fix(compose): pull S3 storage from rustfs after MinIO left Docker Hub

docker-compose.release-smoke.yml

@@ -32,17 +32,23 @@ services:
       timeout: 3s
       retries: 20
 
+  # MinIO Community images left Docker Hub (and Quay anonymous pulls 401).
+  # rustfs/rustfs is a public S3-compatible drop-in on :9000. The service
+  # name stays `minio` so AF_STACK_S3_ENDPOINT=minio:9000 keeps working.
   minio:
-    image: minio/minio:latest
-    command: server /data
+    image: rustfs/rustfs:1.0.1
+    command: ["/data"]
     environment:
-      MINIO_ROOT_USER: minio
-      MINIO_ROOT_PASSWORD: minio-secret
+      RUSTFS_ACCESS_KEY: minio
+      RUSTFS_SECRET_KEY: minio-secret
+      RUSTFS_ADDRESS: ":9000"
+      RUSTFS_CONSOLE_ENABLE: "false"
     healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
+      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:9000/health"]
       interval: 10s
       timeout: 5s
       retries: 10
+      start_period: 15s
 
   runtime:
     image: ghcr.io/agent-field/af-stack-runtime:${AF_STACK_VERSION:-latest}

docker-compose.yml

@@ -35,22 +35,29 @@ services:
       timeout: 3s
       retries: 10
 
+  # MinIO Community images left Docker Hub (and Quay anonymous pulls 401).
+  # rustfs/rustfs is a public S3-compatible drop-in on :9000. The service
+  # name stays `minio` so AF_STACK_S3_ENDPOINT=minio:9000 keeps working.
   minio:
-    image: minio/minio:latest
-    command: server /data --console-address ":9001"
+    image: rustfs/rustfs:1.0.1
+    command: ["/data"]
     environment:
-      MINIO_ROOT_USER: ${AF_STACK_S3_ACCESS_KEY:-minio}
-      MINIO_ROOT_PASSWORD: ${AF_STACK_S3_SECRET_KEY:-minio-secret}
+      RUSTFS_ACCESS_KEY: ${AF_STACK_S3_ACCESS_KEY:-minio}
+      RUSTFS_SECRET_KEY: ${AF_STACK_S3_SECRET_KEY:-minio-secret}
+      RUSTFS_ADDRESS: ":9000"
+      RUSTFS_CONSOLE_ADDRESS: ":9001"
+      RUSTFS_CONSOLE_ENABLE: "true"
     ports:
       - "${MINIO_PORT:-9000}:9000"
       - "${MINIO_CONSOLE_PORT:-9001}:9001"
     volumes:
       - minio-data:/data
     healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
+      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:9000/health"]
       interval: 10s
       timeout: 5s
       retries: 5
+      start_period: 15s
 
   # LiteLLM Proxy — handles every upstream LLM provider so the runtime
   # doesn't ship a hand-rolled client per vendor. BackAI forwards

docs/adapters/storage.md

@@ -14,7 +14,7 @@ Supported today:
 
 | Adapter | Use |
 |---|---|
-| `minio` | Local development and self-hosted S3-compatible storage |
+| `minio` | Local development and self-hosted S3-compatible storage. Bundled compose files run `rustfs/rustfs` under the service name `minio` — MinIO Community images left Docker Hub. |
 | `s3` | AWS S3 or compatible managed object storage (also covers R2 / GCS / Azure Blob via the S3 API) |
 | `remote` | An out-of-process storage adapter speaking the [remote protocol](PROTOCOL.md) |
 

examples/01-notable/docker-compose.yml

@@ -38,22 +38,27 @@ services:
       timeout: 3s
       retries: 10
 
+  # MinIO Community images left Docker Hub. rustfs/rustfs speaks S3 on :9000.
   minio:
-    image: minio/minio:latest
-    command: server /data --console-address ":9001"
+    image: rustfs/rustfs:1.0.1
+    command: ["/data"]
     environment:
-      MINIO_ROOT_USER: ${AF_STACK_S3_ACCESS_KEY:-minio}
-      MINIO_ROOT_PASSWORD: ${AF_STACK_S3_SECRET_KEY:-minio-secret}
+      RUSTFS_ACCESS_KEY: ${AF_STACK_S3_ACCESS_KEY:-minio}
+      RUSTFS_SECRET_KEY: ${AF_STACK_S3_SECRET_KEY:-minio-secret}
+      RUSTFS_ADDRESS: ":9000"
+      RUSTFS_CONSOLE_ADDRESS: ":9001"
+      RUSTFS_CONSOLE_ENABLE: "true"
     ports:
       - "9000:9000"
       - "9001:9001"
     volumes:
       - minio-data:/data
     healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
+      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:9000/health"]
       interval: 10s
       timeout: 5s
       retries: 5
+      start_period: 15s
 
   agentfield:
     image: agentfield/control-plane:latest

services/cli/internal/starter/assets/docker-compose.yml

@@ -31,22 +31,29 @@ services:
       timeout: 3s
       retries: 10
 
+  # MinIO Community images left Docker Hub (and Quay anonymous pulls 401).
+  # rustfs/rustfs is a public S3-compatible drop-in on :9000. The service
+  # name stays `minio` so AF_STACK_S3_ENDPOINT=minio:9000 keeps working.
   minio:
-    image: minio/minio:latest
-    command: server /data --console-address ":9001"
+    image: rustfs/rustfs:1.0.1
+    command: ["/data"]
     environment:
-      MINIO_ROOT_USER: ${AF_STACK_S3_ACCESS_KEY:-minio}
-      MINIO_ROOT_PASSWORD: ${AF_STACK_S3_SECRET_KEY:-minio-secret}
+      RUSTFS_ACCESS_KEY: ${AF_STACK_S3_ACCESS_KEY:-minio}
+      RUSTFS_SECRET_KEY: ${AF_STACK_S3_SECRET_KEY:-minio-secret}
+      RUSTFS_ADDRESS: ":9000"
+      RUSTFS_CONSOLE_ADDRESS: ":9001"
+      RUSTFS_CONSOLE_ENABLE: "true"
     ports:
       - "${MINIO_PORT:-9000}:9000"
       - "${MINIO_CONSOLE_PORT:-9001}:9001"
     volumes:
       - minio-data:/data
     healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
+      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:9000/health"]
       interval: 10s
       timeout: 5s
       retries: 5
+      start_period: 15s
 
   # LiteLLM proxy: every upstream model provider behind the runtime's
   # OpenAI-compatible /api/v1/llm/* gateway. Only the provider keys you set