The nomos runtime image is gcr.io/distroless/static (no shell/wget), so the wget-based healthcheck (D5) could never run — nomos showed docker-unhealthy despite serving /healthz fine. Add a 'nomos healthcheck' subcommand that self-probes NOMOS_LISTEN/healthz (exit 0 on 200), and point the compose healthcheck at ["/nomos", "healthcheck"].
11 KiB
11 KiB