mirror of
https://github.com/apple/container.git
synced 2026-07-15 22:17:01 +00:00
16f2630126
We're working on making a pure swift container image build system that leverages containerization. This PR represents our initial design and initial work towards this goal. The native builder is still in active development and most of the implementation has not been started or completed. We will be opening a series of issues that represent various (but not necessarily all) pieces of work that need to be done here. There are docs included in this PR that describe the overall design of each component and outline some of our goals. The easiest way to view the docs by themselves (since this is a massive PR) is to look at the docs commit in the `Commits` tab. We'd love any feedback! @wlan0 --------- Signed-off-by: Kathryn Baldauf <k_baldauf@apple.com>
137 lines
5.6 KiB
Swift
137 lines
5.6 KiB
Swift
//===----------------------------------------------------------------------===//
|
|
// Copyright © 2025 Apple Inc. and the container project authors. All rights reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
import ContainerBuildIR
|
|
import ContainerBuildSnapshotter
|
|
import Foundation
|
|
|
|
/// Executes ImageOperation (FROM instructions).
|
|
public struct ImageOperationExecutor: OperationExecutor {
|
|
public let capabilities: ExecutorCapabilities
|
|
|
|
public init() {
|
|
self.capabilities = ExecutorCapabilities(
|
|
supportedOperations: [.image],
|
|
maxConcurrency: 3
|
|
)
|
|
}
|
|
|
|
public func execute(_ operation: ContainerBuildIR.Operation, context: ExecutionContext) async throws -> ExecutionResult {
|
|
guard let imageOp = operation as? ImageOperation else {
|
|
throw ExecutorError(
|
|
type: .invalidConfiguration,
|
|
context: ExecutorError.ErrorContext(
|
|
operation: operation, underlyingError: NSError(domain: "Executor", code: 1),
|
|
diagnostics: ExecutorError.Diagnostics(environment: [:], workingDirectory: "", recentLogs: [])))
|
|
}
|
|
|
|
do {
|
|
// Stub implementation
|
|
// In a real implementation, this would:
|
|
// 1. Pull the image from registry (if needed)
|
|
// 2. Verify the image (if verification specified)
|
|
// 3. Extract the image filesystem
|
|
// 4. Create initial snapshot
|
|
|
|
let startTime = Date()
|
|
|
|
// Simulate image pull
|
|
let imageSize: Int64
|
|
let imageDigest: Digest
|
|
|
|
switch imageOp.source {
|
|
case .registry(let reference):
|
|
// Simulate pulling from registry
|
|
imageSize = 100 * 1024 * 1024 // 100MB
|
|
let fakeDataString = "fake-image-\(reference.stringValue)"
|
|
guard let fakeData = fakeDataString.data(using: .utf8) else {
|
|
throw ExecutorError(
|
|
type: .executionFailed,
|
|
context: ExecutorError.ErrorContext(
|
|
operation: operation,
|
|
underlyingError: NSError(domain: "ImageOperationExecutor", code: 1, userInfo: [NSLocalizedDescriptionKey: "Failed to encode fake image data as UTF-8"]),
|
|
diagnostics: ExecutorError.Diagnostics(environment: [:], workingDirectory: "", recentLogs: [])
|
|
)
|
|
)
|
|
}
|
|
var digestBytes = Data(count: 32)
|
|
fakeData.withUnsafeBytes { bytes in
|
|
digestBytes.withUnsafeMutableBytes { digestBytesPtr in
|
|
if let destBase = digestBytesPtr.baseAddress, let srcBase = bytes.baseAddress {
|
|
memcpy(destBase, srcBase, min(32, bytes.count))
|
|
}
|
|
}
|
|
}
|
|
imageDigest = try Digest(algorithm: .sha256, bytes: digestBytes)
|
|
|
|
case .scratch:
|
|
// Empty image
|
|
imageSize = 0
|
|
imageDigest = try Digest(algorithm: .sha256, bytes: Data(count: 32))
|
|
|
|
case .ociLayout:
|
|
// Simulate loading from OCI layout
|
|
imageSize = 50 * 1024 * 1024 // 50MB
|
|
var digestBytes = Data(count: 32)
|
|
digestBytes[0] = 1
|
|
digestBytes[1] = 2
|
|
digestBytes[2] = 3
|
|
imageDigest = try Digest(algorithm: .sha256, bytes: digestBytes)
|
|
|
|
case .tarball:
|
|
// Simulate loading from tarball
|
|
imageSize = 75 * 1024 * 1024 // 75MB
|
|
var digestBytes = Data(count: 32)
|
|
digestBytes[0] = 4
|
|
digestBytes[1] = 5
|
|
digestBytes[2] = 6
|
|
imageDigest = try Digest(algorithm: .sha256, bytes: digestBytes)
|
|
}
|
|
|
|
// Create base snapshot
|
|
let snapshot = ContainerBuildSnapshotter.Snapshot(
|
|
digest: imageDigest,
|
|
size: imageSize,
|
|
parent: nil as UUID? // Base images have no parent
|
|
)
|
|
|
|
// Update context with image config
|
|
context.updateImageConfig { config in
|
|
// In a real implementation, we'd extract this from the image
|
|
config.env = ["PATH=/usr/local/bin:/usr/bin:/bin"]
|
|
config.workingDir = "/"
|
|
}
|
|
|
|
let duration = Date().timeIntervalSince(startTime)
|
|
|
|
return ExecutionResult(
|
|
filesystemChanges: .empty,
|
|
snapshot: snapshot,
|
|
duration: duration
|
|
)
|
|
} catch {
|
|
throw ExecutorError(
|
|
type: .executionFailed,
|
|
context: ExecutorError.ErrorContext(
|
|
operation: operation, underlyingError: error, diagnostics: ExecutorError.Diagnostics(environment: [:], workingDirectory: "", recentLogs: [])))
|
|
}
|
|
}
|
|
|
|
public func canExecute(_ operation: ContainerBuildIR.Operation) -> Bool {
|
|
operation is ImageOperation
|
|
}
|
|
}
|