Task deployment commands
Reference for the task commands that deploy and operate the CosmicAC stack.
The CosmicAC deployment repository uses Task to deploy and operate the stack. Run a command as task <name> from the deployment directory. task with no argument lists every command.
Commands read variables from .env and the command line. The configuration reference lists the .env variables.
| Command | What it does |
|---|
task bootstrap | Deploys the whole stack from scratch in one command (task bootstrap TAG=release-1.0.0). Runs config-init, start, wire, autobase-connect, register-rack, and migrate-pricing. Generates the service secrets and wires the shared ones, including copying app-node's apiKeySecret to proxy-inference. |
task config-init | Writes each service's config under services/<repo>/config/ from the image's baked-in defaults. Auto-generates the app-node secrets and the proxy HRPC keypair. |
task pull | Pulls all images at the resolved TAG. |
task up | Creates and starts the stack. task bootstrap handles a first deployment. |
| Command | What it does |
|---|
task start | Starts containers stopped by task stop. |
task stop | Stops containers without removing them. |
task restart | Recreates every container in the stack, even if unchanged. |
task down | Stops and removes the containers and network. Keeps the config and state directories. |
task update | Upgrades to a new image tag. Pulls, seeds new config, and recreates changed services. Reads TAG and the optional SERVICES (task update TAG=release-1.0.0). |
task recreate-ui | Rebuilds the UI assets and recreates Caddy. |
| Command | What it does |
|---|
task | Lists the available commands. |
task ps | Shows container status. |
task logs | Follows logs. SERVICES limits the output (task logs SERVICES="cosmicac-ui"). |
task config | Renders the effective Compose config for debugging. |
| Command | What it does |
|---|
task login | Logs in to GHCR. Uses GITHUB_PAT and GITHUB_USER, or prompts for them. |
task ensure-login | Logs in to GHCR only if no credentials are present. Other commands use it as a dependency. |
| Command | What it does |
|---|
task wire | Derives runtime keys from the service status files and updates the Compose configs and .env. Links the services' shared keys, including the proxy-inference apiKeySecret. |
task ork-key | Prints the ork RPC public key. |
task app-node-key | Prints app-node's autobase bootstrap key. |
task autobase-connect | Registers every worker's autobase writer key into app-node. |
task register-rack | Registers the Kubernetes NVIDIA rack with the ork. |
task migrate-pricing | Applies K8S_GPU_PRICE to the GPU types on registered racks. |
task seed-admin | Creates or updates the first-run UI login from the BOOTSTRAP_ADMIN_* variables. |
| Command | What it does |
|---|
task backup | Backs up each service's config and state directories to ./backups/<timestamp>. |
task clean-state | Destructive. Empties the status and store directories. SERVICES targets specific services. |
