NucleicandClaude Opus 4.8
11b9825e09
Switch the containerization dependency from the github URL to a vendored copy (third_party/containerization, upstream commit 6b7b42ca) referenced by path, so we can carry a small local patch that upstream lacks: LinuxContainer.Configuration gains a `vmExtensions` field forwarded into VMConfiguration.extensions. Upstream already supports VMConfiguration.extensions + the VZInstanceExtension hook, but LinuxContainer — our only entry point — never forwarded them, so there was no way to attach a device (e.g. a memory balloon) to a container's VM. Tests/, docs/, examples/, images/ and the corresponding test targets are trimmed for footprint (we never build the dependency's tests). See PATCHES.md for the full diff vs. upstream and the re-vendoring procedure. Also adds the ContainerizationExtras product to NucleicCore (AddressAllocator, named in the configureVZ signature). Co-Authored-By: Claude Opus 4.8 <[email protected]>
84 lines
2.7 KiB
Swift
84 lines
2.7 KiB
Swift
//===----------------------------------------------------------------------===//
|
|
// Copyright © 2026 Apple Inc. and the Containerization project authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
#if os(Linux)
|
|
|
|
import ContainerizationOS
|
|
import Foundation
|
|
|
|
/// A Unix socket for receiving PTY master file descriptors from runc
|
|
final class ConsoleSocket: Sendable {
|
|
private let socket: Socket
|
|
private let socketPath: String
|
|
|
|
/// The path to the console socket
|
|
var path: String { socketPath }
|
|
|
|
/// Create a new console socket at the specified path
|
|
init(path: String) throws {
|
|
let absPath = path.starts(with: "/") ? path : FileManager.default.currentDirectoryPath + "/" + path
|
|
self.socketPath = absPath
|
|
|
|
let pathURL = URL(fileURLWithPath: absPath)
|
|
let dir = pathURL.deletingLastPathComponent().path
|
|
try FileManager.default.createDirectory(
|
|
atPath: dir,
|
|
withIntermediateDirectories: true,
|
|
attributes: nil
|
|
)
|
|
|
|
let socketType = try UnixType(path: absPath, unlinkExisting: true)
|
|
self.socket = try Socket(type: socketType)
|
|
|
|
try socket.listen()
|
|
}
|
|
|
|
/// Create a temporary console socket in the runtime directory
|
|
static func temporary() throws -> ConsoleSocket {
|
|
let tmpDir = "/tmp"
|
|
let socketDir = tmpDir + "/runc-console-\(UUID().uuidString)"
|
|
let socketPath = socketDir + "/console.sock"
|
|
|
|
try FileManager.default.createDirectory(
|
|
atPath: socketDir,
|
|
withIntermediateDirectories: true,
|
|
attributes: nil
|
|
)
|
|
|
|
let socket = try ConsoleSocket(path: socketPath)
|
|
return socket
|
|
}
|
|
|
|
/// Receive the PTY master file descriptor from runc
|
|
func receiveMaster() throws -> Int32 {
|
|
let connection = try socket.accept()
|
|
defer { try? connection.close() }
|
|
return try connection.receiveFileDescriptor()
|
|
}
|
|
|
|
/// Close the socket and optionally remove the socket file
|
|
func close() throws {
|
|
try socket.close()
|
|
try FileManager.default.removeItem(atPath: socketPath)
|
|
}
|
|
|
|
deinit {
|
|
try? close()
|
|
}
|
|
}
|
|
|
|
#endif
|