Air-Gap Importer Guide

Audience: operators staging offline bundles into a sealed Stella Ops installation.

The importer stages signed bundles into a sealed environment and prepares them for ingestion by the affected services. It is the bridge between media that arrives across the air gap and the running deployment. For bundle formats, see Mirror Bundles and the Offline Bundle Format; for the end-to-end sealed-mode flow, see the Air-Gap Mode Guide.

Supported scope

The importer stages bundles into approved local filesystem or object-storage locations for Docker Compose, Offline Kit, and host/service-manager deployments.

Import flow

1. Verify the bundle manifest and checksum files.
2. Stage bundle contents into the approved local import directory.
3. Run the importer with deterministic input paths.
4. Capture the import report JSON and the bundle SHA-256 values.
5. Restart affected services through Compose or the host service manager when required.

Unsupported legacy paths

Kubernetes init-container, sidecar, PVC, and mount instructions are retired. Do not mount importer bundles through Kubernetes volumes, init containers, sidecars, or pods; these paths are not maintained for sealed deployments.