alexandr 0.3.1 → 0.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alexandr",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Run the alexandr workspace runtime locally (npx alexandr up), and develop alexandr apps against a workspace (alexandr app link | dev | build | deploy).",
   "type": "module",
   "bin": {

package/src/commands.js

@@ -15,7 +15,7 @@ import {
 } from "./docker.js";
 import {
   resolveInstance, isMaterialized, materialize, readEnv, envHas, setEnv,
-  unsetEnv, kernelPort, pruneSnapshots,
+  unsetEnv, kernelPort, pruneSnapshots, dockerConfigDir,
 } from "./instance.js";
 export { updater } from "./updater.js";
 import { kernelUrl, health, version as kVersion, waitHealthy, waitPosture } from "./probe.js";
@@ -111,7 +111,12 @@ function profileArgs(dir) {
 function stampUpdaterEnv(inst) {
   setEnv(inst.dir, "ALEXANDR_INSTANCE_DIR", hostPath(inst.dir));
   setEnv(inst.dir, "ALEXANDR_COMPOSE_PROJECT", inst.projectName);
-  if (process.env.ALEXANDR_UPDATER_INSIDE !== "1") setEnv(inst.dir, "ALEXANDR_UPDATER_IMAGE_TAG", pkgVersion());
+  if (process.env.ALEXANDR_UPDATER_INSIDE !== "1") {
+    setEnv(inst.dir, "ALEXANDR_UPDATER_IMAGE_TAG", pkgVersion());
+    // The host's docker config, so the sidecar's pulls carry this box's registry login
+    // (found on the first real press: an anonymous pull of the private image → `unauthorized`).
+    setEnv(inst.dir, "ALEXANDR_DOCKER_CONFIG", hostPath(dockerConfigDir()));
+  }
 }
 
 /**

package/src/instance.js

@@ -128,6 +128,18 @@ export function pruneSnapshots(dir, keep = 3) {
   return removed;
 }
 
+/**
+ * Where THIS host's Docker CLI keeps its config — the registry login `alexandr up`/`login`
+ * wrote (`docker login` honours `DOCKER_CONFIG`, else `~/.docker`). The updater sidecar mounts
+ * it read-only: a pull's credential is sent by the client, not held by the daemon, so a docker
+ * CLI inside the sidecar with no config pulls anonymously and the private kernel image answers
+ * `unauthorized` — exactly what the first real press did (aos, 2026-09-08).
+ */
+export function dockerConfigDir(env = process.env, home = os.homedir()) {
+  const explicit = (env.DOCKER_CONFIG || "").trim();
+  return explicit || path.join(home, ".docker");
+}
+
 export function kernelPort(dir) {
   const v = readEnv(dir).ALEXANDR_KERNEL_PORT;
   const n = v ? Number(v) : 3030;

package/templates/docker-compose.yml

@@ -54,6 +54,11 @@ services:
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock                 # THE socket. Only here.
       - ${ALEXANDR_INSTANCE_DIR:-/nonexistent}:${ALEXANDR_INSTANCE_DIR:-/nonexistent}
+      # The host's Docker CONFIG, read-only — the registry login `alexandr up`/`login` wrote
+      # lives there, and a pull's credential is sent by the CLIENT, not held by the daemon:
+      # without this the sidecar's own docker CLI pulls anonymously and the private kernel
+      # image answers `unauthorized` (found on the first real press, aos, 2026-09-08).
+      - ${ALEXANDR_DOCKER_CONFIG:-/nonexistent}:/root/.docker:ro
       - updater_run:/run/alexandr
     restart: unless-stopped
 

package/templates/env.example

@@ -19,6 +19,7 @@
 # ALEXANDR_INSTANCE_DIR=        # this directory, at its host path (mounted at the same path)
 # ALEXANDR_COMPOSE_PROJECT=     # the compose project the sidecar drives (the host's, verbatim)
 # ALEXANDR_UPDATER_IMAGE_TAG=   # the CLI version that installed it (= the sidecar's version)
+# ALEXANDR_DOCKER_CONFIG=       # this host's docker config dir (its registry login), mounted read-only
 
 # ---- account link (REQUIRED — the runtime refuses to serve unlinked) --------
 # Every runtime must be linked to an alexandr account before it serves anyone