Files
container/Sources/Helpers/RuntimeLinux/NonisolatedInterfaceStrategy.swift
T
J Logan 3b5c253059 Adds container network for macOS 26. (#243)
See discussion below for example. For multiple network interfaces in a
single container we'll want to integrate against a containerization that
includes apple/containerization#156.

The change bumps the containerization dependency to 0.2.0 and addresses
the breaking API changes.

```console
% container network
OVERVIEW: Manage container networks

USAGE: container network <subcommand>

OPTIONS:
  --version               Show the version.
  -h, --help              Show help information.

SUBCOMMANDS:
  create                  Create a new network
  delete, rm              Delete one or more networks
  list, ls                List networks
  inspect                 Display information about one or more networks

  See 'container help network <subcommand>' for detailed help.
```
2025-06-27 14:12:29 -07:00

50 lines
2.1 KiB
Swift

//===----------------------------------------------------------------------===//
// Copyright © 2025 Apple Inc. and the container project authors. All rights reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//===----------------------------------------------------------------------===//
import ContainerNetworkService
import ContainerSandboxService
import ContainerXPC
import Containerization
import ContainerizationError
import Logging
import Virtualization
import vmnet
/// Interface strategy for containers that use macOS's custom network feature.
@available(macOS 26, *)
struct NonisolatedInterfaceStrategy: InterfaceStrategy {
private let log: Logger
public init(log: Logger) {
self.log = log
}
public func toInterface(attachment: Attachment, interfaceIndex: Int, additionalData: XPCMessage?) throws -> Interface {
guard let additionalData else {
throw ContainerizationError(.invalidState, message: "network state does not contain custom network reference")
}
var status: vmnet_return_t = .VMNET_SUCCESS
guard let networkRef = vmnet_network_create_with_serialization(additionalData.underlying, &status) else {
throw ContainerizationError(.invalidState, message: "cannot deserialize custom network reference, status \(status)")
}
log.info("creating NATNetworkInterface with network reference")
let gateway = interfaceIndex == 0 ? attachment.gateway : nil
return NATNetworkInterface(address: attachment.address, gateway: gateway, reference: networkRef)
}
}