Expand description
Native container-runtime contracts.
This native-first layer deliberately contains no OCI store. It provides stable diagnostic, redaction, and injectable process boundaries plus one stale-checked atomic path for explicitly confirmed mirror configuration.
Re-exports§
pub use apply::apply_mirror_plan;pub use apply::MirrorApplyError;pub use apply::MirrorApplyReport;pub use apply::MIRROR_APPLY_SCHEMA_VERSION;pub use buildkit::BuildPlatform;pub use buildkit::BuilderDriver;pub use buildkit::BuilderNode;pub use buildkit::BuilderNodeStatus;pub use buildkit::BuildkitAdapter;pub use buildkit::BuildkitDiagnosticDetails;pub use buildkit::BuildkitDiscovery;pub use buildkit::BuildkitNodeDiagnosticDetails;pub use buildkit::BuildxBuilderSelector;pub use buildkit::BuildxBuilderSelectorError;pub use buildkit::SelectedBuilder;pub use cache::BuildxCacheQuery;pub use cache::CacheQueryStatus;pub use cache::ContainerdCacheQuery;pub use cache::DockerCacheQuery;pub use cache::NativeCacheOwner;pub use cache::NativeCacheRecord;pub use cache::NativeCacheRecordKind;pub use cache::NativeCacheStatus;pub use cache::NATIVE_CACHE_STATUS_SCHEMA_VERSION;pub use containerd::parse_effective_config;pub use containerd::parse_hosts_toml;pub use containerd::read_hosts_toml;pub use containerd::ContainerdAdapter;pub use containerd::ContainerdConfig;pub use containerd::ContainerdDiagnosticDetails;pub use containerd::ContainerdDiscovery;pub use containerd::ContainerdParseError;pub use containerd::ContainerdVersions;pub use containerd::LegacyRegistryWarning;pub use containerd::RegistryHost;pub use containerd::RegistryHostCapability;pub use containerd::RegistryHostTls;pub use containerd::RegistryHosts;pub use docker::DockerAdapter;pub use docker::DockerContext;pub use docker::DockerContextKind;pub use docker::DockerDaemonArchitecture;pub use docker::DockerDaemonOs;pub use docker::DockerDiagnosticDetails;pub use docker::DockerDiscovery;pub use docker::DockerInfo;pub use docker::DockerParseError;pub use docker::DockerVersion;pub use mirror::builtin_mirror_policy;pub use mirror::plan_buildkit_mirrors;pub use mirror::plan_containerd_mirrors;pub use mirror::plan_docker_mirrors;pub use mirror::BuildkitMirrorPlanRequest;pub use mirror::ContainerdMirrorPlanRequest;pub use mirror::DockerMirrorPlanRequest;pub use mirror::MirrorPlanError;pub use mirror::BUILTIN_DOCKER_HUB_MIRRORS;pub use mirror::DOCKER_HUB_BENCHMARK_IMAGE;pub use mirror::DOCKER_HUB_BENCHMARK_PLATFORM;pub use plan::ActivationRequirement;pub use plan::BuildkitTargetDriver;pub use plan::DockerTargetKind;pub use plan::EffectiveResolution;pub use plan::Fingerprint;pub use plan::MirrorChange;pub use plan::MirrorPlan;pub use plan::MirrorPlanBundle;pub use plan::MirrorPlanDraft;pub use plan::MirrorPlanTarget;pub use plan::NativeCandidateFingerprint;pub use plan::NativeConfigCandidate;pub use plan::NativeConfigFormat;pub use plan::NativeConfigSnapshot;pub use plan::NativeInputFingerprint;pub use plan::NativeInputState;pub use plan::PlanApplicability;pub use plan::PlanError;pub use plan::PlanWarning;pub use plan::PlannedCapability;pub use plan::PlannedMirrorEndpoint;pub use plan::RequiredPrivilege;pub use plan::ValidationStep;pub use plan::MAX_NATIVE_CONFIG_BYTES;pub use plan::MIRROR_PLAN_SCHEMA_VERSION;pub use reference::ImageReference;pub use reference::ImageSelector;pub use reference::ImageTag;pub use reference::OciDigest;pub use reference::OciPlatform;pub use reference::ReferenceError;pub use reference::RegistryName;pub use reference::RepositoryName;pub use registry::diagnose_registry;pub use registry::ApiCheck;pub use registry::ApiCheckStatus;pub use registry::BlobRangeCheck;pub use registry::BlobRangeStatus;pub use registry::ManifestCheck;pub use registry::ManifestCheckStatus;pub use registry::ManifestKind;pub use registry::MirrorCheck;pub use registry::MirrorCheckStatus;pub use registry::RegistryDiagnosticOptions;pub use registry::RegistryDiagnosticReport;pub use registry::RegistryDiagnosticStatus;pub use registry::RegistryEndpoint;pub use registry::RegistryLimits;pub use registry::RegistryMethod;pub use registry::RegistryProtocolError;pub use registry::RegistryRequest;pub use registry::RegistryResponse;pub use registry::RegistryTransport;pub use registry::RegistryTransportError;pub use registry::RegistryTransportFuture;pub use registry::ReqwestRegistryTransport;pub use registry::DEFAULT_BLOB_SAMPLE_BYTES;pub use registry::DEFAULT_MAX_BODY_BYTES;pub use registry::DEFAULT_MAX_MANIFEST_BYTES;pub use registry::DEFAULT_MAX_REDIRECTS;pub use registry::DEFAULT_MAX_REQUESTS;pub use registry::DEFAULT_REQUEST_TIMEOUT;pub use registry::DEFAULT_TOTAL_TIMEOUT;pub use registry::REGISTRY_DIAGNOSTIC_SCHEMA_VERSION;pub use redact::CommandPurpose;pub use redact::HeaderName;pub use redact::NativeProgram;pub use redact::RedactedCommand;pub use redact::RedactedHeader;pub use redact::RedactedOrigin;pub use redact::RedactedUrl;pub use redact::RedactedUrlError;pub use redact::RedactedValue;pub use redact::REDACTED;pub use report::Capability;pub use report::CapabilityStatus;pub use report::DiagnosticDetails;pub use report::DiagnosticEvidence;pub use report::DiagnosticReport;pub use report::DiagnosticStatus;pub use report::Endpoint;pub use report::EndpointScope;pub use report::EndpointTransport;pub use report::Privilege;pub use report::RuntimeKind;pub use report::DIAGNOSTIC_SCHEMA_VERSION;pub use runtime::ForegroundCommand;pub use runtime::ProbeCommand;pub use runtime::RuntimeAdapter;
Modules§
- apply
- Stale-checked, atomic application of one ready native mirror candidate.
- buildkit
- Read-only BuildKit discovery through the Docker Buildx CLI.
- cache
- Read-only, secret-safe native cache status queries.
- containerd
- Read-only containerd discovery and registry-host inspection.
- docker
- Read-only Docker Engine discovery.
- mirror
- Read-only semantic mirror planners for native container control planes.
- operations
- Safe construction of exactly-once native pull and prune operations.
- plan
- Versioned, deterministic contracts for read-only native mirror plans.
- redact
- Secret-safe evidence for container diagnostics.
- reference
- Strict, canonical OCI image-reference and platform values.
- registry
- Bounded, anonymous OCI Distribution registry diagnostics.
- report
- Stable, deterministic, secret-safe diagnostic output contracts.
- runtime
- Native-runtime discovery and foreground delegation contracts.