vpengops 26f335ed5a refactor(scripts): grind-stack fidelity - readonly rootfs, chown, sbom cmd
- emulate the Cloudron 8 app contract: --read-only + /tmp,/run tmpfs
- chown /app/data to the image uid (localstorage contract)
- wire the previously unreachable sbom subcommand into dispatch
- probe containers use --entrypoint (images wrap start.sh)

Umbrella: https://projects.knownelement.com/issues/632
2026-09-07 10:02:16 -05:00
2025-11-16 19:35:54 +00:00

TSYS Cloudron Packaging Project

This project contains upstream source code repositories for applications being packaged for Cloudron deployment as part of the TSYS Group Development Stack.

🚀 Project Overview

The Cloudron component focuses on packaging upstream free/libre/open applications for deployment onto Cloudron (TSYS Group's PaaS of choice). This is a massive undertaking involving 58+ applications across 20 functional categories.

📊 Current Progress

  • Total Applications: 36 (see GitUrlList.txt; pruned 2026-09-06 by rulings: no-Node, no-open-core, no-SSO-tax, k8s redirects, out-of-scope)
  • Completed Packages: 18/36 (50% of the post-ruling set)
  • Packaging Templates: Created
  • Packages Committed & Pushed: 18 (rathole removed by ruling)
  • Build Tickets: rulings synced 2026-09-06 (#633-#678 batch, umbrella #632, Redmine project 55); grist-core excluded (packaged upstream)

Living status is tracked in STATUS.md (agent-maintained).

Completed Packages

# Application Category Size Ports Addons Status
1 Webhook API-Gateway 775MB 9000 localstorage Committed
2 APISIX API-Gateway 143MB 9080, 9180, 9443 localstorage, etcd Committed
3 Healthchecks Monitoring 105MB 8000 localstorage, postgresql Committed
4 Review Board Development 1.29GB 8080 localstorage, postgresql Committed
5 WireViz Web Documentation-Tools 378MB 3005 localstorage Committed
6 Puter Development 361MB 4100 localstorage, postgresql Committed
7 Corteza Low-Code 436MB 80 localstorage, postgresql Committed
8 draw.io Documentation-Tools 8080 none (auth proxy) Committed
9 Windmill Automation ~2GB 8000 localstorage, postgresql Committed
10 Easy-Gate Infrastructure 3.18GB 8080 localstorage (auth proxy) Committed
11 Database Gateway Infrastructure 93.7MB 8080 localstorage, postgresql Committed
12 FX DevOps-Tools 3.55GB 8000 localstorage (auth proxy) Committed
13 ChirpStack Infrastructure 83.4MB 8080 localstorage, postgresql, redis Committed
14 eLabFTW Business-Apps ~209MB (compressed) 443 localstorage, mysql, ldap Committed
15 NetBox Infrastructure ~1GB 8080 localstorage, postgresql, redis Committed
16 ConsulDemocracy Collaboration ~1.6GB 3000 localstorage, postgresql Committed
17 GoAlert Monitoring ~40MB 8081 localstorage, postgresql Committed
18 InvenTree Business-Apps ~1.4GB 8000 localstorage, postgresql, redis Committed

📦 Packages in Development

None currently in development.

🔄 Next Steps

  1. Continue packaging remaining applications (~50 remaining)
  2. Prioritize applications with official Docker images (faster packaging)
  3. Apply established patterns from Package-Templates/
  4. Reference JOURNAL.md for learnings and best practices
  5. Focus on simpler applications before complex ones

📚 Documentation & Resources

  • JOURNAL.md: Detailed packaging journal with patterns, challenges, and insights
  • STATUS.md: Living status (completed packages, known issues, next priorities) — agent-maintained
  • AGENTS.md: Agent operating manual + gardening protocol
  • Package-Templates/: Cloudron packaging templates for common patterns
  • GitUrlList.txt: Source-of-truth list of upstream repos

🏗 Cloudron Patterns Established

  1. Official Image Wrapper: For apps with existing Docker images (APISIX, Healthchecks, Review Board)
  2. Multi-Stage Build: For compiled applications (Webhook - Go, Puter - Node.js)
  3. Python Application: For Python apps (WireViz Web)
  4. Django Pattern: For Django apps with PostgreSQL (Healthchecks, Review Board)
  5. Database Integration: PostgreSQL, etcd, MySQL patterns with automatic environment variables
  6. Multiple Ports: Explicit port definitions in CloudronManifest.json
  7. Health Check: Docker HEALTHCHECK and CloudronManifest.json healthCheckPath

Productivity Metrics

  • Packages Completed: 13/~57 (~23%)
  • Average Package Time: ~30 minutes
  • Success Rate: 100% (all packages built successfully)
  • Commits Pushed: 100% (all packages pushed to remote)
  • Total Commits: 21+ (foundation + 7 packages + templates + docs)

📁 Functional Organization

Applications are organized by function rather than programming language:

Functional Category App Count Packages Completed
API-Gateway 2 2/2 (100%)
Automation 1 1/1 (100%)
Business-Apps 4 2/4 (50%)
Collaboration 2 1/2 (50%)
Data-Management 2 0/2 (0%)
Development 2 2/2 (100%)
DevOps-Tools 1 1/1 (100%)
Documentation-Tools 2 2/2 (100%)
Financial-Trading 1 0/1 (0%)
Infrastructure 5 4/5 (80%)
Legal 1 0/1 (0%)
Low-Code 2 1/2 (50%)
Monitoring 4 2/4 (50%)
Project-Management 1 0/1 (0%)
Scientific-Computing 2 0/2 (0%)
Security 2 0/2 (0%)
System-Administration 1 0/1 (0%)

Categories with 100% completion: API-Gateway · Automation · Development · DevOps-Tools · Documentation-Tools

📋 Application Inventory

Application Name Repository Description Functional Category Package Status
GoAlert GitHub On-call scheduling, escalation, and alerting platform Monitoring Packaged
DataHub GitHub Modern data stack for end-to-end data management Data-Management
Docassemble GitHub Open-source expert system for guided interviews Legal
Database-Gateway GitHub Database gateway and connection management Infrastructure Packaged
Webhook GitHub Lightweight webhook receiver API-Gateway Packaged
FX GitHub Function as a Service platform DevOps-Tools Packaged
PayrollEngine GitHub Payroll processing engine Business-Apps
Nautilus Trader GitHub Algorithmic trading platform Financial-Trading
APISIX GitHub Cloud-native API gateway API-Gateway Packaged
Grist Core GitHub Modern data spreadsheet and database Collaboration ⏭ Excluded — packaged upstream (Cloudron App Store)
Healthchecks GitHub Cron job monitoring service Monitoring Packaged
EmonCMS GitHub OpenEnergyMonitor energy monitoring platform Monitoring local-only auth — founder ruling (#907)
Fleet GitHub Device management and monitoring Monitoring
NetBox GitHub IP address management (IPAM) and data center infrastructure management Infrastructure Packaged
SeaTunnel GitHub Data integration and streaming platform Data-Management
Easy-Gate GitHub Gateway and proxy solution Infrastructure Packaged
ConsulDemocracy GitHub Open-source citizen participation platform Collaboration Packaged
BOINC GitHub Open-source software for volunteer computing Scientific-Computing
Slurm GitHub Workload manager and job scheduling system System-Administration
SniperPhish GitHub Phishing campaign management platform Security
InvenTree GitHub Open-source inventory management system Business-Apps Packaged
WireViz Web GitHub Cable and wiring harness visualization tool Documentation-Tools Packaged
KillBill GitHub Open-source subscription billing and payment platform Business-Apps
Docker DrawIO GitHub Dockerized version of Draw.io diagramming tool Documentation-Tools Packaged
Sentry GitHub Error tracking and performance monitoring Monitoring
ChirpStack GitHub Open-source LoRaWAN network server Infrastructure Packaged
eLabFTW GitHub Electronic lab notebook for research teams Business-Apps Packaged
Jamovi GitHub Statistical spreadsheet software Scientific-Computing
Review Board GitHub Code review and collaboration tool Development Packaged
Core GitHub Emergency management and incident response system Project-Management
SDRangel GitHub Software defined radio application Infrastructure
No-Code Architects Toolkit GitHub No-code development toolkit Low-Code
Windmill GitHub Open-source workflow automation platform Automation Packaged
Corteza GitHub Open-source low-code platform Low-Code Packaged
Security Awareness Training GitHub Security awareness training platform Security
Puter GitHub The Internet OS - Personal Cloud Computer Development Packaged

Package Status Legend:

  • Packaged: Complete Cloudron package created and committed
  • In Progress: Currently being packaged
  • 📦 Repository: Source repository cloned, packaging not started
  • Complex: Requires significant packaging effort
  • ⏭ Excluded: Not packaged here (already available for Cloudron upstream)
  • Disposition: verify-and-close review (dupes, non-apps, out-of-scope)
S
Description
Upstream applications packaged for cloudron
Readme AGPL-3.0
1.8 MiB
Languages
Shell 66.2%
Dockerfile 30.9%
HTML 2.9%