Skip to content

audit F26 [quality]: Docker relay entrypoint passes --tcp-port/--ws-port flags the binary does not accept (HARD RUNTIME BREAK) #626

@intendednull

Description

@intendednull

File: docker/relay-entrypoint.sh:10
Severity: quality
Obvious? yes

exec willow-relay --tcp-port 9090 --ws-port 9091 --identity /etc/willow/relay.key. crates/relay/src/main.rs:83-97 only declares --relay-port (default 3340), --identity, --print-id — no --tcp-port or --ws-port. clap rejects unknown args with a non-zero exit, which would fail docker compose up for the relay every time. Either the dockerized stack hasn't been smoke-tested since the iroh migration removed the dual-port listener, or the migration's port surface drifted.

Fix: replace with exec willow-relay --relay-port 3340 --identity /etc/willow/relay.key, update docker-compose.yml's ports: block (currently 9090:9090 / 9091:9091) to expose 3340, and fix worker entrypoints that build RELAY_ADDR accordingly. Pairs with F27 (README + CLAUDE.md doc drift) and F2 (compose healthchecks should target the right port).


Filed by /general-audit @ 88498a5 (2026-05-04). master: #600.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions