docs: air-gapped deployment guide #47

New issue

Closed

opened 2026-05-26 23:05:26 -07:00 by pyr0ball · 1 comment

pyr0ball commented

2026-05-26 23:05:26 -07:00

Owner

Document how to deploy Turnstone in environments with no outbound internet access (air-gapped networks, compliance-audited environments, enterprise DMZs).

Guide must cover:

Pre-downloading all required container images and Python packages
Pre-fetching HuggingFace model weights and transferring via USB / secure file drop
Environment variables for offline mode (HF_HUB_OFFLINE, TRANSFORMERS_OFFLINE, TURNSTONE_OFFLINE_MODE)
Container image export/import workflow (docker save / docker load or Podman equivalent)
SQLite data volume backup and restore
Log source configuration for environments without SSH to external nodes
Security checklist: what network ports Turnstone uses, what it does and does not phone home

Format: Markdown in docs/deployment/air-gapped.md, referenced from the main README.

Document how to deploy Turnstone in environments with no outbound internet access (air-gapped networks, compliance-audited environments, enterprise DMZs). **Guide must cover:** - Pre-downloading all required container images and Python packages - Pre-fetching HuggingFace model weights and transferring via USB / secure file drop - Environment variables for offline mode (`HF_HUB_OFFLINE`, `TRANSFORMERS_OFFLINE`, `TURNSTONE_OFFLINE_MODE`) - Container image export/import workflow (`docker save` / `docker load` or Podman equivalent) - SQLite data volume backup and restore - Log source configuration for environments without SSH to external nodes - Security checklist: what network ports Turnstone uses, what it does and does not phone home **Format:** Markdown in `docs/deployment/air-gapped.md`, referenced from the main README.

pyr0ball added this to the Enterprise POC Deliverable milestone 2026-05-26 23:05:26 -07:00

pyr0ball added the

deployment

docs

compliance

labels 2026-05-26 23:05:26 -07:00

pyr0ball referenced this issue

2026-05-28 08:21:51 -07:00

feat: offline-first model bundling -- disable HuggingFace downloads at runtime #45

pyr0ball commented

2026-05-28 08:50:28 -07:00

Author

Owner

Air-gapped deployment guide written at docs/air-gapped-deployment.md.

Covers: which components download from HF, model pre-download commands, context DB pre-population, TURNSTONE_OFFLINE_MODE=1 config, local LLM setup, runtime verification with ss -tp, full deployment checklist, and troubleshooting for the three common failure modes.

Linked from .env.example.

Air-gapped deployment guide written at `docs/air-gapped-deployment.md`. Covers: which components download from HF, model pre-download commands, context DB pre-population, `TURNSTONE_OFFLINE_MODE=1` config, local LLM setup, runtime verification with `ss -tp`, full deployment checklist, and troubleshooting for the three common failure modes. Linked from `.env.example`.

pyr0ball closed this issue

2026-05-28 08:50:28 -07:00

pyr0ball referenced this issue from a commit

2026-05-29 14:18:48 -07:00

feat(diagnose): tech-level post-processor, offline mode, API auth, context harvest

pyr0ball referenced this issue from a commit

2026-06-13 21:54:47 -07:00

feat(diagnose): tech-level post-processor, offline mode, API auth, context harvest

pyr0ball referenced this issue from a commit

2026-06-13 22:18:24 -07:00

feat(diagnose): tech-level post-processor, offline mode, API auth, context harvest