chore: import upstream snapshot with attribution

2026-07-13 12:06:18 +08:00
commit e84fb4a79e
474 changed files with 68321 additions and 0 deletions
@@ -0,0 +1,120 @@
+//===----------------------------------------------------------------------===//
+// Copyright © 2025-2026 Apple Inc. and the container project authors.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   https://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//===----------------------------------------------------------------------===//
+
+import ArgumentParser
+import ContainerAPIClient
+import ContainerizationError
+import ContainerizationOS
+import Foundation
+
+extension Application {
+    public struct ContainerExec: AsyncLoggableCommand {
+        public init() {}
+
+        public static let configuration = CommandConfiguration(
+            commandName: "exec",
+            abstract: "Run a new command in a running container")
+
+        @OptionGroup(title: "Process options")
+        var processFlags: Flags.Process
+
+        @OptionGroup
+        public var logOptions: Flags.Logging
+
+        @Flag(name: .shortAndLong, help: "Run the process and detach from it")
+        var detach = false
+
+        @Argument(help: "Container ID")
+        var containerId: String
+
+        @Argument(parsing: .captureForPassthrough, help: "New process arguments")
+        var arguments: [String]
+
+        public func run() async throws {
+            var exitCode: Int32 = 127
+            let client = ContainerClient()
+            let container = try await client.get(id: containerId)
+            try ensureRunning(container: container)
+
+            let stdin = self.processFlags.interactive
+            let tty = self.processFlags.tty
+
+            guard let executable = arguments.first else {
+                throw ContainerizationError(.invalidArgument, message: "no command specified for exec")
+            }
+
+            var config = container.configuration.initProcess
+            config.executable = executable
+            config.arguments = [String](self.arguments.dropFirst())
+            config.terminal = tty
+            config.environment.append(
+                contentsOf: try Parser.allEnv(
+                    imageEnvs: [],
+                    envFiles: self.processFlags.envFile,
+                    envs: self.processFlags.env
+                ))
+
+            if let cwd = self.processFlags.cwd {
+                config.workingDirectory = cwd
+            }
+
+            let defaultUser = config.user
+            let (user, additionalGroups) = Parser.user(
+                user: processFlags.user, uid: processFlags.uid,
+                gid: processFlags.gid, defaultUser: defaultUser)
+            config.user = user
+            config.supplementalGroups.append(contentsOf: additionalGroups)
+
+            do {
+                let io = try ProcessIO.create(tty: tty, interactive: stdin, detach: self.detach)
+                defer {
+                    try? io.close()
+                }
+
+                let process = try await client.createProcess(
+                    containerId: container.id,
+                    processId: UUID().uuidString.lowercased(),
+                    configuration: config,
+                    stdio: io.stdio
+                )
+
+                if self.detach {
+                    try await process.start()
+                    try io.closeAfterStart()
+                    print(containerId)
+                    return
+                }
+
+                if !self.processFlags.tty {
+                    var handler = SignalThreshold(threshold: 3, signals: [SIGINT, SIGTERM])
+                    let log = self.log
+                    handler.start {
+                        log.warning("Received 3 SIGINT/SIGTERM's, forcefully exiting.")
+                        Darwin.exit(1)
+                    }
+                }
+
+                exitCode = try await io.handleProcess(process: process, log: log)
+            } catch {
+                if error is ContainerizationError {
+                    throw error
+                }
+                throw ContainerizationError(.internalError, message: "failed to exec process \(error)")
+            }
+            throw ArgumentParser.ExitCode(exitCode)
+        }
+    }
+}