Versions in this module Expand all Collapse all v0 v0.4.0 Nov 7, 2026 Changes in this version + const AnnotationArch + const AnnotationBackend + const AnnotationDomain + const AnnotationEngineClass + const AnnotationEngineLayout + const AnnotationEngineVersion + const AnnotationExpires + const AnnotationFence + const AnnotationGPUCC + const AnnotationGPUDriver + const AnnotationGPUName + const AnnotationGeneration + const AnnotationGrant + const AnnotationHome + const AnnotationKernel + const AnnotationLibc + const AnnotationParent + const AnnotationSealKey + const AnnotationSession + const AnnotationSignature + const AnnotationSigner + const AnnotationTemplates + const AnnotationWBytes + const ArtifactType + const ArtifactTypeDelta + const ArtifactTypeParent + const FileScheme + const ImagesFormatHyperlight + const LinkDynamic + const LinkStatic + const MediaTypeBinary + const MediaTypeConfig + const MediaTypeHyperlight + const MediaTypeImages + const ParityExact + const ParityOff + const ParitySeries + var ErrEntryName = errors.New("artifact: archive entry is not a plain file name") + var ErrExpired = errors.New("artifact: sealed content has expired") + var ErrParity = errors.New("platform parity") + var ErrSealed = errors.New("artifact: sealed content does not open") + var ErrUntrusted = errors.New("artifact: not signed by a trusted key") + var Strict = Parity + func Build(ctx context.Context, o BuildOptions) (string, error) + func Delete(ctx context.Context, ref string) (removed bool, err error) + func GenerateSealKey() (*jose.JSONWebKey, error) + func HostInfo() (arch, kernel, libc string) + func ImagesDir(dir string) string + func IsFileRef(ref string) bool + func KernelSeries(release string) string + func LibcVersion(bin string) string — linux/amd64 + func Linking(path string) string + func OpenImages(src, dst string, k *SealKey, s ImagesSeal) error + func OpenParentDir(dir string, k *SealKey, sha string) error + func OpenSnapshot(dir string, cfg Config, k *SealKey, dst string) error + func Pack(ctx context.Context, dir string) (string, error) + func PullDir(ctx context.Context, ref, dst string) (string, error) + func Push(ctx context.Context, dir, ref string, cred auth.CredentialFunc) (string, error) + func PushDir(ctx context.Context, dir, ref, artifactType string, ...) (string, error) + func ReadDigest(dir string) (string, error) + func RemoveSnapshot(dst string) error + func Repository(ref string) (*remote.Repository, string, error) + func SealDir(src, dst string, k *SealKey, c SealContext) error + func SealParentDir(src, dst string, k *SealKey, sha string) error + func TarDir(src, dst string) error + func TarSnapshot(src, dst string) error + func UnpackImages(dir string, cfg Config, k *SealKey) error + func Untar(src, dst string) error + func ZygotePath(dir string) string + type BuildOptions struct + Args []string + CRIU criu.Options + HyperlightSnapshot string + NoSmoke bool + Out string + Platform Platform + ReadyTimeout time.Duration + SealTo *WrapPublicKey + SkipImages bool + Zygote string + type Config struct + Arch string + Args []string + BuiltAt time.Time + Digest string + Images *ImagesSeal + ImagesFormat string + Kernel string + Libc string + Linking string + ZygoteSHA256 string + func Pull(ctx context.Context, ref, dst string) (Config, error) + func ReadConfig(dir string) (Config, error) + func Reverify(ctx context.Context, dir, digest string) (Config, error) + func (c Config) HasImages() bool + func (c Config) HasZygote() bool + func (c Config) Platform() Platform + type File struct + Digest string + Name string + Size int64 + type ImagesSeal struct + Enc []byte + KeyID string + SHA256 string + Wrapped []byte + func SealImages(src, dst string, pub *WrapPublicKey) (ImagesSeal, error) + type Keys struct + Seal *SealKey + Signer *jose.JSONWebKey + Trust []jose.JSONWebKey + func LoadKeys(signerPath, trustPath string) (Keys, error) + func (k Keys) Verify(loc Located) error + func (k Keys) VerifyDir(dir, artifactType string, annotations map[string]string) error + type Located struct + Annotations map[string]string + ArtifactType string + Digest string + Files []File + func Resolve(ctx context.Context, ref string) (Located, bool, error) + type Parity struct + Kernel string + Libc string + func ParseParity(s string) (Parity, error) + func (p Parity) Check(host, want Platform) error + func (p Parity) String() string + type Platform struct + Arch string + Backend string + Kernel string + Libc string + Templates string + func Host() Platform + func PlatformFromAnnotations(m map[string]string) (Platform, bool) + func (p Platform) Annotate(m map[string]string) + func (p Platform) Complete() Platform + func (p Platform) String() string + type SealContext struct + Domain string + Expires time.Time + Fence string + Session string + func OpenDir(dir string, k *SealKey, domain, session string, now time.Time) (SealContext, error) + func ParentContext(sha string) SealContext + type SealKey struct + ID string + Key []byte + func LoadSealKey(path string) (*SealKey, error) + func SealKeyFromJWK(jwk *jose.JSONWebKey) (*SealKey, error) + type WrapKey struct + ID string + func DeriveWrapKey(k *SealKey) (*WrapKey, error) + func (w *WrapKey) Public() *WrapPublicKey + func (w *WrapKey) PublicJWK() ([]byte, error) + type WrapPublicKey struct + ID string + func LoadWrapPublicKey(path string) (*WrapPublicKey, error) + func ParseWrapPublicKey(b []byte) (*WrapPublicKey, error) + func (p *WrapPublicKey) JWK() ([]byte, error) v0.4.0-rc.1 Nov 6, 2026
Go to main page