Operating
Logs, limits, and getting rid of an app.
Logs
supersecret_app_logs returns recent stdout and stderr, plus the build log of
the latest release when that build failed. Refused outbound calls appear here
too — that is usually what you are looking for when an app "does nothing".
Resource limits
Every app runs in a tier. small is the default.
| Tier | CPUs | Memory | Processes | Disk |
|---|---|---|---|---|
small | 0.5 | 256 MB | 128 | 512 MB |
medium | 1 | 1 GB | 256 | 2 GB |
large | 2 | 4 GB | 512 | 8 GB |
An app that exceeds its memory is restarted rather than left to exhaust the
host. APPD_MAX_STORAGE_GB caps the total across all app images and volumes;
once it is reached, new builds are refused.
Isolation
Builds run without network access. Where the host provides gVisor, appd uses
it (APPD_GVISOR). Each app gets its own volume, removed when the app is.
Removing an app
supersecret_app_delete stops the container, removes its network and its data
volume, and revokes its links. Releases and events are kept — deleting an app
does not erase the record of what it did.