mirror of
https://github.com/apple/container.git
synced 2026-07-15 05:57:01 +00:00
Raj
b2994ac369
## Type of Change
- [ ] Bug fix
- [x] New feature
- [ ] Breaking change
- [ ] Documentation update
## Motivation and Context
`container` runs each workload in an ephemeral VM, so there's no
built-in way to keep a persistent Linux environment you can log into and
work in. `container machine` adds one.
A container machine is a lightweight, persistent, and integrated Linux
environments that feel like an extension of your Mac, created from
standard OCI images with a familiar UX. The login user matches your host
account with passwordless `sudo`, your home directory is mounted inside
the VM, and each machine keeps its filesystem and runs the image's own
init system (such as`systemd` or `openrc`).
```bash
container machine create alpine:3.22 --name my-machine
container machine run -n my-machine # interactive shell
container machine set -n my-machine cpus=4 memory=8G
```
Subcommands: `create`, `run`, `list` (`ls`), `inspect`, `set`,
`set-default`, `logs`, `stop`, `delete` (`rm`); `m` aliases `machine`.
Docs added to `docs/command-reference.md` (Machine Management) and
`docs/how-to.md` ("Use container machines").
## Testing
- [x] Tested locally
- [x] Added/updated tests
- [x] Added/updated docs
Signed-off-by: Raj Aryan Singh <rajaryan_singh@apple.com>
Co-authored-by: Jaewon Hur <jaewon_hur@apple.com>
Co-authored-by: John Logan <john_logan@apple.com>
Co-authored-by: Michael Crosby <michael_crosby@apple.com>
Co-authored-by: Eric Ernst <eric_ernst@apple.com>
Co-authored-by: Danny Canter <danny_canter@apple.com>
47 lines
1.7 KiB
Bash
Executable File
47 lines
1.7 KiB
Bash
Executable File
#!/bin/sh
|
|
# Copyright © 2026 Apple Inc. and the container project authors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# https://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
#
|
|
# First-time container user setup. Intended to be container machine-agnostic
|
|
# by directly manipulating /etc/group, /etc/passwd, and /etc/shadow rather
|
|
# than relying on image-specific tools (useradd, adduser, etc.). Also
|
|
# populates the home directory from /etc/skel and grants passwordless sudo
|
|
# access.
|
|
#
|
|
# Expects CONTAINER_USER, CONTAINER_UID, CONTAINER_GID, and CONTAINER_HOME to
|
|
# be set in the environment.
|
|
#
|
|
|
|
set -e
|
|
|
|
if ! getent group "${CONTAINER_GID}" >/dev/null 2>&1; then
|
|
echo "${CONTAINER_USER}:x:${CONTAINER_GID}:" >> /etc/group
|
|
fi
|
|
|
|
if ! getent passwd "${CONTAINER_UID}" >/dev/null 2>&1; then
|
|
echo "${CONTAINER_USER}:x:${CONTAINER_UID}:${CONTAINER_GID}::${CONTAINER_HOME}:${CONTAINER_SHELL}" >> /etc/passwd
|
|
echo "${CONTAINER_USER}:!:19000:0:99999:7:::" >> /etc/shadow
|
|
fi
|
|
|
|
mkdir -p "${CONTAINER_HOME}"
|
|
if [ -d /etc/skel ]; then
|
|
cp -a /etc/skel/. "${CONTAINER_HOME}"
|
|
fi
|
|
chown -R "${CONTAINER_UID}:${CONTAINER_GID}" "${CONTAINER_HOME}"
|
|
|
|
mkdir -p /etc/sudoers.d
|
|
echo "${CONTAINER_USER} ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/${CONTAINER_USER}"
|
|
chmod 440 "/etc/sudoers.d/${CONTAINER_USER}"
|