aboutsummaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-07-27 12:17:21 +0900
committerOphestra <cat@gensokyo.uk>2025-07-27 12:27:42 +0900
commita1e5f020f48a65138c900961f856cf6b04833770 (patch)
tree42d6e0a6d592463890c51639cacbcf014336b31b
parentbd3fa53a552242b9d45a6743f16c31a8a2dca8ef (diff)
container: improve doc comments
Putting them on the builder methods is more useful. Signed-off-by: Ophestra <cat@gensokyo.uk>
-rw-r--r--container/container.go8
-rw-r--r--container/ops.go124
-rw-r--r--helper/container_test.go2
3 files changed, 78 insertions, 56 deletions
diff --git a/container/container.go b/container/container.go
index a10e610f..0b6891b9 100644
--- a/container/container.go
+++ b/container/container.go
@@ -91,12 +91,13 @@ type (
}
)
+// Start starts the container init. The init process blocks until Serve is called.
func (p *Container) Start() error {
if p.cmd != nil {
- return errors.New("sandbox: already started")
+ return errors.New("container: already started")
}
if p.Ops == nil || len(*p.Ops) == 0 {
- return errors.New("sandbox: starting an empty container")
+ return errors.New("container: starting an empty container")
}
ctx, cancel := context.WithCancel(p.ctx)
@@ -160,6 +161,8 @@ func (p *Container) Start() error {
return nil
}
+// Serve serves [Container.Params] to the container init.
+// Serve must only be called once.
func (p *Container) Serve() error {
if p.setup == nil {
panic("invalid serve")
@@ -213,6 +216,7 @@ func (p *Container) Serve() error {
return err
}
+// Wait waits for the container init process to exit.
func (p *Container) Wait() error { defer p.cancel(); return p.cmd.Wait() }
func (p *Container) String() string {
diff --git a/container/ops.go b/container/ops.go
index 236d1ac3..7ff104d4 100644
--- a/container/ops.go
+++ b/container/ops.go
@@ -15,7 +15,10 @@ import (
type (
Ops []Op
- Op interface {
+
+ // Op is a generic setup step ran inside the container init.
+ // Implementations of this interface are sent as a stream of gobs.
+ Op interface {
// early is called in host root.
early(params *Params) error
// apply is called in intermediate root.
@@ -27,11 +30,17 @@ type (
}
)
+// Grow grows the slice Ops points to using [slices.Grow].
func (f *Ops) Grow(n int) { *f = slices.Grow(*f, n) }
func init() { gob.Register(new(BindMountOp)) }
-// BindMountOp bind mounts host path Source on container path Target.
+// Bind appends an [Op] that bind mounts host path [BindMountOp.Source] on container path [BindMountOp.Target].
+func (f *Ops) Bind(source, target string, flags int) *Ops {
+ *f = append(*f, &BindMountOp{source, "", target, flags})
+ return f
+}
+
type BindMountOp struct {
Source, SourceFinal, Target string
@@ -39,8 +48,11 @@ type BindMountOp struct {
}
const (
+ // BindOptional skips nonexistent host paths.
BindOptional = 1 << iota
+ // BindWritable mounts filesystem read-write.
BindWritable
+ // BindDevice allows access to devices (special files) on this filesystem.
BindDevice
)
@@ -108,14 +120,15 @@ func (b *BindMountOp) String() string {
}
return fmt.Sprintf("%q on %q flags %#x", b.Source, b.Target, b.Flags&BindWritable)
}
-func (f *Ops) Bind(source, target string, flags int) *Ops {
- *f = append(*f, &BindMountOp{source, "", target, flags})
- return f
-}
func init() { gob.Register(new(MountProcOp)) }
-// MountProcOp mounts a private instance of proc.
+// Proc appends an [Op] that mounts a private instance of proc.
+func (f *Ops) Proc(dest string) *Ops {
+ *f = append(*f, MountProcOp(dest))
+ return f
+}
+
type MountProcOp string
func (p MountProcOp) early(*Params) error { return nil }
@@ -137,14 +150,15 @@ func (p MountProcOp) apply(params *Params) error {
func (p MountProcOp) Is(op Op) bool { vp, ok := op.(MountProcOp); return ok && p == vp }
func (MountProcOp) prefix() string { return "mounting" }
func (p MountProcOp) String() string { return fmt.Sprintf("proc on %q", string(p)) }
-func (f *Ops) Proc(dest string) *Ops {
- *f = append(*f, MountProcOp(dest))
- return f
-}
func init() { gob.Register(new(MountDevOp)) }
-// MountDevOp mounts part of host dev.
+// Dev appends an [Op] that mounts a subset of host /dev.
+func (f *Ops) Dev(dest string) *Ops {
+ *f = append(*f, MountDevOp(dest))
+ return f
+}
+
type MountDevOp string
func (d MountDevOp) early(*Params) error { return nil }
@@ -231,14 +245,15 @@ func (d MountDevOp) apply(params *Params) error {
func (d MountDevOp) Is(op Op) bool { vd, ok := op.(MountDevOp); return ok && d == vd }
func (MountDevOp) prefix() string { return "mounting" }
func (d MountDevOp) String() string { return fmt.Sprintf("dev on %q", string(d)) }
-func (f *Ops) Dev(dest string) *Ops {
- *f = append(*f, MountDevOp(dest))
- return f
-}
func init() { gob.Register(new(MountMqueueOp)) }
-// MountMqueueOp mounts a private mqueue instance on container Path.
+// Mqueue appends an [Op] that mounts a private instance of mqueue.
+func (f *Ops) Mqueue(dest string) *Ops {
+ *f = append(*f, MountMqueueOp(dest))
+ return f
+}
+
type MountMqueueOp string
func (m MountMqueueOp) early(*Params) error { return nil }
@@ -260,14 +275,15 @@ func (m MountMqueueOp) apply(params *Params) error {
func (m MountMqueueOp) Is(op Op) bool { vm, ok := op.(MountMqueueOp); return ok && m == vm }
func (MountMqueueOp) prefix() string { return "mounting" }
func (m MountMqueueOp) String() string { return fmt.Sprintf("mqueue on %q", string(m)) }
-func (f *Ops) Mqueue(dest string) *Ops {
- *f = append(*f, MountMqueueOp(dest))
- return f
-}
func init() { gob.Register(new(MountTmpfsOp)) }
-// MountTmpfsOp mounts tmpfs on container Path.
+// Tmpfs appends an [Op] that mounts tmpfs on container path [MountTmpfsOp.Path].
+func (f *Ops) Tmpfs(dest string, size int, perm os.FileMode) *Ops {
+ *f = append(*f, &MountTmpfsOp{dest, size, perm})
+ return f
+}
+
type MountTmpfsOp struct {
Path string
Size int
@@ -288,14 +304,15 @@ func (t *MountTmpfsOp) apply(*Params) error {
func (t *MountTmpfsOp) Is(op Op) bool { vt, ok := op.(*MountTmpfsOp); return ok && *t == *vt }
func (*MountTmpfsOp) prefix() string { return "mounting" }
func (t *MountTmpfsOp) String() string { return fmt.Sprintf("tmpfs on %q size %d", t.Path, t.Size) }
-func (f *Ops) Tmpfs(dest string, size int, perm os.FileMode) *Ops {
- *f = append(*f, &MountTmpfsOp{dest, size, perm})
- return f
-}
func init() { gob.Register(new(SymlinkOp)) }
-// SymlinkOp creates a symlink in the container filesystem.
+// Link appends an [Op] that creates a symlink in the container filesystem.
+func (f *Ops) Link(target, linkName string) *Ops {
+ *f = append(*f, &SymlinkOp{target, linkName})
+ return f
+}
+
type SymlinkOp [2]string
func (l *SymlinkOp) early(*Params) error {
@@ -331,14 +348,15 @@ func (l *SymlinkOp) apply(params *Params) error {
func (l *SymlinkOp) Is(op Op) bool { vl, ok := op.(*SymlinkOp); return ok && *l == *vl }
func (*SymlinkOp) prefix() string { return "creating" }
func (l *SymlinkOp) String() string { return fmt.Sprintf("symlink on %q target %q", l[1], l[0]) }
-func (f *Ops) Link(target, linkName string) *Ops {
- *f = append(*f, &SymlinkOp{target, linkName})
- return f
-}
func init() { gob.Register(new(MkdirOp)) }
-// MkdirOp creates a directory in the container filesystem.
+// Mkdir appends an [Op] that creates a directory in the container filesystem.
+func (f *Ops) Mkdir(dest string, perm os.FileMode) *Ops {
+ *f = append(*f, &MkdirOp{dest, perm})
+ return f
+}
+
type MkdirOp struct {
Path string
Perm os.FileMode
@@ -359,14 +377,21 @@ func (m *MkdirOp) apply(*Params) error {
func (m *MkdirOp) Is(op Op) bool { vm, ok := op.(*MkdirOp); return ok && m == vm }
func (*MkdirOp) prefix() string { return "creating" }
func (m *MkdirOp) String() string { return fmt.Sprintf("directory %q perm %s", m.Path, m.Perm) }
-func (f *Ops) Mkdir(dest string, perm os.FileMode) *Ops {
- *f = append(*f, &MkdirOp{dest, perm})
- return f
-}
func init() { gob.Register(new(TmpfileOp)) }
-// TmpfileOp places a file in container Path containing Data.
+// Place appends an [Op] that places a file in container path [TmpfileOp.Path] containing [TmpfileOp.Data].
+func (f *Ops) Place(name string, data []byte) *Ops { *f = append(*f, &TmpfileOp{name, data}); return f }
+
+// PlaceP is like Place but writes the address of [TmpfileOp.Data] to the pointer dataP points to.
+func (f *Ops) PlaceP(name string, dataP **[]byte) *Ops {
+ t := &TmpfileOp{Path: name}
+ *dataP = &t.Data
+
+ *f = append(*f, t)
+ return f
+}
+
type TmpfileOp struct {
Path string
Data []byte
@@ -415,19 +440,19 @@ func (*TmpfileOp) prefix() string { return "placing" }
func (t *TmpfileOp) String() string {
return fmt.Sprintf("tmpfile %q (%d bytes)", t.Path, len(t.Data))
}
-func (f *Ops) Place(name string, data []byte) *Ops { *f = append(*f, &TmpfileOp{name, data}); return f }
-func (f *Ops) PlaceP(name string, dataP **[]byte) *Ops {
- t := &TmpfileOp{Path: name}
- *dataP = &t.Data
-
- *f = append(*f, t)
- return f
-}
func init() { gob.Register(new(AutoEtcOp)) }
-// AutoEtcOp expands host /etc into a toplevel symlink mirror with /etc semantics.
+// Etc appends an [Op] that expands host /etc into a toplevel symlink mirror with /etc semantics.
// This is not a generic setup op. It is implemented here to reduce ipc overhead.
+func (f *Ops) Etc(host, prefix string) *Ops {
+ e := &AutoEtcOp{prefix}
+ f.Mkdir("/etc", 0755)
+ f.Bind(host, e.hostPath(), 0)
+ *f = append(*f, e)
+ return f
+}
+
type AutoEtcOp struct{ Prefix string }
func (e *AutoEtcOp) early(*Params) error { return nil }
@@ -473,10 +498,3 @@ func (e *AutoEtcOp) Is(op Op) bool {
}
func (*AutoEtcOp) prefix() string { return "setting up" }
func (e *AutoEtcOp) String() string { return fmt.Sprintf("auto etc %s", e.Prefix) }
-func (f *Ops) Etc(host, prefix string) *Ops {
- e := &AutoEtcOp{prefix}
- f.Mkdir("/etc", 0755)
- f.Bind(host, e.hostPath(), 0)
- *f = append(*f, e)
- return f
-}
diff --git a/helper/container_test.go b/helper/container_test.go
index f5dc1aaa..c5ad0659 100644
--- a/helper/container_test.go
+++ b/helper/container_test.go
@@ -14,7 +14,7 @@ func TestContainer(t *testing.T) {
t.Run("start empty container", func(t *testing.T) {
h := helper.New(t.Context(), container.Nonexistent, argsWt, false, argF, nil, nil)
- wantErr := "sandbox: starting an empty container"
+ wantErr := "container: starting an empty container"
if err := h.Start(); err == nil || err.Error() != wantErr {
t.Errorf("Start: error = %v, wantErr %q",
err, wantErr)