mirror of
https://github.com/apple/container.git
synced 2026-07-15 22:17:01 +00:00
Kathryn Baldauf
16f2630126
We're working on making a pure swift container image build system that leverages containerization. This PR represents our initial design and initial work towards this goal. The native builder is still in active development and most of the implementation has not been started or completed. We will be opening a series of issues that represent various (but not necessarily all) pieces of work that need to be done here. There are docs included in this PR that describe the overall design of each component and outline some of our goals. The easiest way to view the docs by themselves (since this is a massive PR) is to look at the docs commit in the `Commits` tab. We'd love any feedback! @wlan0 --------- Signed-off-by: Kathryn Baldauf <k_baldauf@apple.com>
52 lines
1.5 KiB
Markdown
52 lines
1.5 KiB
Markdown
# Swift Native Builder
|
|
|
|
A pure-Swift container build system leveraging Containerization.framework for fast, secure, and reproducible builds.
|
|
|
|
## Overview
|
|
|
|
Swift Native Builder is a modern container build system that replaces traditional container builders with a Swift-native implementation. It runs each build step in isolated VMs, uses content-addressable storage for caching, and produces OCI-compliant container images.
|
|
|
|
### Key Features
|
|
|
|
- **Headless** - No daemon required, runs as a simple CLI tool
|
|
- **Mac-Native** - Built on Containerization.framework and Swift Concurrency
|
|
- **Secure** - Hardware-backed signing with Secure Enclave, biometric-protected secrets
|
|
- **Fast** - Parallel execution with intelligent caching
|
|
|
|
## Quick Start
|
|
|
|
```bash
|
|
# Build a container image
|
|
swift run builder build .
|
|
|
|
# Build with secrets
|
|
swift run builder secret add github-token --biometric
|
|
swift run builder build --build-secret=id=github-token,target=/run/secrets/token .
|
|
```
|
|
|
|
## Architecture
|
|
|
|
The project consists of several components:
|
|
|
|
- **ContainerBuildIR** - Intermediate representation for build operations
|
|
- **Parser** - Dockerfile parser and build graph generator
|
|
- **Scheduler** - DAG scheduler for parallel execution
|
|
- **Executor** - VM-based execution engine
|
|
- **CAS** - Content-addressable storage for layers
|
|
|
|
## Development
|
|
|
|
```bash
|
|
# Build the project
|
|
swift build
|
|
|
|
# Run tests
|
|
swift test
|
|
|
|
# Run demo
|
|
swift run container-build-demo
|
|
```
|
|
|
|
## Status
|
|
|
|
This project is under active development. The IR layer is implemented and functional. |