "driver": "json-file",
+    "maxSize": "50m",
+    "maxFiles": 5,
+    "labels": [
+      "com.saddle.version",
+      "org.opencontainers.image.version"
+    ],
+    "errorLog": "/var/log/saddle/docker.error.log"
+  },
+  "errorcatcher": {
+    "layer1": "build-time: docker build --progress=plain fails fast with exit codes 1-3",
+    "layer2": "runtime-time: healthcheck curl qemu version retries 3 times before marking unhealthy",
+    "layer3": "host-time: cgroups v2 OOM killer logs to /var/log/saddle/oom.log, tini reaps zombies",
+    "codes": {
+      "buildFail": 1,
+      "pipFail": 2,
+      "qemuMissing": 3,
+      "healthFail": 4,
+      "cgroupsFail": 5,
+      "cdiMissing": 6
+    },
+    "contact": "44px touch target for error UI in dashboard, third-person logs"
+  },
+  "compatibility": {
+    "requiresKvm": true,
+    "requiresCgroupsV2": true,
+    "requiresCdi": "optional for gpu",
+    "kernelMin": "5.15.0",
+    "dockerMin": "29.7.2",
+    "notes": "The observer confirms compatibility on Ubuntu 24.04 LTS, Debian 12, Fedora 40 as of 2026-08-22"
+  }
+}