Deployment (AKIOS V1.0)
Minimal, security-first deployment: single-process cage via pip or Docker. No sidecars, no reverse proxies, no multi-service stacks.
Scope (what’s supported)
- Pip package (Linux: kernel-hard security; macOS/Windows: standard isolation).
- Docker container (cross-platform, policy-based security).
- Optional minimal Dockerfile and a single-service example only.
Out of scope (V1.0)
No compose stacks, db/redis, proxies, monitoring, systemd, scaling, hardening scripts. Keep it single-container/single-binary.
Minimal Docker example
FROM python:3.12-slim
RUN pip install akios
CMD ["akios", "run", "/app/templates/hello-workflow.yml"]
docker run --rm -v $(pwd)/templates:/app/templates akios:latest
Safety boundaries
- Air-gapped capable after install.
- No ports open by default; run as non-root (
--userrecommended). - Audit always on; invalid config/workflow fails fast.
Troubleshooting
- Kernel/seccomp issues (Linux): require kernel ≥5.4 with seccomp + cgroups v2.
- Docker pulls outdated:
AKIOS_FORCE_PULL=1 ./akios status. - Unsupported: any multi-container/service setup—consider future versions if needed.