Layr

acme

Infrastructure

Storage and Layr Cloud see ciphertext only.

ProjectStore URLRegionEncryptionSizeObjectsLast writeGC
shoplayr+https://cloud.acme.dev/shopeu-central-1age, end to end1.8 GiB48,2104 min✓ ok
paymentslayr+https://cloud.acme.dev/paymentseu-central-1age, end to end640 MiB12,9041 h✓ ok
infralayr+https://cloud.acme.dev/infraeu-central-1age, end to end88 MiB2,3102 h● runs tonight
docs-sitelayr+https://cloud.acme.dev/docs-siteeu-central-1age, end to end41 MiB1,0221 day✓ ok

Machines

Each machine signs its records with its own key.

MachineOS and storeRoleSigning keyTrustLast seen
laptop-alicemacOS · APFSperson laptopSHA256:a1Lc…7Qe0✓ trusted● online
laptop-bobLinux · btrfsperson laptopSHA256:q8Jt…3nVw✓ trusted● online
executor-eu1Linux · btrfsexecutorSHA256:Ex9u…1mPz✓ trusted● online
ci-runner-2Linux · OverlayFSCI runnerSHA256:c2Rn…8kWd✓ trusted○ 3 h ago
$ remote trustlayr remote trust laptop-bob

Gateway

Machines and people reach stores without AWS credentials.

URL
https://cloud.acme.dev
TLS
certificate valid until Jan 20, 2027
Write tokens
3
GC tokens
1

Executors

executor-eu1 runs the queue, checks, the registry and probes.

JobProjectTargetStarted
queueshopchange 8c03d7 v2, e2e3 min
probeshopbench-checkout on f19a3c071 min
registryshopbuild app:change-4f2a91now

Deployment

Layr Cloud runs in your AWS account. One command creates or updates its stacks.

StackTemplateStatusUpdated
acme-bootstrapbootstrap.yaml✓ UPDATE_COMPLETEOct 20
acme-storetemplate.yaml✓ UPDATE_COMPLETEOct 20
acme-gatewaygateway.yaml✓ UPDATE_COMPLETEOct 24
acme-executorexecutor.yaml✓ CREATE_COMPLETEOct 24

Release 1.4 · gateway.tgz and executor.tgz · deploy.json sets the image and the tailnet name.

$ deploy --regionlayr-cloud deploy --region eu-central-1 --stack-prefix acme --release ./release --dry-run
$ deploy --regionlayr-cloud deploy --region eu-central-1 --stack-prefix acme --release ./release --profile acme-admin