Skip to content

docs(installation): add container gateway page with docker run and compose examples#1321

Merged
johntmyers merged 1 commit into
NVIDIA:mainfrom
ericcurtin:docs-docker-run-compose/ec
May 15, 2026
Merged

docs(installation): add container gateway page with docker run and compose examples#1321
johntmyers merged 1 commit into
NVIDIA:mainfrom
ericcurtin:docs-docker-run-compose/ec

Conversation

@ericcurtin
Copy link
Copy Markdown
Contributor

Summary

Add a new documentation page covering how to run the OpenShell gateway as a container (docker run, docker-compose, Podman) without the system package manager installer. This is the approach discussed in #1285 — close that PR and ship the docs instead.

Related Issue

Closes #1285

Changes

  • docs/about/container-gateway.mdx: new page with quick-start (TLS-disabled, localhost-bound), full mTLS setup using the gateway's generate-certs subcommand, a docker-compose example, and a Podman variant.
  • docs/about/installation.mdx: link to the new page from Next Steps.
  • docs/about/supported-agents.mdx, docs/about/release-notes.mdx: shifted position values (4→5 and 5→6) to make room for the new page at position 4.

Testing

  • mise run pre-commit passes (markdownlint-cli2 reports 0 errors on the new file)
  • Unit tests added/updated (N/A — docs only)
  • E2E tests added/updated (N/A — docs only)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)

@copy-pr-bot
Copy link
Copy Markdown

copy-pr-bot Bot commented May 12, 2026

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

…mpose examples

Add a dedicated page documenting how to run the OpenShell gateway as a
container using docker run, docker-compose, or podman, without the
system package manager installer.

This is useful for users on immutable OS distributions (Fedora CoreOS,
bootc-based images, Silverblue) where the standard install.sh path is
not appropriate, and for container-first environments.

Covers a quick-start with TLS disabled (localhost-bound), a full mTLS
setup using the gateway's generate-certs subcommand, a docker-compose
example, and a Podman variant.

Closes the gap raised in NVIDIA#1285.

Signed-off-by: Eric Curtin <eric.curtin@docker.com>
@ericcurtin ericcurtin force-pushed the docs-docker-run-compose/ec branch from ce6173a to aeba2b9 Compare May 12, 2026 10:32
@johntmyers johntmyers merged commit 9f8edb5 into NVIDIA:main May 15, 2026
5 checks passed
position: 4
---

Use this approach when you want to run the OpenShell gateway as a container instead of installing it with the system package manager. This is useful on immutable OS distributions (Fedora CoreOS, bootc-based images, Silverblue) where the standard installer is not appropriate, or anywhere you prefer a container-first workflow.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

But since a key part of the UX here is having the CLI, I think that's not enough right?

In a different project, what I did is include the CLI binaries in the container image, and then support extracting them - the CLI should be a relatively thin bootstrap tool that uses the remote server as source of truth ideally.

Register the gateway with the CLI:

```shell
openshell gateway add http://127.0.0.1:8080 --local --name local
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i.e. here we assume something that doesn't exist

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants