docker

type API interface {
	Ping(ctx context.Context, options client.PingOptions) (client.PingResult, error)
	ServerVersion(ctx context.Context, options client.ServerVersionOptions) (client.ServerVersionResult, error)
	Info(ctx context.Context, options client.InfoOptions) (client.SystemInfoResult, error)
	ContainerList(ctx context.Context, options client.ContainerListOptions) (client.ContainerListResult, error)
	ContainerInspect(ctx context.Context, id string, options client.ContainerInspectOptions) (client.ContainerInspectResult, error)
	ImageList(ctx context.Context, options client.ImageListOptions) (client.ImageListResult, error)
	DiskUsage(ctx context.Context, options client.DiskUsageOptions) (client.DiskUsageResult, error)
	Close() error
}

type Connection struct {
	API API
	// Endpoint is the daemon address, e.g. unix:///var/run/docker.sock.
	Endpoint string
	// TLS reports whether the client was configured with TLS certificates.
	TLS bool
}

type Container struct {
	ID      string
	Name    string
	Image   string
	State   string
	Running bool
	// Inspected is true when detailed configuration was read.
	Inspected     bool
	Privileged    bool
	NetworkMode   string
	RestartPolicy string
	AutoRemove    bool
	Mounts        []Mount
}

type Daemon struct {
	Version         string
	APIVersion      string
	OperatingSystem string
	OSType          string
	Architecture    string
	KernelVersion   string
	Name            string
	RootDir         string
	Rootless        bool
	Warnings        []string
}

type DiskUsage struct {
	Images     UsageItem
	Containers UsageItem
	Volumes    UsageItem
	BuildCache UsageItem
}

type Image struct {
	ID   string
	Size int64
}

type Inspector struct {
	Conn *Connection
	// HostFS is the host root filesystem used to read daemon configuration
	// and /proc. It may be nil, in which case those checks are skipped.
	HostFS fs.FS
	// GOOS is the operating system StackSentry runs on.
	GOOS string
}

type ListenerObservation struct {
	// Source names where the observation came from.
	Source string
	// Address is the listening address, e.g. tcp://0.0.0.0:2375.
	Address string
	// Detail adds context such as missing TLS verification.
	Detail     string
	Confidence findings.Confidence
}

type Mount struct {
	Type        string
	Source      string
	Destination string
	RW          bool
}

type Snapshot struct {
	Endpoint string
	Daemon   Daemon
	// Containers lists all containers, running and stopped, sorted by name.
	Containers []Container
	// ImagesTotal is the number of images reported by the daemon.
	ImagesTotal int
	// DanglingImages are untagged images not referenced by any tag.
	DanglingImages []Image
	// DiskUsage is nil when the daemon did not provide usage data.
	DiskUsage *DiskUsage
	// Listeners are observations of TCP API listeners.
	Listeners []ListenerObservation
	// Limitations describe information that could not be collected.
	Limitations []string
}

type UnavailableError struct {
	Endpoint string
	Reason   string
	Hint     string
	Err      error
}

type UsageItem struct {
	Count       int64
	Size        int64
	Reclaimable int64
}