//===----------------------------------------------------------------------===// // Copyright © 2025-2026 Apple Inc. and the container project authors. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // https://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. //===----------------------------------------------------------------------===// import ArgumentParser import ContainerAPIClient import ContainerizationError import ContainerizationOS import Foundation extension Application { public struct ContainerExec: AsyncLoggableCommand { public init() {} public static let configuration = CommandConfiguration( commandName: "exec", abstract: "Run a new command in a running container") @OptionGroup(title: "Process options") var processFlags: Flags.Process @OptionGroup public var logOptions: Flags.Logging @Flag(name: .shortAndLong, help: "Run the process and detach from it") var detach = false @Argument(help: "Container ID") var containerId: String @Argument(parsing: .captureForPassthrough, help: "New process arguments") var arguments: [String] public func run() async throws { var exitCode: Int32 = 127 let client = ContainerClient() let container = try await client.get(id: containerId) try ensureRunning(container: container) let stdin = self.processFlags.interactive let tty = self.processFlags.tty guard let executable = arguments.first else { throw ContainerizationError(.invalidArgument, message: "no command specified for exec") } var config = container.configuration.initProcess config.executable = executable config.arguments = [String](self.arguments.dropFirst()) config.terminal = tty config.environment.append( contentsOf: try Parser.allEnv( imageEnvs: [], envFiles: self.processFlags.envFile, envs: self.processFlags.env )) if let cwd = self.processFlags.cwd { config.workingDirectory = cwd } let defaultUser = config.user let (user, additionalGroups) = Parser.user( user: processFlags.user, uid: processFlags.uid, gid: processFlags.gid, defaultUser: defaultUser) config.user = user config.supplementalGroups.append(contentsOf: additionalGroups) do { let io = try ProcessIO.create(tty: tty, interactive: stdin, detach: self.detach) defer { try? io.close() } let process = try await client.createProcess( containerId: container.id, processId: UUID().uuidString.lowercased(), configuration: config, stdio: io.stdio ) if self.detach { try await process.start() try io.closeAfterStart() print(containerId) return } if !self.processFlags.tty { var handler = SignalThreshold(threshold: 3, signals: [SIGINT, SIGTERM]) let log = self.log handler.start { log.warning("Received 3 SIGINT/SIGTERM's, forcefully exiting.") Darwin.exit(1) } } exitCode = try await io.handleProcess(process: process, log: log) } catch { if error is ContainerizationError { throw error } throw ContainerizationError(.internalError, message: "failed to exec process \(error)") } throw ArgumentParser.ExitCode(exitCode) } } }