simota/devcloud-s3 repository overview

⁠devcloud-s3

A lightweight, S3-compatible endpoint for local development and deterministic tests. It is the S3 service of devcloud⁠, packaged as a standalone Rust binary — no orchestrator, dashboard, or other services.

It listens on MinIO's API port 9000, so it can stand in for MinIO in most local setups. It is not intended for production use or full AWS parity.

• Images: linux/amd64, linux/arm64
• Tags: latest, 0.3.0, 0.2.0, 0.1.0 (see Changelog⁠)
• Source: https://github.com/simota/devcloud⁠ (services/s3)

⁠Quick start

docker run --rm -p 9000:9000 -v devcloud-s3-data:/data simota/devcloud-s3

export AWS_ACCESS_KEY_ID=test AWS_SECRET_ACCESS_KEY=test AWS_DEFAULT_REGION=us-east-1
aws --endpoint-url http://localhost:9000 s3 mb s3://my-bucket
aws --endpoint-url http://localhost:9000 s3 cp ./file.txt s3://my-bucket/
aws --endpoint-url http://localhost:9000 s3 ls s3://my-bucket

In the default relaxed auth mode any credentials are accepted. Use path-style addressing in SDKs (for example forcePathStyle: true / s3={'addressing_style': 'path'}).

⁠Docker Compose

services:
  s3:
    image: simota/devcloud-s3:0.3.0
    ports:
      - "9000:9000"
    environment:
      DEVCLOUD_S3_BUCKETS: uploads,backups
    volumes:
      - s3-data:/data
volumes:
  s3-data:

⁠Configuration

Create buckets at startup:

docker run --rm -p 9000:9000 -e DEVCLOUD_S3_BUCKETS=uploads,backups simota/devcloud-s3

Strict mode example:

docker run --rm -p 9000:9000 \
  -e DEVCLOUD_S3_AUTH_MODE=strict \
  -e DEVCLOUD_S3_ACCESS_KEY_ID=mykey \
  -e DEVCLOUD_S3_SECRET_ACCESS_KEY=mysecret \
  simota/devcloud-s3

The container runs as a non-root user (UID 10001). Data persists in the /data volume; mount a named volume or a host directory writable by that UID. It stops cleanly on SIGTERM (docker stop).

⁠Supported S3 features

⁠Differences from MinIO

• No web console (MinIO's port 9001).
• MINIO_ROOT_USER / MINIO_ROOT_PASSWORD are not recognized; use the DEVCLOUD_S3_* variables above.
• Do not share the /data volume between multiple containers; locking is in-process only.

⁠Changelog

⁠0.3.0

• New DEVCLOUD_S3_BUCKETS variable: comma-separated buckets are created before the listener starts. Blank entries are skipped, existing buckets are kept, and an invalid bucket name stops startup with exit code 2.

⁠0.2.0

• If-None-Match on GET/HEAD: returns 304 Not Modified when the object's ETag matches (* or an ETag list; quoted, unquoted, or weak). It is evaluated before Range and against the requested versionId. The 304 response has no Content-Length.
• If-None-Match: * on PutObject, CopyObject, and CompleteMultipartUpload: returns 412 PreconditionFailed when a current object exists. Delete markers count as absent. Other values return 501.
• CopyObject honors x-amz-copy-source-if-none-match against the source ETag.
• Fix: a conditional write's existence check and write are now atomic with respect to concurrent writes to the same object.

⁠0.1.0

• Initial standalone image on port 9000 for linux/amd64 and linux/arm64.