11---
2- title : " Self-hosted deployment "
2+ title : " Deployment "
33description : " Running iii in development, staging, and production."
44owner : " devrel"
55type : " how-to"
@@ -481,7 +481,7 @@ stock image:
481481 ` libcap-ng.so.0` ). Copying `iii-worker` into a `FROM iiidev/iii` build is not enough. It fails to
482482 load. Build the engine image on a glibc base (for example `debian-slim`) that has `iii-worker`'s
483483 library dependencies, and include both `iii` and `iii-worker`.
484- - **Install the workers at build time.** You cannot `RUN iii worker add` in a `FROM iiidev/iii` build (no
484+ - **Bake the workers at build time.** You cannot `RUN iii worker add` in a `FROM iiidev/iii` build (no
485485 shell), so install the workers from a shell-capable build stage (or on a host) and carry the
486486 artifacts (`iii.lock` and `~/.iii/workers`) into the final image.
487487- **Provide the KVM device.** Micro-VMs need hardware virtualization: `/dev/kvm` on a Linux host, or
@@ -490,7 +490,7 @@ stock image:
490490` ` ` yaml
491491services:
492492 iii:
493- image: your-engine-image # glibc base with iii + iii-worker + installed workers
493+ image: your-engine-image # glibc base with iii + iii-worker + baked workers
494494 devices:
495495 - /dev/kvm # required for micro-VMs
496496 volumes:
@@ -511,13 +511,6 @@ services:
511511 from the environment.
512512</Note>
513513
514- # # Deploy to Railway
515-
516- Railway follows the same model : a clean base image plus workers you declare in
517- ` config.yaml` , with a few platform specifics (IPv6-only private networking,
518- volumes for durable state, and a service per worker). See the dedicated
519- [Deploy to Railway](./deploy-railway) guide.
520-
521514# # Hardening
522515
523516# ## Bind interfaces deliberately
@@ -559,7 +552,7 @@ workers:
559552
560553Use `${VAR}` / `${VAR:default}` placeholders in `config.yaml` and supply the values through the
561554container environment or your orchestrator's secret store. The generated `.env` (which holds the
562- RabbitMQ password) is git-ignored; do not embed secrets in the image.
555+ RabbitMQ password) is git-ignored; do not bake secrets into the image.
563556
564557# # RBAC
565558
0 commit comments