Deploy Landing¶

Use the released image ghcr.io/bubbuild/landing:0.1.0. Stable releases also update latest; pin a version or digest for deployment. Prepare model settings and a project workspace with the tools its tasks need.

Start with Compose¶

export LANDING_TOKEN="your-server-token"
export LANDING_MODEL="openai:gpt-4.1"
export LANDING_API_KEY="your-provider-api-key"
docker compose pull
docker compose up --no-build -d
curl --fail http://127.0.0.1:8080/up

The image serves port 80 as UID 1000. SQLite lives at /storage/landing.sqlite3; the default workspace is /storage/workspace. It starts empty, so prepare your checkout there before delegating. Git, gh, uv, and Python are included; add other project toolchains through your normal provisioning process. Register additional workspaces with serve --workspace NAME=PATH.

Install the CLI with uv tool install "landing==0.1.0" and use the same token to submit a task with a saved failure log:

export LANDING_SERVER="http://127.0.0.1:8080"
landing explain "Explain this validation failure." --workspace default --input check.log

Use compose.yaml from the Landing repository. LANDING_IMAGE selects another image or digest. For a local build, set LANDING_IMAGE=landing:local and run docker compose up --build -d. Compose forwards only the listed variables; use an override for additional settings or mounts. See Configuration. /up is also the container healthcheck. Each database has one worker.

Deploy with ONCE¶

The image follows ONCE's application contract: port 80, /up, and persistent data under /storage. ONCE supplies BASE_URL for public pagination links and terminates TLS at its proxy.

Configure the replica destination and credentials before deployment:

once deploy ghcr.io/bubbuild/landing:0.1.0 --host landing.example.com --env "LANDING_TOKEN=$LANDING_TOKEN" --env "LANDING_MODEL=$LANDING_MODEL" --env "LANDING_API_KEY=$LANDING_API_KEY" --env "LITESTREAM_REPLICA_URL=$LITESTREAM_REPLICA_URL" --env "AWS_REGION=$AWS_REGION" --env "AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID" --env "AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY"

Enable ONCE's full-volume backups for workspace files. Landing uses paused-container backup behavior. Litestream protects SQLite separately; Recovery describes both paths. Verify deployment and remote replication in your actual environment.