Vendor apple/containerization with a VM-extensions forwarding patch

Switch the containerization dependency from the github URL to a vendored copy (third_party/containerization, upstream commit 6b7b42ca) referenced by path, so we can carry a small local patch that upstream lacks: LinuxContainer.Configuration gains a `vmExtensions` field forwarded into VMConfiguration.extensions. Upstream already supports VMConfiguration.extensions + the VZInstanceExtension hook, but LinuxContainer — our only entry point — never forwarded them, so there was no way to attach a device (e.g. a memory balloon) to a container's VM. Tests/, docs/, examples/, images/ and the corresponding test targets are trimmed for footprint (we never build the dependency's tests). See PATCHES.md for the full diff vs. upstream and the re-vendoring procedure. Also adds the ContainerizationExtras product to NucleicCore (AddressAllocator, named in the configureVZ signature). Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-06-21 20:22:21 -07:00
commit 11b9825e09
280 changed files with 75699 additions and 0 deletions
@@ -0,0 +1,106 @@
+//===----------------------------------------------------------------------===//
+// Copyright © 2026 Apple Inc. and the Containerization project authors.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   https://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//===----------------------------------------------------------------------===//
+
+#if os(Linux)
+
+import Foundation
+import LCShim
+
+extension OSFile {
+    struct SpliceFile: Sendable {
+        fileprivate var file: OSFile
+        fileprivate var offset: Int
+        fileprivate let pipe = Pipe()
+
+        var fileDescriptor: Int32 {
+            file.fileDescriptor
+        }
+
+        var reader: Int32 {
+            pipe.fileHandleForReading.fileDescriptor
+        }
+
+        var writer: Int32 {
+            pipe.fileHandleForWriting.fileDescriptor
+        }
+
+        init(fd: Int32) {
+            self.file = OSFile(fd: fd)
+            self.offset = 0
+        }
+
+        init(handle: FileHandle) {
+            self.file = OSFile(handle: handle)
+            self.offset = 0
+        }
+
+        init(from: OSFile, withOffset: Int = 0) {
+            self.file = from
+            self.offset = withOffset
+        }
+
+        func close() throws {
+            try self.file.close()
+        }
+    }
+
+    static func splice(from: inout SpliceFile, to: inout SpliceFile, count: Int = 1 << 16) throws -> (read: Int, wrote: Int, action: IOAction) {
+        let fromOffset = from.offset
+        let toOffset = to.offset
+
+        while true {
+            while (from.offset - to.offset) < count {
+                let toRead = count - (from.offset - to.offset)
+                let bytesRead = LCShim.splice(from.fileDescriptor, nil, to.writer, nil, toRead, UInt32(bitPattern: LCShim.SPLICE_F_MOVE | LCShim.SPLICE_F_NONBLOCK))
+                if bytesRead == -1 {
+                    if errno != EAGAIN && errno != EIO {
+                        throw POSIXError(.init(rawValue: errno)!)
+                    }
+                    break
+                }
+                if bytesRead == 0 {
+                    return (0, 0, .eof)
+                }
+                from.offset += bytesRead
+                if bytesRead < toRead {
+                    break
+                }
+            }
+            if from.offset == to.offset {
+                return (from.offset - fromOffset, to.offset - toOffset, .success)
+            }
+            while to.offset < from.offset {
+                let toWrite = from.offset - to.offset
+                let bytesWrote = LCShim.splice(to.reader, nil, to.fileDescriptor, nil, toWrite, UInt32(bitPattern: LCShim.SPLICE_F_MOVE | LCShim.SPLICE_F_NONBLOCK))
+                if bytesWrote == -1 {
+                    if errno != EAGAIN && errno != EIO {
+                        throw POSIXError(.init(rawValue: errno)!)
+                    }
+                    break
+                }
+                to.offset += bytesWrote
+                if bytesWrote == 0 {
+                    return (from.offset - fromOffset, to.offset - toOffset, .brokenPipe)
+                }
+                if bytesWrote < toWrite {
+                    break
+                }
+            }
+        }
+    }
+}
+
+#endif