Frank 799441a8be anubis: health probe in JSON exec form for the distroless image ...

The image has no shell (ko-build distroless; entrypoint /ko-app/anubis),
and this host's quadlet generator joins a bare HealthCmd into one
\x20-escaped argv element that podman then runs shell-form — exec of a
missing shell exits 1 and the container sits unhealthy. A JSON array in
HealthCmd passes through the generator verbatim and executes the binary
directly.

2026-08-28 10:39:09 -07:00

..

quadlet

anubis: health probe in JSON exec form for the distroless image

2026-08-28 10:39:09 -07:00

policy.json

anubis: bot-challenge proxy in front of the guarded vhosts (two-tier chain)

2026-08-28 06:38:24 -07:00