Module docker_cleanup 

Attempt-scoped Docker accounting for native Linux runners.

The journal is outside the disposable workspace. Only creations passing through the private proxy are attributed; absence of a container reference or an old creation date is never evidence that a volume is ours.

Modules

http

Small bounded HTTP/1 framing for local Docker JSON requests. Streaming endpoints are relayed by the proxy without buffering their payloads.

policy

What a job may ask of the Docker engine through its proxy.

Structs

Config

DockerCleanup

Intent

Journal

Listen

A proxy socket outside state/, for a runner running as another account.

Reply

Resource

ResourceDetail

SweepReport

Enums

Kind

Mode

Constants

ATTEMPT_LABEL

CONFIG_FILE

Docker accounting’s settings, in the configuration directory.

HOST_LABEL

OPERATION_LABEL

RETAIN_LABEL

Traits

Engine

Narrow Docker API port; cleanup never invokes global prune endpoints.

Functions

capture_created

Record only exact owned IDs and implicit anonymous mounts not supplied by the workflow. Called before releasing a successful create response.

clean_resources

Caller must prove the authoritative attempt is cleaned and the proxy gone. Docker’s unforced volume/network delete is the final atomic in-use check.

creation_intent

Return an intent only for disposable creations. Explicit named volumes and builder state are persistent by default, even if no container uses them now.

internal_proxy_entry

Handle the private companion invocation before the ordinary CLI. The only argument is a local journal path, never a request body or credential.

write_json