container

Jun 12, 2026

Changes in this version

+ type HTTPManagedRuntimeBundleObjectSource struct

+ Client *http.Client

+ func (s HTTPManagedRuntimeBundleObjectSource) FetchManagedRuntimeBundleObject(ctx context.Context, request ManagedRuntimeBundleObjectRequest) ([]byte, error)

type ManagedRuntimeBundleCatalog

+ TrustRoots []ManagedRuntimeTrustRoot

+ func (c ManagedRuntimeBundleCatalog) TrustRootForBundle(bundle core.ManagedRuntimeBundleDescriptor) (ManagedRuntimeTrustRoot, error)

+ type ManagedRuntimeBundleInstaller struct

+ Catalog ManagedRuntimeBundleCatalog

+ HTTPClient *http.Client

+ InstallRoot string

+ Now func() time.Time

+ Source ManagedRuntimeBundleObjectSource

+ func (i ManagedRuntimeBundleInstaller) Doctor(ctx context.Context, request ManagedRuntimeDoctorRequest) (ManagedRuntimeDoctorResult, error)

+ func (i ManagedRuntimeBundleInstaller) Install(ctx context.Context, request ManagedRuntimeInstallRequest) (ManagedRuntimeInstallResult, error)

+ func (i ManagedRuntimeBundleInstaller) Reinstall(ctx context.Context, request ManagedRuntimeInstallRequest) (ManagedRuntimeReinstallResult, error)

+ func (i ManagedRuntimeBundleInstaller) Uninstall(ctx context.Context, request ManagedRuntimeUninstallRequest) (ManagedRuntimeUninstallResult, error)

+ type ManagedRuntimeBundleObjectRequest struct

+ BundleID string

+ Kind string

+ Name string

+ URL string

+ type ManagedRuntimeBundleObjectSource interface

+ FetchManagedRuntimeBundleObject func(context.Context, ManagedRuntimeBundleObjectRequest) ([]byte, error)

+ type ManagedRuntimeBundleObjectSourceFunc func(context.Context, ManagedRuntimeBundleObjectRequest) ([]byte, error)

+ func (f ManagedRuntimeBundleObjectSourceFunc) FetchManagedRuntimeBundleObject(ctx context.Context, request ManagedRuntimeBundleObjectRequest) ([]byte, error)

+ type ManagedRuntimeDoctorRequest struct

+ BundleID string

+ TargetArch string

+ TargetOS string

+ type ManagedRuntimeDoctorResult struct

+ ArtifactDigest string

+ BundleID string

+ CommandPath string

+ HostGlobalStoreExcluded bool

+ ManifestPath string

+ Reason string

+ Root string

+ ScopedStoreEnforced bool

+ SignatureDigest string

+ Status ManagedRuntimeLifecycleStatus

+ Version string

+ type ManagedRuntimeInstallRequest struct

+ BundleID string

+ TargetArch string

+ TargetOS string

+ type ManagedRuntimeInstallResult struct

+ ArtifactDigest string

+ BundleID string

+ ChecksumDigest string

+ CommandPath string

+ FileDigests map[string]string

+ HostGlobalStoreExcluded bool

+ InstalledAt time.Time

+ ManifestPath string

+ Root string

+ ScopedStoreEnforced bool

+ SignatureDigest string

+ TrustRootDigest string

+ Version string

+ type ManagedRuntimeLifecycleStatus string

+ const ManagedRuntimeLifecycleStatusDegraded

+ const ManagedRuntimeLifecycleStatusMissing

+ const ManagedRuntimeLifecycleStatusOK

+ type ManagedRuntimeReinstallResult struct

+ Doctor ManagedRuntimeDoctorResult

+ Install ManagedRuntimeInstallResult

+ Uninstall ManagedRuntimeUninstallResult

+ type ManagedRuntimeTrustRoot struct

+ Digest string

+ Issuer string

+ KeyID string

+ Name string

+ URL string

+ type ManagedRuntimeUninstallRequest struct

+ BundleID string

+ type ManagedRuntimeUninstallResult struct

+ BundleID string

+ ManifestPath string

+ Removed bool

+ Root string

+ ScopedOnly bool

Jun 11, 2026

Changes in this version

+ func ManagedRuntimeScopeArgs(parts ...string) []string

+ func ManagedRuntimeScopeName(parts ...string) string

+ type ManagedRuntimeBundleCatalog struct

+ BlockedVersions []string

+ Bundles []core.ManagedRuntimeBundleDescriptor

+ GeneratedAt time.Time

+ MinimumVersion string

+ ReleaseTag string

+ RevokedKeyIDs []string

+ SourceBaseURL string

+ StableSigningKey string

+ func (c ManagedRuntimeBundleCatalog) Bundle(bundleID string, now time.Time) (core.ManagedRuntimeBundleDescriptor, error)

+ func (c ManagedRuntimeBundleCatalog) BundleForTarget(bundleID, targetOS, targetArch string, now time.Time) (core.ManagedRuntimeBundleDescriptor, error)

+ type ManagedRuntimeInstallation struct

+ Bundle core.ManagedRuntimeBundleDescriptor

+ CommandPath string

+ Root string

+ func NewManagedContainerdRuntimeInstallation(bundle core.ManagedRuntimeBundleDescriptor, root string) (ManagedRuntimeInstallation, error)

type RuntimeBackendCatalogEntry

+ SupportedTargets []core.ManagedRuntimeTarget

type RuntimeBackendProbe

+ func ManagedContainerdRuntimeProbe(installation *ManagedRuntimeInstallation, runner RuntimeCommandRunner, ...) RuntimeBackendProbe

+ func ManagedContainerdRuntimeProbes(catalog ManagedRuntimeBundleCatalog, installRoot string, ...) []RuntimeBackendProbe

type RuntimeBackendProbeOptions

+ ManagedBundle *core.ManagedRuntimeBundleDescriptor

+ RuntimeScopeArgs []string

Jun 11, 2026

Changes in this version

type SandboxRunRequest

+ CommandOverridesEntrypoint bool

Jun 9, 2026

Changes in this version

type RuntimeBackendProbeOptions

+ ConformanceWorkspace string

Jun 9, 2026

Changes in this version

+ type DockerCommandRunner interface

+ CombinedOutput func(ctx context.Context, stdin []byte, name string, args ...string) ([]byte, []byte, error)

+ type DockerSandboxRuntime struct

+ Runner DockerCommandRunner

+ RuntimeName string

+ Tool string

+ func (r DockerSandboxRuntime) Available(ctx context.Context) error

+ func (r DockerSandboxRuntime) Run(ctx context.Context, req SandboxRunRequest) (SandboxRunResult, error)

+ type ExecDockerCommandRunner struct

+ func (ExecDockerCommandRunner) CombinedOutput(ctx context.Context, stdin []byte, name string, args ...string) ([]byte, []byte, error)

+ type ExecRuntimeCommandRunner struct

+ func (ExecRuntimeCommandRunner) LookPath(name string) (string, error)

+ func (ExecRuntimeCommandRunner) Run(ctx context.Context, name string, args ...string) (RuntimeCommandResult, error)

type RuntimeAdapterCatalogDocument

+ RuntimeBackends []RuntimeBackendCatalogEntry

+ type RuntimeBackendCatalogEntry struct

+ BackendID string

+ ConformanceProfiles []string

+ ExecutorProviders []string

+ Families []core.RuntimeBackendFamily

+ InstallBurdens []core.RuntimeInstallBurden

+ IsolationModes []core.RuntimeIsolationMode

+ RuntimeProfiles []core.RuntimeProfile

+ Tools []core.ContainerRuntimeTool

+ func (e RuntimeBackendCatalogEntry) Validate() error

+ type RuntimeBackendProbe struct

+ Options RuntimeBackendProbeOptions

+ Runner RuntimeCommandRunner

+ func DockerCompatibleRuntimeProbes(runner RuntimeCommandRunner, generatedAt time.Time) []RuntimeBackendProbe

+ func (p RuntimeBackendProbe) Probe(ctx context.Context) core.RuntimeBackendReport

+ type RuntimeBackendProbeOptions struct

+ BackendID string

+ Command string

+ ConformanceCommand []string

+ ConformanceImage string

+ ConformanceProfiles []string

+ Family core.RuntimeBackendFamily

+ GeneratedAt time.Time

+ InstallBurden core.RuntimeInstallBurden

+ IsolationMode core.RuntimeIsolationMode

+ RuntimeProfiles []core.RuntimeProfile

+ Tool core.ContainerRuntimeTool

+ VersionArgs []string

+ type RuntimeCommandResult struct

+ Stderr []byte

+ Stdout []byte

+ type RuntimeCommandRunner interface

+ LookPath func(name string) (string, error)

+ Run func(ctx context.Context, name string, args ...string) (RuntimeCommandResult, error)

May 31, 2026

Changes in this version

+ const SandboxNetworkBridge

+ const SandboxNetworkNone

+ const SandboxedCommandOperationRun

+ const SandboxedCommandProviderName

+ const SandboxedContainerBuildDigestMarker

+ const SandboxedContainerBuildDigestPath

+ const SandboxedContainerBuildOperation

+ const SandboxedContainerBuildProviderName

+ const SandboxedContainerBuildStateDir

+ func CleanContainerPath(value string) string

+ func CommandRuntimeEnv(workload core.CommandWorkload, resolved map[string]string) (map[string]string, error)

+ func ContainerBuildEnv(workload core.ContainerBuildWorkload, resolved map[string]string) (map[string]string, error)

+ func DirectorySize(root string) int64

+ func ParseSandboxedContainerBuildDigestMarker(output []byte) string

+ func ReadSandboxedContainerBuildDigest(path string) (string, error)

+ func ResolveContainerBuildPaths(workspace string, workload core.ContainerBuildWorkload) (string, string, error)

+ func SandboxedCommandContract(descriptor core.RuntimeDescriptor) core.RuntimeAdapterContract

+ func SandboxedContainerBuildContract(descriptor core.RuntimeDescriptor) core.RuntimeAdapterContract

+ func ValidSHA256Digest(value string) bool

+ type ContainerRuntimeScope struct

+ Args []string

+ type RuntimeAdapterCatalogDocument struct

+ Adapters []RuntimeAdapterCatalogEntry

+ HostOwnedResponsibilities []string

+ ProtocolVersion string

+ Version string

+ func (d RuntimeAdapterCatalogDocument) Validate() error

+ type RuntimeAdapterCatalogEntry struct

+ AdapterID string

+ ConformanceProfiles []string

+ Kinds []core.RuntimeAdapterKind

+ Operation string

+ RuntimeProfiles []core.RuntimeProfile

+ WorkloadKinds []core.WorkloadKind

+ WorkspacePolicy core.RuntimeWorkspacePolicy

+ func (e RuntimeAdapterCatalogEntry) Contract(descriptor core.RuntimeDescriptor) core.RuntimeAdapterContract

+ func (e RuntimeAdapterCatalogEntry) Validate() error

+ type SandboxMount struct

+ ContainerPath string

+ HostPath string

+ ReadOnly bool

+ RequiredPrefix string

+ type SandboxRunRequest struct

+ AddCapabilities []string

+ Command []string

+ DataMounts []SandboxMount

+ Env map[string]string

+ ExtraTmpfs []string

+ Image string

+ Limits core.ResourceLimits

+ Network string

+ RunAsRoot bool

+ RuntimeName string

+ RuntimeScope ContainerRuntimeScope

+ Stdin []byte

+ Timeout time.Duration

+ WorkingDir string

+ Workspace string

+ WritableRootFS bool

+ type SandboxRunResult struct

+ ArtifactHash string

+ ExitCode int

+ ResourceUsage core.ResourceUsage

+ Stderr []byte

+ Stdout []byte

+ type SandboxRuntime interface

+ Available func(context.Context) error

+ Run func(context.Context, SandboxRunRequest) (SandboxRunResult, error)

+ type SandboxRuntimeCommandAdapter struct

+ Runtime SandboxRuntime

+ func (a SandboxRuntimeCommandAdapter) RunSandboxedCommand(ctx context.Context, invocation SandboxedCommandRuntimeInvocation) (core.RuntimeExecutionResult, error)

+ type SandboxRuntimeContainerBuildAdapter struct

+ Runtime SandboxRuntime

+ func (a SandboxRuntimeContainerBuildAdapter) BuildSandboxedContainer(ctx context.Context, invocation SandboxedContainerBuildRuntimeInvocation) (core.RuntimeExecutionResult, error)

+ type SandboxedCommandInvocationOptions struct

+ Image string

+ LeaseID string

+ Limits core.ResourceLimits

+ Network string

+ ResolvedEnv map[string]string

+ TaskID string

+ Timeout time.Duration

+ TimeoutLimitHit string

+ Workload core.CommandWorkload

+ Workspace string

+ type SandboxedCommandRuntime interface

+ RunSandboxedCommand func(context.Context, SandboxedCommandRuntimeInvocation) (core.RuntimeExecutionResult, error)

+ type SandboxedCommandRuntimeInvocation struct

+ Image string

+ Network string

+ Request core.RuntimeExecutionRequest

+ Timeout time.Duration

+ TimeoutLimitHit string

+ Workspace string

+ func NewSandboxedCommandInvocation(opts SandboxedCommandInvocationOptions) (SandboxedCommandRuntimeInvocation, error)

+ type SandboxedContainerBuildInvocationOptions struct

+ Image string

+ LeaseID string

+ Limits core.ResourceLimits

+ Network string

+ ResolvedEnv map[string]string

+ TaskID string

+ Timeout time.Duration

+ TimeoutLimitHit string

+ Workload core.ContainerBuildWorkload

+ Workspace string

+ type SandboxedContainerBuildRuntime interface

+ BuildSandboxedContainer func(context.Context, SandboxedContainerBuildRuntimeInvocation) (core.RuntimeExecutionResult, error)

+ type SandboxedContainerBuildRuntimeInvocation struct

+ Image string

+ Network string

+ Request core.RuntimeExecutionRequest

+ Timeout time.Duration

+ TimeoutLimitHit string

+ Workspace string

+ func NewSandboxedContainerBuildInvocation(opts SandboxedContainerBuildInvocationOptions) (SandboxedContainerBuildRuntimeInvocation, error)