Docker
docker run -d --restart unless-stopped \
-p 8443:8443 -p 9090:9090 \
-v /etc/chukei:/etc/chukei:ro -v /var/lib/chukei:/var/lib/chukei \
osodevops/chukei:latest up --config /etc/chukei/chukei.yaml
The restart policy is mandatory: clients pointed at chukei do not fall back to Snowflake if the proxy dies.
docker-compose
Use deploy/docker-compose.yaml:
health check via chukei healthcheck, 30s stop_grace_period around
chukei's 5s drain budget, config and TLS mounted read-only from
/etc/chukei.
Image facts: distroless, single static binary, EXPOSE 8443 9090,
entrypoint chukei. The image creates /var/lib/chukei with non-root
ownership for the savings ledger and optional persistent cache.