Resource limits and startup scripts

Disk quotas, multi-arch images, and the --startup / --healthcheck flags land.

A cluster of features that make cardinal feel like a complete runtime:

  • --startup — run a custom script instead of the image's default command.

The script is written to /startup.sh and executed via /bin/sh, with

CARDINAL_* environment variables injected automatically.

  • --healthcheck-* — a command run inside the container on an interval;

after retries consecutive failures the container is killed and restarted.

  • cgroups v2 limits — CPU, memory, and (with 1.14) disk quotas enforced

through the kernel's resource controller.

  • Multi-arch resolution — pick --platform when the host and image differ.

Together these replace most of the manual scripting around a plain run.