Vendor apple/containerization with a VM-extensions forwarding patch

Switch the containerization dependency from the github URL to a vendored copy (third_party/containerization, upstream commit 6b7b42ca) referenced by path, so we can carry a small local patch that upstream lacks: LinuxContainer.Configuration gains a `vmExtensions` field forwarded into VMConfiguration.extensions. Upstream already supports VMConfiguration.extensions + the VZInstanceExtension hook, but LinuxContainer — our only entry point — never forwarded them, so there was no way to attach a device (e.g. a memory balloon) to a container's VM. Tests/, docs/, examples/, images/ and the corresponding test targets are trimmed for footprint (we never build the dependency's tests). See PATCHES.md for the full diff vs. upstream and the re-vendoring procedure. Also adds the ContainerizationExtras product to NucleicCore (AddressAllocator, named in the configureVZ signature). Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-06-21 20:22:21 -07:00
commit 11b9825e09
280 changed files with 75699 additions and 0 deletions
@@ -0,0 +1,78 @@
+//===----------------------------------------------------------------------===//
+// Copyright © 2025-2026 Apple Inc. and the Containerization project authors.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   https://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//===----------------------------------------------------------------------===//
+
+import CoreFoundation
+
+// takes a pointer and converts its contents to native endian bytes
+public func withUnsafeLittleEndianBytes<T, Result>(of value: T, body: (UnsafeRawBufferPointer) throws -> Result)
+    rethrows -> Result
+{
+    switch Endian {
+    case .little:
+        return try withUnsafeBytes(of: value) { bytes in
+            try body(bytes)
+        }
+    case .big:
+        return try withUnsafeBytes(of: value) { buffer in
+            let reversedBuffer = Array(buffer.reversed())
+            return try reversedBuffer.withUnsafeBytes { buf in
+                try body(buf)
+            }
+        }
+    }
+}
+
+public func withUnsafeLittleEndianBuffer<T>(
+    of value: UnsafeRawBufferPointer, body: (UnsafeRawBufferPointer) throws -> T
+) rethrows -> T {
+    switch Endian {
+    case .little:
+        return try body(value)
+    case .big:
+        let reversed = Array(value.reversed())
+        return try reversed.withUnsafeBytes { buf in
+            try body(buf)
+        }
+    }
+}
+
+extension UnsafeRawBufferPointer {
+    // loads littleEndian raw data, converts it native endian format and calls UnsafeRawBufferPointer.load
+    public func loadLittleEndian<T>(as type: T.Type) -> T {
+        switch Endian {
+        case .little:
+            return self.load(as: T.self)
+        case .big:
+            let buffer = Array(self.reversed())
+            return buffer.withUnsafeBytes { ptr in
+                ptr.load(as: T.self)
+            }
+        }
+    }
+}
+
+public enum Endianness {
+    case little
+    case big
+}
+
+// returns current endianness
+public var Endian: Endianness {
+    var value: UInt32 = 0x0102_0304
+    return withUnsafeBytes(of: &value) { buffer in
+        buffer.first == 0x04 ? .little : .big
+    }
+}