config

type BlockIODevice struct {
	// Major是设备的主要号
	Major int64 `json:"major"`
	// Minor是设备的次要号
	Minor int64 `json:"minor"`
}

type Capabilities struct {
	// Bounding is the set of capabilities checked by the kernel.
	Bounding []string
	// Effective is the set of capabilities checked by the kernel.
	Effective []string
	// Inheritable is the capabilities preserved across execve.
	Inheritable []string
	// Permitted is the limiting superset for effective capabilities.
	Permitted []string
	// Ambient is the ambient set of capabilities that are kept.
	Ambient []string
}

type Cgroup struct {
	// cgroup名称
	Name string `json:"name,omitempty"`
	// cgroup/slice 的parent名称
	Parent string `json:"parent,omitempty"`
	// cgroup被创建，或者被容器添加的路径
	Path string `json:"path"`
	*Resources
	ScopePrefix string `json:"scope_prefix"`
	Rootless    bool
}

type Config struct {
	OpenStdin    bool
	StdinOnce    bool
	AttachStdin  bool
	AttachStdout bool
	AttachStderr bool
	Tty          bool
	Cmd          []string
	Image        string
}

type FreezerState string

type Hook interface {
	// Run executes the hook with the provided state.
	Run(*specs.State) error
}

type HookList []Hook

type HookName string

type Hooks map[HookName]HookList

type HostConfig struct {
	*Resources
}

type HugepageLimit struct {
	Pagesize string `json:"page_size"`
	Limit    uint64 `json:"limit"`
}

type IDMap struct {
	ContainerID int64 `json:"container_id"`
	HostID      int64 `json:"host_id"`
	Size        int64 `json:"size"`
}

type Mount struct {
	Source      string `json:"source"`
	Destination string `json:"destination"`
	Device      string `json:"device"`
	Fstype      string `json:"fstype"`
	Flags       int    `json:"flags"`
	// Mount flags that were explicitly cleared in the configuration (meaning
	// the user explicitly requested that these flags *not* be set).
	ClearedFlags int `json:"cleared_flags"`
	// Propagation Flags
	PropagationFlags []int  `json:"propagation_flags"`
	Data             string `json:"data"`
	Relabel          string `json:"relabel"`
	// RecAttr represents mount properties to be applied recursively (AT_RECURSIVE), see mount_setattr(2).
	RecAttr *unix.MountAttr `json:"rec_attr"`

	// Extensions are additional flags that are specific to runc.
	Extensions int             `json:"extensions"`
	IDMapping  *MountIDMapping `json:"id_mapping,omitempty"`
}

type MountIDMapping struct {
	// Recursive indicates if the mapping needs to be recursive.
	Recursive bool `json:"recursive"`

	// UserNSPath is a path to a user namespace that indicates the necessary
	// id-mappings for MOUNT_ATTR_IDMAP. If set to non-"", UIDMappings and
	// GIDMappings must be set to nil.
	UserNSPath string `json:"userns_path,omitempty"`

	// UIDMappings is the uid mapping set for this mount, to be used with
	// MOUNT_ATTR_IDMAP.
	UIDMappings []IDMap `json:"uid_mappings,omitempty"`

	// GIDMappings is the gid mapping set for this mount, to be used with
	// MOUNT_ATTR_IDMAP.
	GIDMappings []IDMap `json:"gid_mappings,omitempty"`
}

type Namespace struct {
	Type NamespaceType `json:"type"`
	Path string        `json:"path"`
}

type NamespaceType string

type Namespaces []Namespace

type Network struct {
	// Type sets the networks type, commonly veth and loopback
	Type string `json:"type"`

	// Name of the network interface
	Name string `json:"name"`

	// The bridge to use.
	Bridge string `json:"bridge"`

	// MacAddress contains the MAC address to set on the network interface
	MacAddress string `json:"mac_address"`

	// Address contains the IPv4 and mask to set on the network interface
	Address string `json:"address"`

	// Gateway sets the gateway address that is used as the default for the interface
	Gateway string `json:"gateway"`

	// IPv6Address contains the IPv6 and mask to set on the network interface
	IPv6Address string `json:"ipv6_address"`

	// IPv6Gateway sets the ipv6 gateway address that is used as the default for the interface
	IPv6Gateway string `json:"ipv6_gateway"`

	// Mtu sets the mtu value for the interface and will be mirrored on both the host and
	// container's interfaces if a pair is created, specifically in the case of type veth
	// Note: This does not apply to loopback interfaces.
	Mtu int `json:"mtu"`

	// TxQueueLen sets the tx_queuelen value for the interface and will be mirrored on both the host and
	// container's interfaces if a pair is created, specifically in the case of type veth
	// Note: This does not apply to loopback interfaces.
	TxQueueLen int `json:"txqueuelen"`

	// HostInterfaceName is a unique name of a veth pair that resides on in the host interface of the
	// container.
	HostInterfaceName string `json:"host_interface_name"`

	// HairpinMode specifies if hairpin NAT should be enabled on the virtual interface
	// bridge port in the case of type veth
	// Note: This is unsupported on some systems.
	// Note: This does not apply to loopback interfaces.
	HairpinMode bool `json:"hairpin_mode"`
}

type Resources struct {
	Unified                      map[string]string `json:"unified"`
	CpuIdle                      *int64            `json:"cpu_idle,omitempty"`
	CpuShares                    uint64            `json:"cpu_shares"`
	CpuQuota                     int64             `json:"cpu_quota"`
	CpuBurst                     *uint64           `json:"cpu_burst"`
	CpuPeriod                    uint64            `json:"cpu_period"`
	CpuRtRuntime                 int64             `json:"cpu_rt_quota"`
	CpuRtPeriod                  uint64            `json:"cpu_rt_period"`
	CpusetCpus                   string            `json:"cpuset_cpus"`
	CpusetMems                   string            `json:"cpuset_mems"`
	CpuWeight                    uint64            `json:"cpu_weight"`
	Memory                       int64             `json:"memory"`
	MemoryReservation            int64             `json:"memory_reservation"`
	MemorySwap                   int64             `json:"memory_swap"`
	MemorySwappiness             *int64            `json:"memory_swappiness"`
	IoMax                        string            `json:"IoMax"`
	IoWeight                     string            `json:"IoWeight"`
	IoStat                       string            `json:"IoStat"`
	IoPressure                   string            `json:"IoPressure"`
	PidsLimit                    int64             `json:"pids_limit"`
	BlkioWeight                  uint16            `json:"blkio_weight"`
	BlkioLeafWeight              uint16            `json:"blkio_leaf_weight"`
	BlkioWeightDevice            []*WeightDevice   `json:"blkio_weight_device"`
	BlkioThrottleReadBpsDevice   []*ThrottleDevice `json:"blkio_throttle_read_bps_device"`
	BlkioThrottleWriteBpsDevice  []*ThrottleDevice `json:"blkio_throttle_write_bps_device"`
	BlkioThrottleReadIOPSDevice  []*ThrottleDevice `json:"blkio_throttle_read_iops_device"`
	BlkioThrottleWriteIOPSDevice []*ThrottleDevice `json:"blkio_throttle_write_iops_device"`
	MemoryCheckBeforeUpdate      bool              `json:"memory_check_before_update"`

	SkipDevices bool `json:"-"`

	HugetlbLimit []*HugepageLimit `json:"hugetlb_limit"`
}

type Route struct {
	// Destination specifies the destination IP address and mask in the CIDR form.
	Destination string `json:"destination"`

	// Source specifies the source IP address and mask in the CIDR form.
	Source string `json:"source"`

	// Gateway specifies the gateway IP address.
	Gateway string `json:"gateway"`

	// InterfaceName specifies the device to set this route up for, for example eth0.
	InterfaceName string `json:"interface_name"`
}

type ThrottleDevice struct {
	BlockIODevice
	Rate uint64 `json:"rate"`
}

type WeightDevice struct {
	BlockIODevice

	// 设备的带宽,10-1000
	Weight uint16 `json:"weight"`
	// 用于决定给定 cgroup 中任务在与 cgroup 的子 cgroup 竞争时
	// 具有多少权重的 weight 的等效项。
	LeafWeight uint16 `json:"leafWeight"`
}