Files and folders
Installed program
| Path | What it is |
|---|---|
~/.curiosity/orchestrator/ |
The program folder: the curiosity-orchestrator executable, its native RocksDB library and wwwroot/, the front-end. Replaced whole on an upgrade. |
~/.curiosity/bin/curiosity-orchestrator |
The launcher on Linux and macOS, shared with curio's ~/.curiosity/bin. |
ORC_INSTALL moves the root from ~/.curiosity elsewhere. On Windows, the program folder itself is on the user PATH.
State: ORC_STORAGE
Everything the Orchestrator itself needs to keep is under ORC_STORAGE (default ./storage, relative to the working directory). In Docker it is /data.
| Path | What it is |
|---|---|
db/ |
The RocksDB database: workspaces, events, sessions, accounts, console users, nodes, join tokens and placements. |
fleet.key |
The key that seals fleet secrets, created with mode 0600. |
self.pfx |
The self-signed certificate, with ORC_CERT_SELF_SIGNED. Delete it to make a new one. |
letsencrypt/ |
Let's Encrypt certificates and the account key. |
tmp/ |
Uploads waiting to be restored. |
Back up this folder together with your workspaces' data. It holds the administrator passwords of every workspace, so protect it like a secret.
Workspaces' data
| Docker object | Name | Holds |
|---|---|---|
| Container | <prefix><slug> |
The Studio process. Re-created from the workspace's record when needed. |
| Volume | <prefix><slug>-data, mounted at /DATA |
Studio's graph storage, web folder and logs. |
| Network | ORC_DOCKER_NETWORK |
The bridge network the workspaces join. |
The prefix is ORC_CONTAINER_PREFIX (curiosity-). The container carries the label ai.curiosity.orchestrator.spec, a hash of everything it was created from.
Configuration files
An orchestrator.json or orchestrator.yml in the working directory supplies settings. The key names are the variable names.
ORC_ADMIN_PASSWORD: choose-a-long-password
ORC_PUBLIC_ADDRESS: https://workspaces.example.com
Prefer environment variables for secrets, with the file readable by one user only.