argos-net.com hosts the .argosmodel files the LibreTranslate image pulls at build time, 70 to 150 MB each and around 100 of them, so every rebuild refetched several gigabytes from upstream. Route the host through the existing Nexus raw proxy and the nginx MITM frontend that already covers pypi, npm, alpine and the GitHub raw hosts. The argos server block overrides the global proxy_read_timeout. Nexus emits no byte of an object until it has fetched and stored the whole thing, so the wait for the response header is the wait for the entire cold fetch, which outran the global 300s once eight download lanes competed for the upstream. INFINITO_CACHE_PACKAGE_FRONTEND_CONF replaces the hardcoded relative bind for the frontend's upstream map. One cache stack serves every checkout on the host, so the map follows the primary checkout by default; INFINITO_CACHE_CONF_SOURCE=worktree points it at the current one to test a change before it merges. dotenv-force threads that variable through its env -i allowlist. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Docker Runner Scripts 🐳
Shell helpers that run inside the infinito runner container defined by
the top-level compose.yml. They cover container
lifecycle (entry, healthcheck) and integration with peer compose
services (e.g. the registry-cache pull-through proxy).
Scope 📋
- This directory MUST contain only scripts that execute inside the
infinitocontainer, either as the container entrypoint, as a DockerHEALTHCHECK, or as asystemdunit hook. - This directory MUST NOT host host-side tooling. Scripts that run on
the developer or CI host belong under their workflow-specific path
(for example
scripts/tests/,scripts/image/,scripts/meta/). - This directory MUST NOT host application logic that belongs to an Ansible role.
Bind-mounted scripts 🔗
A script that is bind-mounted from this directory into a fixed in-container path (see compose.yml) MUST keep its git executable bit, because Docker bind-mounts preserve host file permissions and the in-container caller (systemd, dockerd, the entrypoint) cannot recover from a non-executable mount.
When a new script is added with a bind-mount target, its purpose and
in-container target path SHOULD be documented at the call site (the
matching compose/<service>/ README, or compose.yml.md).
Distro portability 🌐
A script in this directory MUST work across every distro variant that
the runner image is built for (currently Debian, Ubuntu, Arch, Fedora,
CentOS). Tool availability differs across these variants, so a script
SHOULD branch on command -v <tool> rather than on distro IDs.