Struct DockerRuntime 

pub struct DockerRuntime;

Implementations

impl DockerRuntime

pub fn pull_verified( &self, image: &OciRef, expected_digest: &str, progress: &dyn ProgressReporter, ) -> Result<ImageDigest>

Pull image and bail if the registry-reported digest does not match expected_digest.

pull itself does not enforce this: it returns whatever digest the registry hands back. Most callers (bv sync) already cross-check against the lockfile, but the bv run and bv conform paths short circuit through is_locally_available, which only proves that a matching RepoDigests entry exists in the local cache, not that the upstream image still resolves to the pinned sha. New code that requires a digest pin should call this method instead of pull.

Trait Implementations

impl Clone for DockerRuntime

fn clone(&self) -> DockerRuntime

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ContainerRuntime for DockerRuntime

fn name(&self) -> &str

fn health_check(&self) -> Result<RuntimeInfo>

fn pull( &self, image: &OciRef, progress: &dyn ProgressReporter, ) -> Result<ImageDigest>

fn run(&self, spec: &RunSpec) -> Result<RunOutcome>

fn inspect(&self, digest: &ImageDigest) -> Result<ImageMetadata>

fn is_locally_available(&self, image_ref: &str, digest: &str) -> bool

Check whether image_ref@digest is already in the local Docker cache.

fn gpu_args(&self, profile: &GpuProfile) -> Vec<String>

fn mount_args(&self, mounts: &[Mount]) -> Vec<String>