# Container images

<!-- Generated from images.yaml by hack/image-manifest.py. Edit images.yaml
     and run `make generate-image-docs`; CI fails on a stale copy. -->

Omnia publishes 20 images to `ghcr.io/altairalabs`. Each is a manifest list
for `linux/amd64` and `linux/arm64`, and carries an SBOM and a provenance
attestation. See [Supply-chain evidence](/reference/platform/supply-chain/).

## Tags

| Tag | Points at |
| --- | --- |
| `<version>` | The release with that version, for example `0.9.0` |
| `<major>.<minor>` | The latest stable release in that minor version |
| `latest` | The latest stable release |
| `main` | The latest commit on `main` that passed the publish verification |
| `<sha>`, `<sha7>` | A commit on `main` that passed the publish verification |

A pre-release version moves neither `<major>.<minor>` nor `latest`.

## Images

| Image | Edition | Chart deploys | Description |
| --- | --- | --- | --- |
| `omnia-operator` | Core | Yes | Kubernetes controller-manager for Omnia. Reconciles AgentRuntime, PromptPack, ToolRegistry, Provider, Workspace, and SessionRetentionPolicy CRDs; serves the REST API. |
| `omnia-facade` | Core | Yes | Client-facing WebSocket / gRPC / A2A server. Accepts browser and agent-to-agent connections and bridges them to the runtime over gRPC. |
| `omnia-runtime` | Core | Yes | LLM runtime for Omnia agents. gRPC server that wraps a provider via the PromptKit SDK; executes platform tools and server-side tool calls. |
| `omnia-dashboard` | Core | Yes | The Omnia dashboard UI. Next.js static export served by nginx, which proxies /api/ to management-api; no server code. Live agent consoles, session browsing, arena runs, and the admin surface. |
| `omnia-session-api` | Core | Yes | Standalone HTTP service for session CRUD and retention. Backed by PostgreSQL with an optional Redis warm cache. |
| `omnia-memory-api` | Core | Yes | Standalone HTTP service for cross-session agent memory (institutional, agent, and user tiers). |
| `omnia-management-api` | Core | Yes | The dashboard's API. Every /api route, sign-in and sessions, API keys, workspace RBAC, Kubernetes access, and the management-plane signing key and JWKS. |
| `omnia-doctor` | Core | Yes | Cluster-health and diagnostic tool for Omnia installations. Validates CRDs, controllers, and connectivity between components. |
| `omnia-compaction` | Core | Yes | Batch job that compacts warm session storage into cold Parquet archives according to SessionRetentionPolicy. |
| `omnia-arena-controller` | Enterprise | Yes | Enterprise controller-manager for Arena resources (ArenaJob, ArenaRun, ArenaProject, ArenaTemplateSource, RolloutAnalysis). |
| `omnia-arena-worker` | Enterprise | Yes | Enterprise Arena worker. Executes evaluation, load-test, and data-gen scenarios against a provider pool. |
| `omnia-eval-worker` | Enterprise | Yes | Per-namespace worker that executes realtime evals against active agent sessions. |
| `omnia-promptkit-lsp` | Enterprise | Yes | Language-server for PromptKit configs and arena YAML. Powers autocomplete and validation in the Arena project editor. |
| `omnia-privacy-api` | Enterprise | Yes | Per-workspace service that owns consent grants, opt-out preferences, and deletion-outbox fan-out to memory-api. |
| `omnia-policy-broker` | Enterprise | Yes | Enterprise service that evaluates and enforces tool-policy decisions for agent runtimes. |
| `omnia-remote-runtime` | Enterprise | No | omnia.runtime.v1 proxy for agents hosted on Vertex Agent Runtime, Bedrock AgentCore and Azure AI Foundry |
| `omnia-claude-runtime` | Core | No | omnia.runtime.v1 runtime that drives the Claude Code CLI, backed by one person's Claude subscription |
| `omnia-codex-runtime` | Core | No | omnia.runtime.v1 runtime that drives the Codex CLI's app-server, backed by an OpenAI API key or one person's ChatGPT plan |
| `omnia-browser-sandbox` | Core | Yes | Per-session browser sandbox. Structured browser control over MCP (agent-browser behind an allowlisting bridge) on a headless Chromium, with no shell. |
| `omnia-promptarena-sandbox` | Enterprise | Yes | codegen-sandbox plus the promptarena and packc CLIs, briefed for PromptArena kit authoring. The Arena builder's project-bound sandbox image. |

## Images the chart does not deploy

| Image | Deployed by |
| --- | --- |
| `omnia-remote-runtime` | The runtime container of an AgentRuntime that names it in spec.framework.image (type custom), fronting an agent hosted on Vertex Agent Runtime, Bedrock AgentCore or Azure AI Foundry. |
| `omnia-claude-runtime` | The runtime container of an AgentRuntime that names it in spec.framework.image (type custom). |
| `omnia-codex-runtime` | The runtime container of an AgentRuntime that names it in spec.framework.image (type custom). |

## Build sources

Paths are relative to the repository root.

| Image | Dockerfile | Build context |
| --- | --- | --- |
| `omnia-operator` | `Dockerfile` | `.` |
| `omnia-facade` | `Dockerfile.agent` | `.` |
| `omnia-runtime` | `Dockerfile.runtime` | `.` |
| `omnia-dashboard` | `dashboard/Dockerfile` | `dashboard` |
| `omnia-session-api` | `Dockerfile.session-api` | `.` |
| `omnia-memory-api` | `Dockerfile.memory-api` | `.` |
| `omnia-management-api` | `Dockerfile.management-api` | `.` |
| `omnia-doctor` | `Dockerfile.doctor` | `.` |
| `omnia-compaction` | `Dockerfile.compaction` | `.` |
| `omnia-arena-controller` | `ee/Dockerfile.arena-controller` | `.` |
| `omnia-arena-worker` | `ee/Dockerfile.arena-worker` | `.` |
| `omnia-eval-worker` | `ee/Dockerfile.eval-worker` | `.` |
| `omnia-promptkit-lsp` | `ee/Dockerfile.promptkit-lsp` | `.` |
| `omnia-privacy-api` | `ee/Dockerfile.privacy-api` | `.` |
| `omnia-policy-broker` | `ee/Dockerfile.policy-broker` | `.` |
| `omnia-remote-runtime` | `ee/Dockerfile.remote-runtime` | `.` |
| `omnia-claude-runtime` | `Dockerfile.claude-runtime` | `.` |
| `omnia-codex-runtime` | `Dockerfile.codex-runtime` | `.` |
| `omnia-browser-sandbox` | `Dockerfile.browser-sandbox` | `.` |
| `omnia-promptarena-sandbox` | `Dockerfile.promptarena-sandbox` | `.` |