Files
NucleicandClaude Opus 4.8 11b9825e09 Vendor apple/containerization with a VM-extensions forwarding patch
Switch the containerization dependency from the github URL to a vendored copy
(third_party/containerization, upstream commit 6b7b42ca) referenced by path, so
we can carry a small local patch that upstream lacks: LinuxContainer.Configuration
gains a `vmExtensions` field forwarded into VMConfiguration.extensions. Upstream
already supports VMConfiguration.extensions + the VZInstanceExtension hook, but
LinuxContainer — our only entry point — never forwarded them, so there was no way
to attach a device (e.g. a memory balloon) to a container's VM.

Tests/, docs/, examples/, images/ and the corresponding test targets are trimmed
for footprint (we never build the dependency's tests). See PATCHES.md for the full
diff vs. upstream and the re-vendoring procedure. Also adds the ContainerizationExtras
product to NucleicCore (AddressAllocator, named in the configureVZ signature).

Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-06-21 20:22:21 -07:00

71 lines
2.4 KiB
Swift

//===----------------------------------------------------------------------===//
// Copyright © 2026 Apple Inc. and the Containerization project authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//===----------------------------------------------------------------------===//
#if os(Linux)
import ContainerizationOS
import Foundation
/// Exit status information for a container process
struct ContainerExitStatus: Sendable {
var exitCode: Int32
var exitedAt: Date
}
/// Protocol for managing container processes
///
/// This protocol abstracts the underlying container runtime implementation,
/// allowing for different backends like vmexec or runc.
protocol ContainerProcess: Sendable {
/// Unique identifier for the container process
var id: String { get }
/// Process ID of the running container (nil if not started)
var pid: Int32? { get }
/// Start the container process
/// - Returns: The process ID of the started container
/// - Throws: If the process fails to start
func start() async throws -> Int32
/// Wait for the container process to exit
/// - Returns: Exit status information when the process exits
func wait() async -> ContainerExitStatus
/// Send a signal to the container process
/// - Parameter signal: The signal number to send
/// - Throws: If the signal cannot be sent
func kill(_ signal: Int32) async throws
/// Resize the terminal for the container process
/// - Parameter size: The new terminal size
/// - Throws: If the terminal cannot be resized or process doesn't have a terminal
func resize(size: Terminal.Size) throws
/// Close stdin for the container process
/// - Throws: If stdin cannot be closed
func closeStdin() throws
/// Delete the container process and clean up resources
/// - Throws: If cleanup fails
func delete() async throws
/// Set the exit status of the process.
func setExit(_ status: Int32)
}
#endif