Struct ContainerRuntime 

pub struct ContainerRuntime { /* private fields */ }

A container-engine runtime.

Implementations

impl ContainerRuntime

pub fn new(cfg: ContainerRuntimeConfig, runner: Arc<dyn CommandRunner>) -> Self

New adapter.

Trait Implementations

impl WorkloadRuntime for ContainerRuntime

fn network_exposure(&self) -> NetworkPolicy

none has no network. Every other network (the engine’s default bridge, host, or a named one) can reach the internet as far as this adapter knows, so the gate is told egress.

fn id(&self) -> &str

Adapter id (native, container.docker, remote.api.cognitum-seed).

fn provides(&self) -> Vec<Capability>

Capabilities a node advertises when this adapter works.

fn admit<'life0, 'life1, 'async_trait>( &'life0 self, w: &'life1 VerifiedWorkload, ) -> Pin<Box<dyn Future<Output = Result<Admission, RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Self-check: can this node run w? Reserves nothing it cannot undo.

fn load<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, w: &'life1 VerifiedWorkload, cfg: &'life2 WorkloadConfig, ) -> Pin<Box<dyn Future<Output = Result<InstanceHandle, RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Stage the payload and config; returns a handle for the instance.

fn start<'life0, 'life1, 'async_trait>( &'life0 self, h: &'life1 InstanceHandle, ) -> Pin<Box<dyn Future<Output = Result<(), RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Start the instance.

fn stop<'life0, 'life1, 'async_trait>( &'life0 self, h: &'life1 InstanceHandle, grace: Duration, ) -> Pin<Box<dyn Future<Output = Result<RunEvidence, RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Stop it (terminate, then kill after grace) and return evidence.

fn unload<'life0, 'async_trait>( &'life0 self, h: InstanceHandle, ) -> Pin<Box<dyn Future<Output = Result<(), RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Remove staged payload and state.

fn status<'life0, 'life1, 'async_trait>( &'life0 self, h: &'life1 InstanceHandle, ) -> Pin<Box<dyn Future<Output = InstanceStatus> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Current status.

fn control_mode(&self) -> ControlMode

Managed or adopted.

fn console<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, h: &'life1 InstanceHandle, command: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<RunEvidence, RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Run one console cycle ([console] limits apply). command must be one of the cog’s [console].allowed_commands.

fn staged_payload<'life0, 'life1, 'async_trait>( &'life0 self, _h: &'life1 InstanceHandle, ) -> Pin<Box<dyn Future<Output = Option<PathBuf>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

The file an instance’s binary was staged to, when the adapter runs it from disk (the licence run gate rehashes it at each start). None: not run from a file this node can read (a container image is tagged by the binary’s BLAKE3; a remote device holds its own copy).

fn link_security(&self) -> LinkSecurity

How the link to a remote device is authenticated. Fails closed: only a remote adapter with a pinned transport says Pinned.

fn adopt<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, h: &'life1 InstanceHandle, _w: &'life2 VerifiedWorkload, ) -> Pin<Box<dyn Future<Output = Result<(), RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Re-attach an instance this adapter loaded before the controller restarted (its in-memory table is gone but the device still holds it). The adapter verifies the instance is still there and still the pinned version, so stop / unload work again; it starts and changes nothing on the device.

fn console_preemptions<'life0, 'life1, 'async_trait>( &'life0 self, _h: &'life1 InstanceHandle, ) -> Pin<Box<dyn Future<Output = Result<Vec<Preemption>, RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Instances that must stop before a console run of h. The host gates each one as workload.stop before calling Self::preempt.

fn preempt<'life0, 'life1, 'async_trait>( &'life0 self, p: &'life1 Preemption, ) -> Pin<Box<dyn Future<Output = Result<(), RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Stop one preempted instance.

fn resume<'life0, 'life1, 'async_trait>( &'life0 self, p: &'life1 Preemption, ) -> Pin<Box<dyn Future<Output = Result<(), RuntimeError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Restart one preempted instance after the console run.