NucleicandClaude Opus 4.8
24fa2df429
Switch the containerization dependency from the github URL to a vendored copy (third_party/containerization, upstream commit 6b7b42ca) referenced by path, so we can carry a small local patch that upstream lacks: LinuxContainer.Configuration gains a `vmExtensions` field forwarded into VMConfiguration.extensions. Upstream already supports VMConfiguration.extensions + the VZInstanceExtension hook, but LinuxContainer — our only entry point — never forwarded them, so there was no way to attach a device (e.g. a memory balloon) to a container's VM. Tests/, docs/, examples/, images/ and the corresponding test targets are trimmed for footprint (we never build the dependency's tests). See PATCHES.md for the full diff vs. upstream and the re-vendoring procedure. Also adds the ContainerizationExtras product to NucleicCore (AddressAllocator, named in the configureVZ signature). Co-Authored-By: Claude Opus 4.8 <[email protected]>
48 lines
2.0 KiB
Swift
48 lines
2.0 KiB
Swift
//===----------------------------------------------------------------------===//
|
|
// Copyright © 2025-2026 Apple Inc. and the Containerization project authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
extension Vminitd: SocketRelayAgent {
|
|
/// Sets up a relay between a host socket to a newly created guest socket, or vice versa.
|
|
public func relaySocket(port: UInt32, configuration: UnixSocketConfiguration) async throws {
|
|
let request = Com_Apple_Containerization_Sandbox_V3_ProxyVsockRequest.with {
|
|
$0.id = configuration.id
|
|
$0.vsockPort = port
|
|
|
|
if let perms = configuration.permissions {
|
|
$0.guestSocketPermissions = UInt32(perms.rawValue)
|
|
}
|
|
|
|
switch configuration.direction {
|
|
case .into:
|
|
$0.guestPath = configuration.destination.path
|
|
$0.action = .into
|
|
case .outOf:
|
|
$0.guestPath = configuration.source.path
|
|
$0.action = .outOf
|
|
}
|
|
}
|
|
_ = try await client.proxyVsock(request)
|
|
}
|
|
|
|
/// Stops the specified socket relay.
|
|
public func stopSocketRelay(configuration: UnixSocketConfiguration) async throws {
|
|
let request = Com_Apple_Containerization_Sandbox_V3_StopVsockProxyRequest.with {
|
|
$0.id = configuration.id
|
|
}
|
|
_ = try await client.stopVsockProxy(request)
|
|
}
|
|
}
|