mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-12 00:06:14 +00:00
Ruben FiszelandClaude Opus 4.8
f61cf1633b
Generalize the per-job rootless podman instance to every docker job (any sandbox mode) instead of only nsjail, and remove the long-lived shared service: - Drop start_container_runtime_maybe() + its worker-startup call + the global DOCKER_HOST mutation. Each docker job now spins up its own ephemeral per-job podman (start_per_job_podman) and tears it down at job end — so no container outlives any job, and there's no standing shared socket on the worker. - per_job_podman is gated strictly on container_runtime=podman. The legacy path (externally-provided DOCKER_HOST or a mounted /var/run/docker.sock, without container_runtime=podman) is unchanged: connect_docker(None)/forwarded env, and Windmill only manages the $WM_JOB_ID container as before. - docker_host handed to the script: the in-jail /tmp/podman.sock under nsjail (bind-mounted), else the per-job host socket directly (unshare/none). - The "no Docker daemon reachable" hint no longer fires when container_runtime=podman (per-job provides the daemon). - monitor: drop the container_runtime killpill — with no startup service the config is read live per job, no worker restart needed on change. Verified e2e against rootless podman: docker jobs work + confine extra containers under nsjail AND unshare; legacy host-socket jobs run against the host daemon with no per-job podman and extras persisting (unchanged). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise