Files
mesh-catalog/modules/only-office
jschoubben f509c61b50 VERSION (A-46, §368, §411): every manifest of the catalog says its version MAJOR.MINOR
mesh-delivery-builder.builder_versions answered no numbered version for any name asked (mesh-sdk go and ts, mesh-host, node-tools, mesh-delivery-builder, mesh-conditions), so every module takes 0.1, the floor §368 gives a module with none published: all 144 manifests (141 from "1", distribution, mesh-provisioner and mesh-provisioner-client from "2", which carries nothing over, §583).

Builds: design 47 G §368, §411, §583, A-46

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h
2026-11-11 22:38:45 +01:00
..

only-office

The only-office module of the mesh catalogue: runs the container image onlyoffice/documentserver.

Files it does not know

Each directory or archive this module declares says how it treats a file it did not write (ADR 0422, ADR 0416).

  • ${dir:state}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:box}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:logs}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:data}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:server-lib}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:db}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:rabbitmq}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:redis}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
  • ${dir:fonts}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).

Where its directories live

Everything the container mounts sits in ${dir:box} (/var/lib/only-office/box), root-owned and 0700 (issue 1843). The image opens what is below each mount to every account on every start (chmod -R 755), so the barrier is a parent the container never sees. The module root stays root-owned 0711: the converter, which runs on the host as only-office-converter, passes through it to its two secrets and nothing else.