Skip to content

docs: add Windows Docker installation instructions - #2427

Open
gunjansonaw wants to merge 1 commit into
aboutcode-org:mainfrom
gunjansonaw:docs/windows-docker-setup
Open

gunjansonaw wants to merge 1 commit into
aboutcode-org:mainfrom
gunjansonaw:docs/windows-docker-setup

Conversation

@gunjansonaw

@gunjansonaw gunjansonaw commented Sep 2, 2026 •

Copy link
Copy Markdown

Summary

  • Add Windows-specific Docker installation instructions.
  • Document the .env contents for SECRET_KEY and ALTCHA_HMAC_KEY with placeholder values (no secret generation), since make envfile is not available on Windows.
  • Add docker-compose.windows.yml to mount ./vulnerablecode-config as /etc/vulnerablecode/.
  • Keep the existing Windows warning unchanged and link it to the new Windows Docker section.
  • Git-ignore vulnerablecode-config/ so secrets are never committed.

Testing

  • Verified the Windows Docker setup locally with Docker Desktop.
  • Tested from a fresh clone with an empty database: all migrations applied, all 7 services running, http://localhost returns HTTP 200.
  • git diff --check passes.

Notes

The Windows instructions are Docker-based because native Windows installation is not supported.

@gunjansonaw
gunjansonaw force-pushed the docs/windows-docker-setup branch from f3cddd8 to 991e20c Compare September 2, 2026 16:36
Comment thread docs/source/installation.rst Outdated
Comment on lines +123 to +138
Create ``docker-compose.override.yml`` with the configuration mount for the
application, scheduler, and both RQ workers::

services:
vulnerablecode:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/
vulnerablecode_scheduler:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/
vulnerablecode_rqworker:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/
vulnerablecode_rqworker_high:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It might be a good idea to have a special Docker Compose file for Windows, docker-compose.windows.yml

Suggested change
Create ``docker-compose.override.yml`` with the configuration mount for the
application, scheduler, and both RQ workers::
services:
vulnerablecode:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/
vulnerablecode_scheduler:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/
vulnerablecode_rqworker:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/
vulnerablecode_rqworker_high:
volumes:
- .\vulnerablecode-config:/etc/vulnerablecode/

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added the dedicated docker-compose.windows.yml override and updated the Windows instructions to use it explicitly.

Comment on lines -108 to -110
.. warning::
On **Windows** VulnerableCode can **only** :ref:`run_with_docker` and is not supported.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we need to remove that?

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I retained and clarified the warning: native Windows installation is not supported, while Docker Desktop is supported. It now points to the Docker installation instructions.

Comment thread docs/source/installation.rst Resolved
@gunjansonaw
gunjansonaw force-pushed the docs/windows-docker-setup branch from 2237aa2 to f8ab85d Compare October 8, 2026 09:53
@gunjansonaw
gunjansonaw requested a review from ziadhany October 8, 2026 09:58
@gunjansonaw
gunjansonaw force-pushed the docs/windows-docker-setup branch from 0ea4bf2 to 2bcccf4 Compare November 8, 2026 05:35
Signed-off-by: Gunjan Sonawane <gunjansonawane462@gmail.com>
@gunjansonaw
gunjansonaw force-pushed the docs/windows-docker-setup branch from 2bcccf4 to b4d186c Compare November 8, 2026 06:04
@gunjansonaw

Copy link
Copy Markdown
Author

@ziadhany I've addressed your review comments:

  • Added docker-compose.windows.yml as you suggested.
  • Removed all environment variable generation; the docs now show the .env contents with placeholder values for users to fill in.
  • Restored the original Windows warning unchanged, with only a link added to the new Windows section.

Tested from a fresh clone with an empty database on Windows with Docker Desktop: all migrations applied, all 7 services running, and http://localhost returns HTTP 200.

Could you take another look when you have time? Thanks!

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants