docker-engine 0.1.1

data/rbi/docker_engine/models/container.rbi

@@ -0,0 +1,4575 @@
+# typed: strong
+
+module DockerEngine
+  module Models
+    class Container < DockerEngine::Internal::Type::BaseModel
+      OrHash =
+        T.type_alias do
+          T.any(DockerEngine::Container, DockerEngine::Internal::AnyHash)
+        end
+
+      # The AppArmor profile set for the container.
+      sig { returns(T.nilable(String)) }
+      attr_reader :app_armor_profile
+
+      sig { params(app_armor_profile: String).void }
+      attr_writer :app_armor_profile
+
+      # The arguments to the command being run
+      sig { returns(T.nilable(T::Array[String])) }
+      attr_reader :args
+
+      sig { params(args: T::Array[String]).void }
+      attr_writer :args
+
+      # Configuration for a container that is portable between hosts.
+      sig { returns(T.nilable(DockerEngine::Config)) }
+      attr_reader :config
+
+      sig { params(config: DockerEngine::Config::OrHash).void }
+      attr_writer :config
+
+      # Date and time at which the container was created, formatted in
+      # [RFC 3339](https://www.ietf.org/rfc/rfc3339.txt) format with nano-seconds.
+      sig { returns(T.nilable(String)) }
+      attr_accessor :created
+
+      # The storage-driver used for the container's filesystem (graph-driver or
+      # snapshotter).
+      sig { returns(T.nilable(String)) }
+      attr_reader :driver
+
+      sig { params(driver: String).void }
+      attr_writer :driver
+
+      # IDs of exec instances that are running in the container.
+      sig { returns(T.nilable(T::Array[String])) }
+      attr_accessor :exec_ids
+
+      # Information about the storage driver used to store the container's and image's
+      # filesystem.
+      sig { returns(T.nilable(DockerEngine::Container::GraphDriver)) }
+      attr_reader :graph_driver
+
+      sig do
+        params(graph_driver: DockerEngine::Container::GraphDriver::OrHash).void
+      end
+      attr_writer :graph_driver
+
+      # Container configuration that depends on the host we are running on
+      sig { returns(T.nilable(DockerEngine::Container::HostConfig)) }
+      attr_reader :host_config
+
+      sig do
+        params(host_config: DockerEngine::Container::HostConfig::OrHash).void
+      end
+      attr_writer :host_config
+
+      # Location of the `/etc/hostname` generated for the container on the host.
+      #
+      # This file is managed through the docker daemon, and should not be accessed or
+      # modified by other tools.
+      sig { returns(T.nilable(String)) }
+      attr_reader :hostname_path
+
+      sig { params(hostname_path: String).void }
+      attr_writer :hostname_path
+
+      # Location of the `/etc/hosts` generated for the container on the host.
+      #
+      # This file is managed through the docker daemon, and should not be accessed or
+      # modified by other tools.
+      sig { returns(T.nilable(String)) }
+      attr_reader :hosts_path
+
+      sig { params(hosts_path: String).void }
+      attr_writer :hosts_path
+
+      # The ID of this container as a 128-bit (64-character) hexadecimal string (32
+      # bytes).
+      sig { returns(T.nilable(String)) }
+      attr_reader :id
+
+      sig { params(id: String).void }
+      attr_writer :id
+
+      # The ID (digest) of the image that this container was created from.
+      sig { returns(T.nilable(String)) }
+      attr_reader :image
+
+      sig { params(image: String).void }
+      attr_writer :image
+
+      # A descriptor struct containing digest, media type, and size, as defined in the
+      # [OCI Content Descriptors Specification](https://github.com/opencontainers/image-spec/blob/v1.0.1/descriptor.md).
+      sig do
+        returns(T.nilable(DockerEngine::Container::ImageManifestDescriptor))
+      end
+      attr_reader :image_manifest_descriptor
+
+      sig do
+        params(
+          image_manifest_descriptor:
+            DockerEngine::Container::ImageManifestDescriptor::OrHash
+        ).void
+      end
+      attr_writer :image_manifest_descriptor
+
+      # Location of the file used to buffer the container's logs. Depending on the
+      # logging-driver used for the container, this field may be omitted.
+      #
+      # This file is managed through the docker daemon, and should not be accessed or
+      # modified by other tools.
+      sig { returns(T.nilable(String)) }
+      attr_accessor :log_path
+
+      # SELinux mount label set for the container.
+      sig { returns(T.nilable(String)) }
+      attr_reader :mount_label
+
+      sig { params(mount_label: String).void }
+      attr_writer :mount_label
+
+      # List of mounts used by the container.
+      sig { returns(T.nilable(T::Array[DockerEngine::Container::Mount])) }
+      attr_reader :mounts
+
+      sig do
+        params(mounts: T::Array[DockerEngine::Container::Mount::OrHash]).void
+      end
+      attr_writer :mounts
+
+      # The name associated with this container.
+      #
+      # For historic reasons, the name may be prefixed with a forward-slash (`/`).
+      sig { returns(T.nilable(String)) }
+      attr_reader :name
+
+      sig { params(name: String).void }
+      attr_writer :name
+
+      # NetworkSettings exposes the network settings in the API
+      sig { returns(T.nilable(DockerEngine::Container::NetworkSettings)) }
+      attr_reader :network_settings
+
+      sig do
+        params(
+          network_settings: DockerEngine::Container::NetworkSettings::OrHash
+        ).void
+      end
+      attr_writer :network_settings
+
+      # The path to the command being run
+      sig { returns(T.nilable(String)) }
+      attr_reader :path
+
+      sig { params(path: String).void }
+      attr_writer :path
+
+      # The platform (operating system) for which the container was created.
+      #
+      # This field was introduced for the experimental "LCOW" (Linux Containers On
+      # Windows) features, which has been removed. In most cases, this field is equal to
+      # the host's operating system (`linux` or `windows`).
+      sig { returns(T.nilable(String)) }
+      attr_reader :platform
+
+      sig { params(platform: String).void }
+      attr_writer :platform
+
+      # SELinux process label set for the container.
+      sig { returns(T.nilable(String)) }
+      attr_reader :process_label
+
+      sig { params(process_label: String).void }
+      attr_writer :process_label
+
+      # Location of the `/etc/resolv.conf` generated for the container on the host.
+      #
+      # This file is managed through the docker daemon, and should not be accessed or
+      # modified by other tools.
+      sig { returns(T.nilable(String)) }
+      attr_reader :resolv_conf_path
+
+      sig { params(resolv_conf_path: String).void }
+      attr_writer :resolv_conf_path
+
+      # Number of times the container was restarted since it was created, or since
+      # daemon was started.
+      sig { returns(T.nilable(Integer)) }
+      attr_reader :restart_count
+
+      sig { params(restart_count: Integer).void }
+      attr_writer :restart_count
+
+      # The total size of all files in the read-only layers from the image that the
+      # container uses. These layers can be shared between containers.
+      #
+      # This field is omitted by default, and only set when size is requested in the API
+      # request.
+      sig { returns(T.nilable(Integer)) }
+      attr_accessor :size_root_fs
+
+      # The size of files that have been created or changed by this container.
+      #
+      # This field is omitted by default, and only set when size is requested in the API
+      # request.
+      sig { returns(T.nilable(Integer)) }
+      attr_accessor :size_rw
+
+      # ContainerState stores container's running state. It's part of ContainerJSONBase
+      # and will be returned by the "inspect" command.
+      sig { returns(T.nilable(DockerEngine::Container::State)) }
+      attr_reader :state
+
+      sig do
+        params(state: T.nilable(DockerEngine::Container::State::OrHash)).void
+      end
+      attr_writer :state
+
+      # Information about the storage used by the container.
+      sig { returns(T.nilable(DockerEngine::Container::Storage)) }
+      attr_reader :storage
+
+      sig { params(storage: DockerEngine::Container::Storage::OrHash).void }
+      attr_writer :storage
+
+      sig do
+        params(
+          app_armor_profile: String,
+          args: T::Array[String],
+          config: DockerEngine::Config::OrHash,
+          created: T.nilable(String),
+          driver: String,
+          exec_ids: T.nilable(T::Array[String]),
+          graph_driver: DockerEngine::Container::GraphDriver::OrHash,
+          host_config: DockerEngine::Container::HostConfig::OrHash,
+          hostname_path: String,
+          hosts_path: String,
+          id: String,
+          image: String,
+          image_manifest_descriptor:
+            DockerEngine::Container::ImageManifestDescriptor::OrHash,
+          log_path: T.nilable(String),
+          mount_label: String,
+          mounts: T::Array[DockerEngine::Container::Mount::OrHash],
+          name: String,
+          network_settings: DockerEngine::Container::NetworkSettings::OrHash,
+          path: String,
+          platform: String,
+          process_label: String,
+          resolv_conf_path: String,
+          restart_count: Integer,
+          size_root_fs: T.nilable(Integer),
+          size_rw: T.nilable(Integer),
+          state: T.nilable(DockerEngine::Container::State::OrHash),
+          storage: DockerEngine::Container::Storage::OrHash
+        ).returns(T.attached_class)
+      end
+      def self.new(
+        # The AppArmor profile set for the container.
+        app_armor_profile: nil,
+        # The arguments to the command being run
+        args: nil,
+        # Configuration for a container that is portable between hosts.
+        config: nil,
+        # Date and time at which the container was created, formatted in
+        # [RFC 3339](https://www.ietf.org/rfc/rfc3339.txt) format with nano-seconds.
+        created: nil,
+        # The storage-driver used for the container's filesystem (graph-driver or
+        # snapshotter).
+        driver: nil,
+        # IDs of exec instances that are running in the container.
+        exec_ids: nil,
+        # Information about the storage driver used to store the container's and image's
+        # filesystem.
+        graph_driver: nil,
+        # Container configuration that depends on the host we are running on
+        host_config: nil,
+        # Location of the `/etc/hostname` generated for the container on the host.
+        #
+        # This file is managed through the docker daemon, and should not be accessed or
+        # modified by other tools.
+        hostname_path: nil,
+        # Location of the `/etc/hosts` generated for the container on the host.
+        #
+        # This file is managed through the docker daemon, and should not be accessed or
+        # modified by other tools.
+        hosts_path: nil,
+        # The ID of this container as a 128-bit (64-character) hexadecimal string (32
+        # bytes).
+        id: nil,
+        # The ID (digest) of the image that this container was created from.
+        image: nil,
+        # A descriptor struct containing digest, media type, and size, as defined in the
+        # [OCI Content Descriptors Specification](https://github.com/opencontainers/image-spec/blob/v1.0.1/descriptor.md).
+        image_manifest_descriptor: nil,
+        # Location of the file used to buffer the container's logs. Depending on the
+        # logging-driver used for the container, this field may be omitted.
+        #
+        # This file is managed through the docker daemon, and should not be accessed or
+        # modified by other tools.
+        log_path: nil,
+        # SELinux mount label set for the container.
+        mount_label: nil,
+        # List of mounts used by the container.
+        mounts: nil,
+        # The name associated with this container.
+        #
+        # For historic reasons, the name may be prefixed with a forward-slash (`/`).
+        name: nil,
+        # NetworkSettings exposes the network settings in the API
+        network_settings: nil,
+        # The path to the command being run
+        path: nil,
+        # The platform (operating system) for which the container was created.
+        #
+        # This field was introduced for the experimental "LCOW" (Linux Containers On
+        # Windows) features, which has been removed. In most cases, this field is equal to
+        # the host's operating system (`linux` or `windows`).
+        platform: nil,
+        # SELinux process label set for the container.
+        process_label: nil,
+        # Location of the `/etc/resolv.conf` generated for the container on the host.
+        #
+        # This file is managed through the docker daemon, and should not be accessed or
+        # modified by other tools.
+        resolv_conf_path: nil,
+        # Number of times the container was restarted since it was created, or since
+        # daemon was started.
+        restart_count: nil,
+        # The total size of all files in the read-only layers from the image that the
+        # container uses. These layers can be shared between containers.
+        #
+        # This field is omitted by default, and only set when size is requested in the API
+        # request.
+        size_root_fs: nil,
+        # The size of files that have been created or changed by this container.
+        #
+        # This field is omitted by default, and only set when size is requested in the API
+        # request.
+        size_rw: nil,
+        # ContainerState stores container's running state. It's part of ContainerJSONBase
+        # and will be returned by the "inspect" command.
+        state: nil,
+        # Information about the storage used by the container.
+        storage: nil
+      )
+      end
+
+      sig do
+        override.returns(
+          {
+            app_armor_profile: String,
+            args: T::Array[String],
+            config: DockerEngine::Config,
+            created: T.nilable(String),
+            driver: String,
+            exec_ids: T.nilable(T::Array[String]),
+            graph_driver: DockerEngine::Container::GraphDriver,
+            host_config: DockerEngine::Container::HostConfig,
+            hostname_path: String,
+            hosts_path: String,
+            id: String,
+            image: String,
+            image_manifest_descriptor:
+              DockerEngine::Container::ImageManifestDescriptor,
+            log_path: T.nilable(String),
+            mount_label: String,
+            mounts: T::Array[DockerEngine::Container::Mount],
+            name: String,
+            network_settings: DockerEngine::Container::NetworkSettings,
+            path: String,
+            platform: String,
+            process_label: String,
+            resolv_conf_path: String,
+            restart_count: Integer,
+            size_root_fs: T.nilable(Integer),
+            size_rw: T.nilable(Integer),
+            state: T.nilable(DockerEngine::Container::State),
+            storage: DockerEngine::Container::Storage
+          }
+        )
+      end
+      def to_hash
+      end
+
+      class GraphDriver < DockerEngine::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              DockerEngine::Container::GraphDriver,
+              DockerEngine::Internal::AnyHash
+            )
+          end
+
+        # Low-level storage metadata, provided as key/value pairs.
+        #
+        # This information is driver-specific, and depends on the storage-driver in use,
+        # and should be used for informational purposes only.
+        sig { returns(T::Hash[Symbol, String]) }
+        attr_accessor :data
+
+        # Name of the storage driver.
+        sig { returns(String) }
+        attr_accessor :name
+
+        # Information about the storage driver used to store the container's and image's
+        # filesystem.
+        sig do
+          params(data: T::Hash[Symbol, String], name: String).returns(
+            T.attached_class
+          )
+        end
+        def self.new(
+          # Low-level storage metadata, provided as key/value pairs.
+          #
+          # This information is driver-specific, and depends on the storage-driver in use,
+          # and should be used for informational purposes only.
+          data:,
+          # Name of the storage driver.
+          name:
+        )
+        end
+
+        sig do
+          override.returns({ data: T::Hash[Symbol, String], name: String })
+        end
+        def to_hash
+        end
+      end
+
+      class HostConfig < DockerEngine::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              DockerEngine::Container::HostConfig,
+              DockerEngine::Internal::AnyHash
+            )
+          end
+
+        # Arbitrary non-identifying metadata attached to container and provided to the
+        # runtime when the container is started.
+        sig { returns(T.nilable(T::Hash[Symbol, String])) }
+        attr_reader :annotations
+
+        sig { params(annotations: T::Hash[Symbol, String]).void }
+        attr_writer :annotations
+
+        # Automatically remove the container when the container's process exits. This has
+        # no effect if `RestartPolicy` is set.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :auto_remove
+
+        sig { params(auto_remove: T::Boolean).void }
+        attr_writer :auto_remove
+
+        # A list of volume bindings for this container. Each volume binding is a string in
+        # one of these forms:
+        #
+        # - `host-src:container-dest[:options]` to bind-mount a host path into the
+        #   container. Both `host-src`, and `container-dest` must be an _absolute_ path.
+        # - `volume-name:container-dest[:options]` to bind-mount a volume managed by a
+        #   volume driver into the container. `container-dest` must be an _absolute_ path.
+        #
+        # `options` is an optional, comma-delimited list of:
+        #
+        # - `nocopy` disables automatic copying of data from the container path to the
+        #   volume. The `nocopy` flag only applies to named volumes.
+        # - `[ro|rw]` mounts a volume read-only or read-write, respectively. If omitted or
+        #   set to `rw`, volumes are mounted read-write.
+        # - `[z|Z]` applies SELinux labels to allow or deny multiple containers to read
+        #   and write to the same volume.
+        #   - `z`: a _shared_ content label is applied to the content. This label
+        #     indicates that multiple containers can share the volume content, for both
+        #     reading and writing.
+        #   - `Z`: a _private unshared_ label is applied to the content. This label
+        #     indicates that only the current container can use a private volume. Labeling
+        #     systems such as SELinux require proper labels to be placed on volume content
+        #     that is mounted into a container. Without a label, the security system can
+        #     prevent a container's processes from using the content. By default, the
+        #     labels set by the host operating system are not modified.
+        # - `[[r]shared|[r]slave|[r]private]` specifies mount
+        #   [propagation behavior](https://www.kernel.org/doc/Documentation/filesystems/sharedsubtree.txt).
+        #   This only applies to bind-mounted volumes, not internal volumes or named
+        #   volumes. Mount propagation requires the source mount point (the location where
+        #   the source directory is mounted in the host operating system) to have the
+        #   correct propagation properties. For shared volumes, the source mount point
+        #   must be set to `shared`. For slave volumes, the mount must be set to either
+        #   `shared` or `slave`.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :binds
+
+        sig { params(binds: T::Array[String]).void }
+        attr_writer :binds
+
+        # Limit read rate (bytes per second) from a device, in the form:
+        #
+        # ```
+        # [{"Path": "device_path", "Rate": rate}]
+        # ```
+        sig do
+          returns(
+            T.nilable(
+              T::Array[DockerEngine::Container::HostConfig::BlkioDeviceReadBp]
+            )
+          )
+        end
+        attr_reader :blkio_device_read_bps
+
+        sig do
+          params(
+            blkio_device_read_bps:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceReadBp::OrHash
+              ]
+          ).void
+        end
+        attr_writer :blkio_device_read_bps
+
+        # Limit read rate (IO per second) from a device, in the form:
+        #
+        # ```
+        # [{"Path": "device_path", "Rate": rate}]
+        # ```
+        sig do
+          returns(
+            T.nilable(
+              T::Array[DockerEngine::Container::HostConfig::BlkioDeviceReadIOp]
+            )
+          )
+        end
+        attr_reader :blkio_device_read_i_ops
+
+        sig do
+          params(
+            blkio_device_read_i_ops:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceReadIOp::OrHash
+              ]
+          ).void
+        end
+        attr_writer :blkio_device_read_i_ops
+
+        # Limit write rate (bytes per second) to a device, in the form:
+        #
+        # ```
+        # [{"Path": "device_path", "Rate": rate}]
+        # ```
+        sig do
+          returns(
+            T.nilable(
+              T::Array[DockerEngine::Container::HostConfig::BlkioDeviceWriteBp]
+            )
+          )
+        end
+        attr_reader :blkio_device_write_bps
+
+        sig do
+          params(
+            blkio_device_write_bps:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceWriteBp::OrHash
+              ]
+          ).void
+        end
+        attr_writer :blkio_device_write_bps
+
+        # Limit write rate (IO per second) to a device, in the form:
+        #
+        # ```
+        # [{"Path": "device_path", "Rate": rate}]
+        # ```
+        sig do
+          returns(
+            T.nilable(
+              T::Array[DockerEngine::Container::HostConfig::BlkioDeviceWriteIOp]
+            )
+          )
+        end
+        attr_reader :blkio_device_write_i_ops
+
+        sig do
+          params(
+            blkio_device_write_i_ops:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceWriteIOp::OrHash
+              ]
+          ).void
+        end
+        attr_writer :blkio_device_write_i_ops
+
+        # Block IO weight (relative weight).
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :blkio_weight
+
+        sig { params(blkio_weight: Integer).void }
+        attr_writer :blkio_weight
+
+        # Block IO weight (relative device weight) in the form:
+        #
+        # ```
+        # [{"Path": "device_path", "Weight": weight}]
+        # ```
+        sig do
+          returns(
+            T.nilable(
+              T::Array[DockerEngine::Container::HostConfig::BlkioWeightDevice]
+            )
+          )
+        end
+        attr_reader :blkio_weight_device
+
+        sig do
+          params(
+            blkio_weight_device:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioWeightDevice::OrHash
+              ]
+          ).void
+        end
+        attr_writer :blkio_weight_device
+
+        # A list of kernel capabilities to add to the container. Conflicts with option
+        # 'Capabilities'.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :cap_add
+
+        sig { params(cap_add: T::Array[String]).void }
+        attr_writer :cap_add
+
+        # A list of kernel capabilities to drop from the container. Conflicts with option
+        # 'Capabilities'.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :cap_drop
+
+        sig { params(cap_drop: T::Array[String]).void }
+        attr_writer :cap_drop
+
+        # Cgroup to use for the container.
+        sig { returns(T.nilable(String)) }
+        attr_reader :cgroup
+
+        sig { params(cgroup: String).void }
+        attr_writer :cgroup
+
+        # cgroup namespace mode for the container. Possible values are:
+        #
+        # - `"private"`: the container runs in its own private cgroup namespace
+        # - `"host"`: use the host system's cgroup namespace
+        #
+        # If not specified, the daemon default is used, which can either be `"private"` or
+        # `"host"`, depending on daemon version, kernel support and configuration.
+        sig do
+          returns(
+            T.nilable(
+              DockerEngine::Container::HostConfig::CgroupnsMode::TaggedSymbol
+            )
+          )
+        end
+        attr_reader :cgroupns_mode
+
+        sig do
+          params(
+            cgroupns_mode:
+              DockerEngine::Container::HostConfig::CgroupnsMode::OrSymbol
+          ).void
+        end
+        attr_writer :cgroupns_mode
+
+        # Path to `cgroups` under which the container's `cgroup` is created. If the path
+        # is not absolute, the path is considered to be relative to the `cgroups` path of
+        # the init process. Cgroups are created if they do not already exist.
+        sig { returns(T.nilable(String)) }
+        attr_reader :cgroup_parent
+
+        sig { params(cgroup_parent: String).void }
+        attr_writer :cgroup_parent
+
+        # Initial console size, as an `[height, width]` array.
+        sig { returns(T.nilable(T::Array[Integer])) }
+        attr_accessor :console_size
+
+        # Path to a file where the container ID is written
+        sig { returns(T.nilable(String)) }
+        attr_reader :container_id_file
+
+        sig { params(container_id_file: String).void }
+        attr_writer :container_id_file
+
+        # The number of usable CPUs (Windows only).
+        #
+        # On Windows Server containers, the processor resource controls are mutually
+        # exclusive. The order of precedence is `CPUCount` first, then `CPUShares`, and
+        # `CPUPercent` last.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :cpu_count
+
+        sig { params(cpu_count: Integer).void }
+        attr_writer :cpu_count
+
+        # The usable percentage of the available CPUs (Windows only).
+        #
+        # On Windows Server containers, the processor resource controls are mutually
+        # exclusive. The order of precedence is `CPUCount` first, then `CPUShares`, and
+        # `CPUPercent` last.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :cpu_percent
+
+        sig { params(cpu_percent: Integer).void }
+        attr_writer :cpu_percent
+
+        # The length of a CPU period in microseconds.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :cpu_period
+
+        sig { params(cpu_period: Integer).void }
+        attr_writer :cpu_period
+
+        # Microseconds of CPU time that the container can get in a CPU period.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :cpu_quota
+
+        sig { params(cpu_quota: Integer).void }
+        attr_writer :cpu_quota
+
+        # The length of a CPU real-time period in microseconds. Set to 0 to allocate no
+        # time allocated to real-time tasks.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :cpu_realtime_period
+
+        sig { params(cpu_realtime_period: Integer).void }
+        attr_writer :cpu_realtime_period
+
+        # The length of a CPU real-time runtime in microseconds. Set to 0 to allocate no
+        # time allocated to real-time tasks.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :cpu_realtime_runtime
+
+        sig { params(cpu_realtime_runtime: Integer).void }
+        attr_writer :cpu_realtime_runtime
+
+        # CPUs in which to allow execution (e.g., `0-3`, `0,1`).
+        sig { returns(T.nilable(String)) }
+        attr_reader :cpuset_cpus
+
+        sig { params(cpuset_cpus: String).void }
+        attr_writer :cpuset_cpus
+
+        # Memory nodes (MEMs) in which to allow execution (0-3, 0,1). Only effective on
+        # NUMA systems.
+        sig { returns(T.nilable(String)) }
+        attr_reader :cpuset_mems
+
+        sig { params(cpuset_mems: String).void }
+        attr_writer :cpuset_mems
+
+        # An integer value representing this container's relative CPU weight versus other
+        # containers.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :cpu_shares
+
+        sig { params(cpu_shares: Integer).void }
+        attr_writer :cpu_shares
+
+        # a list of cgroup rules to apply to the container
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :device_cgroup_rules
+
+        sig { params(device_cgroup_rules: T::Array[String]).void }
+        attr_writer :device_cgroup_rules
+
+        # A list of requests for devices to be sent to device drivers.
+        sig do
+          returns(
+            T.nilable(
+              T::Array[DockerEngine::Container::HostConfig::DeviceRequest]
+            )
+          )
+        end
+        attr_reader :device_requests
+
+        sig do
+          params(
+            device_requests:
+              T::Array[
+                DockerEngine::Container::HostConfig::DeviceRequest::OrHash
+              ]
+          ).void
+        end
+        attr_writer :device_requests
+
+        # A list of devices to add to the container.
+        sig do
+          returns(
+            T.nilable(T::Array[DockerEngine::Container::HostConfig::Device])
+          )
+        end
+        attr_reader :devices
+
+        sig do
+          params(
+            devices:
+              T::Array[DockerEngine::Container::HostConfig::Device::OrHash]
+          ).void
+        end
+        attr_writer :devices
+
+        # A list of DNS servers for the container to use.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :dns
+
+        sig { params(dns: T::Array[String]).void }
+        attr_writer :dns
+
+        # A list of DNS options.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :dns_options
+
+        sig { params(dns_options: T::Array[String]).void }
+        attr_writer :dns_options
+
+        # A list of DNS search domains.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :dns_search
+
+        sig { params(dns_search: T::Array[String]).void }
+        attr_writer :dns_search
+
+        # A list of hostnames/IP mappings to add to the container's `/etc/hosts` file.
+        # Specified in the form `["hostname:IP"]`.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :extra_hosts
+
+        sig { params(extra_hosts: T::Array[String]).void }
+        attr_writer :extra_hosts
+
+        # A list of additional groups that the container process will run as.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :group_add
+
+        sig { params(group_add: T::Array[String]).void }
+        attr_writer :group_add
+
+        # Run an init inside the container that forwards signals and reaps processes. This
+        # field is omitted if empty, and the default (as configured on the daemon) is
+        # used.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_accessor :init
+
+        # Maximum IO in bytes per second for the container system drive (Windows only).
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :io_maximum_bandwidth
+
+        sig { params(io_maximum_bandwidth: Integer).void }
+        attr_writer :io_maximum_bandwidth
+
+        # Maximum IOps for the container system drive (Windows only)
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :io_maximum_i_ops
+
+        sig { params(io_maximum_i_ops: Integer).void }
+        attr_writer :io_maximum_i_ops
+
+        # IPC sharing mode for the container. Possible values are:
+        #
+        # - `"none"`: own private IPC namespace, with /dev/shm not mounted
+        # - `"private"`: own private IPC namespace
+        # - `"shareable"`: own private IPC namespace, with a possibility to share it with
+        #   other containers
+        # - `"container:<name|id>"`: join another (shareable) container's IPC namespace
+        # - `"host"`: use the host system's IPC namespace
+        #
+        # If not specified, daemon default is used, which can either be `"private"` or
+        # `"shareable"`, depending on daemon version and configuration.
+        sig { returns(T.nilable(String)) }
+        attr_reader :ipc_mode
+
+        sig { params(ipc_mode: String).void }
+        attr_writer :ipc_mode
+
+        # Isolation technology of the container. (Windows only)
+        sig do
+          returns(
+            T.nilable(
+              DockerEngine::Container::HostConfig::Isolation::TaggedSymbol
+            )
+          )
+        end
+        attr_reader :isolation
+
+        sig do
+          params(
+            isolation: DockerEngine::Container::HostConfig::Isolation::OrSymbol
+          ).void
+        end
+        attr_writer :isolation
+
+        # A list of links for the container in the form `container_name:alias`.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :links
+
+        sig { params(links: T::Array[String]).void }
+        attr_writer :links
+
+        # The logging configuration for this container
+        sig do
+          returns(T.nilable(DockerEngine::Container::HostConfig::LogConfig))
+        end
+        attr_reader :log_config
+
+        sig do
+          params(
+            log_config: DockerEngine::Container::HostConfig::LogConfig::OrHash
+          ).void
+        end
+        attr_writer :log_config
+
+        # The list of paths to be masked inside the container (this overrides the default
+        # set of paths).
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :masked_paths
+
+        sig { params(masked_paths: T::Array[String]).void }
+        attr_writer :masked_paths
+
+        # Memory limit in bytes.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :memory
+
+        sig { params(memory: Integer).void }
+        attr_writer :memory
+
+        # Memory soft limit in bytes.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :memory_reservation
+
+        sig { params(memory_reservation: Integer).void }
+        attr_writer :memory_reservation
+
+        # Total memory limit (memory + swap). Set as `-1` to enable unlimited swap.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :memory_swap
+
+        sig { params(memory_swap: Integer).void }
+        attr_writer :memory_swap
+
+        # Tune a container's memory swappiness behavior. Accepts an integer between 0
+        # and 100.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :memory_swappiness
+
+        sig { params(memory_swappiness: Integer).void }
+        attr_writer :memory_swappiness
+
+        # Specification for mounts to be added to the container.
+        sig do
+          returns(
+            T.nilable(T::Array[DockerEngine::Container::HostConfig::Mount])
+          )
+        end
+        attr_reader :mounts
+
+        sig do
+          params(
+            mounts: T::Array[DockerEngine::Container::HostConfig::Mount::OrHash]
+          ).void
+        end
+        attr_writer :mounts
+
+        # CPU quota in units of 10<sup>-9</sup> CPUs.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :nano_cpus
+
+        sig { params(nano_cpus: Integer).void }
+        attr_writer :nano_cpus
+
+        # Network mode to use for this container. Supported standard values are: `bridge`,
+        # `host`, `none`, and `container:<name|id>`. Any other value is taken as a custom
+        # network's name to which this container should connect to.
+        sig { returns(T.nilable(String)) }
+        attr_reader :network_mode
+
+        sig { params(network_mode: String).void }
+        attr_writer :network_mode
+
+        # Disable OOM Killer for the container.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :oom_kill_disable
+
+        sig { params(oom_kill_disable: T::Boolean).void }
+        attr_writer :oom_kill_disable
+
+        # An integer value containing the score given to the container in order to tune
+        # OOM killer preferences.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :oom_score_adj
+
+        sig { params(oom_score_adj: Integer).void }
+        attr_writer :oom_score_adj
+
+        # Set the PID (Process) Namespace mode for the container. It can be either:
+        #
+        # - `"container:<name|id>"`: joins another container's PID namespace
+        # - `"host"`: use the host's PID namespace inside the container
+        sig { returns(T.nilable(String)) }
+        attr_reader :pid_mode
+
+        sig { params(pid_mode: String).void }
+        attr_writer :pid_mode
+
+        # Tune a container's PIDs limit. Set `0` or `-1` for unlimited, or `null` to not
+        # change.
+        sig { returns(T.nilable(Integer)) }
+        attr_accessor :pids_limit
+
+        # PortMap describes the mapping of container ports to host ports, using the
+        # container's port-number and protocol as key in the format `<port>/<protocol>`,
+        # for example, `80/udp`.
+        #
+        # If a container's port is mapped for multiple protocols, separate entries are
+        # added to the mapping table.
+        sig do
+          returns(
+            T.nilable(
+              T::Hash[
+                Symbol,
+                T::Array[DockerEngine::Container::HostConfig::PortBinding]
+              ]
+            )
+          )
+        end
+        attr_reader :port_bindings
+
+        sig do
+          params(
+            port_bindings:
+              T::Hash[
+                Symbol,
+                T::Array[
+                  DockerEngine::Container::HostConfig::PortBinding::OrHash
+                ]
+              ]
+          ).void
+        end
+        attr_writer :port_bindings
+
+        # Gives the container full access to the host.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :privileged
+
+        sig { params(privileged: T::Boolean).void }
+        attr_writer :privileged
+
+        # Allocates an ephemeral host port for all of a container's exposed ports.
+        #
+        # Ports are de-allocated when the container stops and allocated when the container
+        # starts. The allocated port might be changed when restarting the container.
+        #
+        # The port is selected from the ephemeral port range that depends on the kernel.
+        # For example, on Linux the range is defined by
+        # `/proc/sys/net/ipv4/ip_local_port_range`.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :publish_all_ports
+
+        sig { params(publish_all_ports: T::Boolean).void }
+        attr_writer :publish_all_ports
+
+        # The list of paths to be set as read-only inside the container (this overrides
+        # the default set of paths).
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :readonly_paths
+
+        sig { params(readonly_paths: T::Array[String]).void }
+        attr_writer :readonly_paths
+
+        # Mount the container's root filesystem as read only.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :readonly_rootfs
+
+        sig { params(readonly_rootfs: T::Boolean).void }
+        attr_writer :readonly_rootfs
+
+        # The behavior to apply when the container exits. The default is not to restart.
+        #
+        # An ever increasing delay (double the previous delay, starting at 100ms) is added
+        # before each restart to prevent flooding the server.
+        sig do
+          returns(T.nilable(DockerEngine::Container::HostConfig::RestartPolicy))
+        end
+        attr_reader :restart_policy
+
+        sig do
+          params(
+            restart_policy:
+              DockerEngine::Container::HostConfig::RestartPolicy::OrHash
+          ).void
+        end
+        attr_writer :restart_policy
+
+        # Runtime to use with this container.
+        sig { returns(T.nilable(String)) }
+        attr_accessor :runtime
+
+        # A list of string values to customize labels for MLS systems, such as SELinux.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :security_opt
+
+        sig { params(security_opt: T::Array[String]).void }
+        attr_writer :security_opt
+
+        # Size of `/dev/shm` in bytes. If omitted, the system uses 64MB.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :shm_size
+
+        sig { params(shm_size: Integer).void }
+        attr_writer :shm_size
+
+        # Storage driver options for this container, in the form `{"size": "120G"}`.
+        sig { returns(T.nilable(T::Hash[Symbol, String])) }
+        attr_reader :storage_opt
+
+        sig { params(storage_opt: T::Hash[Symbol, String]).void }
+        attr_writer :storage_opt
+
+        # A list of kernel parameters (sysctls) to set in the container.
+        #
+        # This field is omitted if not set.
+        sig { returns(T.nilable(T::Hash[Symbol, String])) }
+        attr_accessor :sysctls
+
+        # A map of container directories which should be replaced by tmpfs mounts, and
+        # their corresponding mount options. For example:
+        #
+        # ```
+        # { "/run": "rw,noexec,nosuid,size=65536k" }
+        # ```
+        sig { returns(T.nilable(T::Hash[Symbol, String])) }
+        attr_reader :tmpfs
+
+        sig { params(tmpfs: T::Hash[Symbol, String]).void }
+        attr_writer :tmpfs
+
+        # A list of resource limits to set in the container. For example:
+        #
+        # ```
+        # {"Name": "nofile", "Soft": 1024, "Hard": 2048}
+        # ```
+        sig do
+          returns(
+            T.nilable(T::Array[DockerEngine::Container::HostConfig::Ulimit])
+          )
+        end
+        attr_reader :ulimits
+
+        sig do
+          params(
+            ulimits:
+              T::Array[DockerEngine::Container::HostConfig::Ulimit::OrHash]
+          ).void
+        end
+        attr_writer :ulimits
+
+        # Sets the usernamespace mode for the container when usernamespace remapping
+        # option is enabled.
+        sig { returns(T.nilable(String)) }
+        attr_reader :userns_mode
+
+        sig { params(userns_mode: String).void }
+        attr_writer :userns_mode
+
+        # UTS namespace to use for the container.
+        sig { returns(T.nilable(String)) }
+        attr_reader :uts_mode
+
+        sig { params(uts_mode: String).void }
+        attr_writer :uts_mode
+
+        # Driver that this container uses to mount volumes.
+        sig { returns(T.nilable(String)) }
+        attr_reader :volume_driver
+
+        sig { params(volume_driver: String).void }
+        attr_writer :volume_driver
+
+        # A list of volumes to inherit from another container, specified in the form
+        # `<container name>[:<ro|rw>]`.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_reader :volumes_from
+
+        sig { params(volumes_from: T::Array[String]).void }
+        attr_writer :volumes_from
+
+        # Container configuration that depends on the host we are running on
+        sig do
+          params(
+            annotations: T::Hash[Symbol, String],
+            auto_remove: T::Boolean,
+            binds: T::Array[String],
+            blkio_device_read_bps:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceReadBp::OrHash
+              ],
+            blkio_device_read_i_ops:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceReadIOp::OrHash
+              ],
+            blkio_device_write_bps:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceWriteBp::OrHash
+              ],
+            blkio_device_write_i_ops:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioDeviceWriteIOp::OrHash
+              ],
+            blkio_weight: Integer,
+            blkio_weight_device:
+              T::Array[
+                DockerEngine::Container::HostConfig::BlkioWeightDevice::OrHash
+              ],
+            cap_add: T::Array[String],
+            cap_drop: T::Array[String],
+            cgroup: String,
+            cgroupns_mode:
+              DockerEngine::Container::HostConfig::CgroupnsMode::OrSymbol,
+            cgroup_parent: String,
+            console_size: T.nilable(T::Array[Integer]),
+            container_id_file: String,
+            cpu_count: Integer,
+            cpu_percent: Integer,
+            cpu_period: Integer,
+            cpu_quota: Integer,
+            cpu_realtime_period: Integer,
+            cpu_realtime_runtime: Integer,
+            cpuset_cpus: String,
+            cpuset_mems: String,
+            cpu_shares: Integer,
+            device_cgroup_rules: T::Array[String],
+            device_requests:
+              T::Array[
+                DockerEngine::Container::HostConfig::DeviceRequest::OrHash
+              ],
+            devices:
+              T::Array[DockerEngine::Container::HostConfig::Device::OrHash],
+            dns: T::Array[String],
+            dns_options: T::Array[String],
+            dns_search: T::Array[String],
+            extra_hosts: T::Array[String],
+            group_add: T::Array[String],
+            init: T.nilable(T::Boolean),
+            io_maximum_bandwidth: Integer,
+            io_maximum_i_ops: Integer,
+            ipc_mode: String,
+            isolation: DockerEngine::Container::HostConfig::Isolation::OrSymbol,
+            links: T::Array[String],
+            log_config: DockerEngine::Container::HostConfig::LogConfig::OrHash,
+            masked_paths: T::Array[String],
+            memory: Integer,
+            memory_reservation: Integer,
+            memory_swap: Integer,
+            memory_swappiness: Integer,
+            mounts:
+              T::Array[DockerEngine::Container::HostConfig::Mount::OrHash],
+            nano_cpus: Integer,
+            network_mode: String,
+            oom_kill_disable: T::Boolean,
+            oom_score_adj: Integer,
+            pid_mode: String,
+            pids_limit: T.nilable(Integer),
+            port_bindings:
+              T::Hash[
+                Symbol,
+                T::Array[
+                  DockerEngine::Container::HostConfig::PortBinding::OrHash
+                ]
+              ],
+            privileged: T::Boolean,
+            publish_all_ports: T::Boolean,
+            readonly_paths: T::Array[String],
+            readonly_rootfs: T::Boolean,
+            restart_policy:
+              DockerEngine::Container::HostConfig::RestartPolicy::OrHash,
+            runtime: T.nilable(String),
+            security_opt: T::Array[String],
+            shm_size: Integer,
+            storage_opt: T::Hash[Symbol, String],
+            sysctls: T.nilable(T::Hash[Symbol, String]),
+            tmpfs: T::Hash[Symbol, String],
+            ulimits:
+              T::Array[DockerEngine::Container::HostConfig::Ulimit::OrHash],
+            userns_mode: String,
+            uts_mode: String,
+            volume_driver: String,
+            volumes_from: T::Array[String]
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # Arbitrary non-identifying metadata attached to container and provided to the
+          # runtime when the container is started.
+          annotations: nil,
+          # Automatically remove the container when the container's process exits. This has
+          # no effect if `RestartPolicy` is set.
+          auto_remove: nil,
+          # A list of volume bindings for this container. Each volume binding is a string in
+          # one of these forms:
+          #
+          # - `host-src:container-dest[:options]` to bind-mount a host path into the
+          #   container. Both `host-src`, and `container-dest` must be an _absolute_ path.
+          # - `volume-name:container-dest[:options]` to bind-mount a volume managed by a
+          #   volume driver into the container. `container-dest` must be an _absolute_ path.
+          #
+          # `options` is an optional, comma-delimited list of:
+          #
+          # - `nocopy` disables automatic copying of data from the container path to the
+          #   volume. The `nocopy` flag only applies to named volumes.
+          # - `[ro|rw]` mounts a volume read-only or read-write, respectively. If omitted or
+          #   set to `rw`, volumes are mounted read-write.
+          # - `[z|Z]` applies SELinux labels to allow or deny multiple containers to read
+          #   and write to the same volume.
+          #   - `z`: a _shared_ content label is applied to the content. This label
+          #     indicates that multiple containers can share the volume content, for both
+          #     reading and writing.
+          #   - `Z`: a _private unshared_ label is applied to the content. This label
+          #     indicates that only the current container can use a private volume. Labeling
+          #     systems such as SELinux require proper labels to be placed on volume content
+          #     that is mounted into a container. Without a label, the security system can
+          #     prevent a container's processes from using the content. By default, the
+          #     labels set by the host operating system are not modified.
+          # - `[[r]shared|[r]slave|[r]private]` specifies mount
+          #   [propagation behavior](https://www.kernel.org/doc/Documentation/filesystems/sharedsubtree.txt).
+          #   This only applies to bind-mounted volumes, not internal volumes or named
+          #   volumes. Mount propagation requires the source mount point (the location where
+          #   the source directory is mounted in the host operating system) to have the
+          #   correct propagation properties. For shared volumes, the source mount point
+          #   must be set to `shared`. For slave volumes, the mount must be set to either
+          #   `shared` or `slave`.
+          binds: nil,
+          # Limit read rate (bytes per second) from a device, in the form:
+          #
+          # ```
+          # [{"Path": "device_path", "Rate": rate}]
+          # ```
+          blkio_device_read_bps: nil,
+          # Limit read rate (IO per second) from a device, in the form:
+          #
+          # ```
+          # [{"Path": "device_path", "Rate": rate}]
+          # ```
+          blkio_device_read_i_ops: nil,
+          # Limit write rate (bytes per second) to a device, in the form:
+          #
+          # ```
+          # [{"Path": "device_path", "Rate": rate}]
+          # ```
+          blkio_device_write_bps: nil,
+          # Limit write rate (IO per second) to a device, in the form:
+          #
+          # ```
+          # [{"Path": "device_path", "Rate": rate}]
+          # ```
+          blkio_device_write_i_ops: nil,
+          # Block IO weight (relative weight).
+          blkio_weight: nil,
+          # Block IO weight (relative device weight) in the form:
+          #
+          # ```
+          # [{"Path": "device_path", "Weight": weight}]
+          # ```
+          blkio_weight_device: nil,
+          # A list of kernel capabilities to add to the container. Conflicts with option
+          # 'Capabilities'.
+          cap_add: nil,
+          # A list of kernel capabilities to drop from the container. Conflicts with option
+          # 'Capabilities'.
+          cap_drop: nil,
+          # Cgroup to use for the container.
+          cgroup: nil,
+          # cgroup namespace mode for the container. Possible values are:
+          #
+          # - `"private"`: the container runs in its own private cgroup namespace
+          # - `"host"`: use the host system's cgroup namespace
+          #
+          # If not specified, the daemon default is used, which can either be `"private"` or
+          # `"host"`, depending on daemon version, kernel support and configuration.
+          cgroupns_mode: nil,
+          # Path to `cgroups` under which the container's `cgroup` is created. If the path
+          # is not absolute, the path is considered to be relative to the `cgroups` path of
+          # the init process. Cgroups are created if they do not already exist.
+          cgroup_parent: nil,
+          # Initial console size, as an `[height, width]` array.
+          console_size: nil,
+          # Path to a file where the container ID is written
+          container_id_file: nil,
+          # The number of usable CPUs (Windows only).
+          #
+          # On Windows Server containers, the processor resource controls are mutually
+          # exclusive. The order of precedence is `CPUCount` first, then `CPUShares`, and
+          # `CPUPercent` last.
+          cpu_count: nil,
+          # The usable percentage of the available CPUs (Windows only).
+          #
+          # On Windows Server containers, the processor resource controls are mutually
+          # exclusive. The order of precedence is `CPUCount` first, then `CPUShares`, and
+          # `CPUPercent` last.
+          cpu_percent: nil,
+          # The length of a CPU period in microseconds.
+          cpu_period: nil,
+          # Microseconds of CPU time that the container can get in a CPU period.
+          cpu_quota: nil,
+          # The length of a CPU real-time period in microseconds. Set to 0 to allocate no
+          # time allocated to real-time tasks.
+          cpu_realtime_period: nil,
+          # The length of a CPU real-time runtime in microseconds. Set to 0 to allocate no
+          # time allocated to real-time tasks.
+          cpu_realtime_runtime: nil,
+          # CPUs in which to allow execution (e.g., `0-3`, `0,1`).
+          cpuset_cpus: nil,
+          # Memory nodes (MEMs) in which to allow execution (0-3, 0,1). Only effective on
+          # NUMA systems.
+          cpuset_mems: nil,
+          # An integer value representing this container's relative CPU weight versus other
+          # containers.
+          cpu_shares: nil,
+          # a list of cgroup rules to apply to the container
+          device_cgroup_rules: nil,
+          # A list of requests for devices to be sent to device drivers.
+          device_requests: nil,
+          # A list of devices to add to the container.
+          devices: nil,
+          # A list of DNS servers for the container to use.
+          dns: nil,
+          # A list of DNS options.
+          dns_options: nil,
+          # A list of DNS search domains.
+          dns_search: nil,
+          # A list of hostnames/IP mappings to add to the container's `/etc/hosts` file.
+          # Specified in the form `["hostname:IP"]`.
+          extra_hosts: nil,
+          # A list of additional groups that the container process will run as.
+          group_add: nil,
+          # Run an init inside the container that forwards signals and reaps processes. This
+          # field is omitted if empty, and the default (as configured on the daemon) is
+          # used.
+          init: nil,
+          # Maximum IO in bytes per second for the container system drive (Windows only).
+          io_maximum_bandwidth: nil,
+          # Maximum IOps for the container system drive (Windows only)
+          io_maximum_i_ops: nil,
+          # IPC sharing mode for the container. Possible values are:
+          #
+          # - `"none"`: own private IPC namespace, with /dev/shm not mounted
+          # - `"private"`: own private IPC namespace
+          # - `"shareable"`: own private IPC namespace, with a possibility to share it with
+          #   other containers
+          # - `"container:<name|id>"`: join another (shareable) container's IPC namespace
+          # - `"host"`: use the host system's IPC namespace
+          #
+          # If not specified, daemon default is used, which can either be `"private"` or
+          # `"shareable"`, depending on daemon version and configuration.
+          ipc_mode: nil,
+          # Isolation technology of the container. (Windows only)
+          isolation: nil,
+          # A list of links for the container in the form `container_name:alias`.
+          links: nil,
+          # The logging configuration for this container
+          log_config: nil,
+          # The list of paths to be masked inside the container (this overrides the default
+          # set of paths).
+          masked_paths: nil,
+          # Memory limit in bytes.
+          memory: nil,
+          # Memory soft limit in bytes.
+          memory_reservation: nil,
+          # Total memory limit (memory + swap). Set as `-1` to enable unlimited swap.
+          memory_swap: nil,
+          # Tune a container's memory swappiness behavior. Accepts an integer between 0
+          # and 100.
+          memory_swappiness: nil,
+          # Specification for mounts to be added to the container.
+          mounts: nil,
+          # CPU quota in units of 10<sup>-9</sup> CPUs.
+          nano_cpus: nil,
+          # Network mode to use for this container. Supported standard values are: `bridge`,
+          # `host`, `none`, and `container:<name|id>`. Any other value is taken as a custom
+          # network's name to which this container should connect to.
+          network_mode: nil,
+          # Disable OOM Killer for the container.
+          oom_kill_disable: nil,
+          # An integer value containing the score given to the container in order to tune
+          # OOM killer preferences.
+          oom_score_adj: nil,
+          # Set the PID (Process) Namespace mode for the container. It can be either:
+          #
+          # - `"container:<name|id>"`: joins another container's PID namespace
+          # - `"host"`: use the host's PID namespace inside the container
+          pid_mode: nil,
+          # Tune a container's PIDs limit. Set `0` or `-1` for unlimited, or `null` to not
+          # change.
+          pids_limit: nil,
+          # PortMap describes the mapping of container ports to host ports, using the
+          # container's port-number and protocol as key in the format `<port>/<protocol>`,
+          # for example, `80/udp`.
+          #
+          # If a container's port is mapped for multiple protocols, separate entries are
+          # added to the mapping table.
+          port_bindings: nil,
+          # Gives the container full access to the host.
+          privileged: nil,
+          # Allocates an ephemeral host port for all of a container's exposed ports.
+          #
+          # Ports are de-allocated when the container stops and allocated when the container
+          # starts. The allocated port might be changed when restarting the container.
+          #
+          # The port is selected from the ephemeral port range that depends on the kernel.
+          # For example, on Linux the range is defined by
+          # `/proc/sys/net/ipv4/ip_local_port_range`.
+          publish_all_ports: nil,
+          # The list of paths to be set as read-only inside the container (this overrides
+          # the default set of paths).
+          readonly_paths: nil,
+          # Mount the container's root filesystem as read only.
+          readonly_rootfs: nil,
+          # The behavior to apply when the container exits. The default is not to restart.
+          #
+          # An ever increasing delay (double the previous delay, starting at 100ms) is added
+          # before each restart to prevent flooding the server.
+          restart_policy: nil,
+          # Runtime to use with this container.
+          runtime: nil,
+          # A list of string values to customize labels for MLS systems, such as SELinux.
+          security_opt: nil,
+          # Size of `/dev/shm` in bytes. If omitted, the system uses 64MB.
+          shm_size: nil,
+          # Storage driver options for this container, in the form `{"size": "120G"}`.
+          storage_opt: nil,
+          # A list of kernel parameters (sysctls) to set in the container.
+          #
+          # This field is omitted if not set.
+          sysctls: nil,
+          # A map of container directories which should be replaced by tmpfs mounts, and
+          # their corresponding mount options. For example:
+          #
+          # ```
+          # { "/run": "rw,noexec,nosuid,size=65536k" }
+          # ```
+          tmpfs: nil,
+          # A list of resource limits to set in the container. For example:
+          #
+          # ```
+          # {"Name": "nofile", "Soft": 1024, "Hard": 2048}
+          # ```
+          ulimits: nil,
+          # Sets the usernamespace mode for the container when usernamespace remapping
+          # option is enabled.
+          userns_mode: nil,
+          # UTS namespace to use for the container.
+          uts_mode: nil,
+          # Driver that this container uses to mount volumes.
+          volume_driver: nil,
+          # A list of volumes to inherit from another container, specified in the form
+          # `<container name>[:<ro|rw>]`.
+          volumes_from: nil
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              annotations: T::Hash[Symbol, String],
+              auto_remove: T::Boolean,
+              binds: T::Array[String],
+              blkio_device_read_bps:
+                T::Array[
+                  DockerEngine::Container::HostConfig::BlkioDeviceReadBp
+                ],
+              blkio_device_read_i_ops:
+                T::Array[
+                  DockerEngine::Container::HostConfig::BlkioDeviceReadIOp
+                ],
+              blkio_device_write_bps:
+                T::Array[
+                  DockerEngine::Container::HostConfig::BlkioDeviceWriteBp
+                ],
+              blkio_device_write_i_ops:
+                T::Array[
+                  DockerEngine::Container::HostConfig::BlkioDeviceWriteIOp
+                ],
+              blkio_weight: Integer,
+              blkio_weight_device:
+                T::Array[
+                  DockerEngine::Container::HostConfig::BlkioWeightDevice
+                ],
+              cap_add: T::Array[String],
+              cap_drop: T::Array[String],
+              cgroup: String,
+              cgroupns_mode:
+                DockerEngine::Container::HostConfig::CgroupnsMode::TaggedSymbol,
+              cgroup_parent: String,
+              console_size: T.nilable(T::Array[Integer]),
+              container_id_file: String,
+              cpu_count: Integer,
+              cpu_percent: Integer,
+              cpu_period: Integer,
+              cpu_quota: Integer,
+              cpu_realtime_period: Integer,
+              cpu_realtime_runtime: Integer,
+              cpuset_cpus: String,
+              cpuset_mems: String,
+              cpu_shares: Integer,
+              device_cgroup_rules: T::Array[String],
+              device_requests:
+                T::Array[DockerEngine::Container::HostConfig::DeviceRequest],
+              devices: T::Array[DockerEngine::Container::HostConfig::Device],
+              dns: T::Array[String],
+              dns_options: T::Array[String],
+              dns_search: T::Array[String],
+              extra_hosts: T::Array[String],
+              group_add: T::Array[String],
+              init: T.nilable(T::Boolean),
+              io_maximum_bandwidth: Integer,
+              io_maximum_i_ops: Integer,
+              ipc_mode: String,
+              isolation:
+                DockerEngine::Container::HostConfig::Isolation::TaggedSymbol,
+              links: T::Array[String],
+              log_config: DockerEngine::Container::HostConfig::LogConfig,
+              masked_paths: T::Array[String],
+              memory: Integer,
+              memory_reservation: Integer,
+              memory_swap: Integer,
+              memory_swappiness: Integer,
+              mounts: T::Array[DockerEngine::Container::HostConfig::Mount],
+              nano_cpus: Integer,
+              network_mode: String,
+              oom_kill_disable: T::Boolean,
+              oom_score_adj: Integer,
+              pid_mode: String,
+              pids_limit: T.nilable(Integer),
+              port_bindings:
+                T::Hash[
+                  Symbol,
+                  T::Array[DockerEngine::Container::HostConfig::PortBinding]
+                ],
+              privileged: T::Boolean,
+              publish_all_ports: T::Boolean,
+              readonly_paths: T::Array[String],
+              readonly_rootfs: T::Boolean,
+              restart_policy:
+                DockerEngine::Container::HostConfig::RestartPolicy,
+              runtime: T.nilable(String),
+              security_opt: T::Array[String],
+              shm_size: Integer,
+              storage_opt: T::Hash[Symbol, String],
+              sysctls: T.nilable(T::Hash[Symbol, String]),
+              tmpfs: T::Hash[Symbol, String],
+              ulimits: T::Array[DockerEngine::Container::HostConfig::Ulimit],
+              userns_mode: String,
+              uts_mode: String,
+              volume_driver: String,
+              volumes_from: T::Array[String]
+            }
+          )
+        end
+        def to_hash
+        end
+
+        class BlkioDeviceReadBp < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::BlkioDeviceReadBp,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Device path
+          sig { returns(T.nilable(String)) }
+          attr_reader :path
+
+          sig { params(path: String).void }
+          attr_writer :path
+
+          # Rate
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :rate
+
+          sig { params(rate: Integer).void }
+          attr_writer :rate
+
+          sig { params(path: String, rate: Integer).returns(T.attached_class) }
+          def self.new(
+            # Device path
+            path: nil,
+            # Rate
+            rate: nil
+          )
+          end
+
+          sig { override.returns({ path: String, rate: Integer }) }
+          def to_hash
+          end
+        end
+
+        class BlkioDeviceReadIOp < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::BlkioDeviceReadIOp,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Device path
+          sig { returns(T.nilable(String)) }
+          attr_reader :path
+
+          sig { params(path: String).void }
+          attr_writer :path
+
+          # Rate
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :rate
+
+          sig { params(rate: Integer).void }
+          attr_writer :rate
+
+          sig { params(path: String, rate: Integer).returns(T.attached_class) }
+          def self.new(
+            # Device path
+            path: nil,
+            # Rate
+            rate: nil
+          )
+          end
+
+          sig { override.returns({ path: String, rate: Integer }) }
+          def to_hash
+          end
+        end
+
+        class BlkioDeviceWriteBp < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::BlkioDeviceWriteBp,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Device path
+          sig { returns(T.nilable(String)) }
+          attr_reader :path
+
+          sig { params(path: String).void }
+          attr_writer :path
+
+          # Rate
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :rate
+
+          sig { params(rate: Integer).void }
+          attr_writer :rate
+
+          sig { params(path: String, rate: Integer).returns(T.attached_class) }
+          def self.new(
+            # Device path
+            path: nil,
+            # Rate
+            rate: nil
+          )
+          end
+
+          sig { override.returns({ path: String, rate: Integer }) }
+          def to_hash
+          end
+        end
+
+        class BlkioDeviceWriteIOp < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::BlkioDeviceWriteIOp,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Device path
+          sig { returns(T.nilable(String)) }
+          attr_reader :path
+
+          sig { params(path: String).void }
+          attr_writer :path
+
+          # Rate
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :rate
+
+          sig { params(rate: Integer).void }
+          attr_writer :rate
+
+          sig { params(path: String, rate: Integer).returns(T.attached_class) }
+          def self.new(
+            # Device path
+            path: nil,
+            # Rate
+            rate: nil
+          )
+          end
+
+          sig { override.returns({ path: String, rate: Integer }) }
+          def to_hash
+          end
+        end
+
+        class BlkioWeightDevice < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::BlkioWeightDevice,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          sig { returns(T.nilable(String)) }
+          attr_reader :path
+
+          sig { params(path: String).void }
+          attr_writer :path
+
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :weight
+
+          sig { params(weight: Integer).void }
+          attr_writer :weight
+
+          sig do
+            params(path: String, weight: Integer).returns(T.attached_class)
+          end
+          def self.new(path: nil, weight: nil)
+          end
+
+          sig { override.returns({ path: String, weight: Integer }) }
+          def to_hash
+          end
+        end
+
+        # cgroup namespace mode for the container. Possible values are:
+        #
+        # - `"private"`: the container runs in its own private cgroup namespace
+        # - `"host"`: use the host system's cgroup namespace
+        #
+        # If not specified, the daemon default is used, which can either be `"private"` or
+        # `"host"`, depending on daemon version, kernel support and configuration.
+        module CgroupnsMode
+          extend DockerEngine::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(Symbol, DockerEngine::Container::HostConfig::CgroupnsMode)
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          PRIVATE =
+            T.let(
+              :private,
+              DockerEngine::Container::HostConfig::CgroupnsMode::TaggedSymbol
+            )
+          HOST =
+            T.let(
+              :host,
+              DockerEngine::Container::HostConfig::CgroupnsMode::TaggedSymbol
+            )
+
+          sig do
+            override.returns(
+              T::Array[
+                DockerEngine::Container::HostConfig::CgroupnsMode::TaggedSymbol
+              ]
+            )
+          end
+          def self.values
+          end
+        end
+
+        class DeviceRequest < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::DeviceRequest,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # A list of capabilities; an OR list of AND lists of capabilities.
+          #
+          # Note that if a driver is specified the capabilities have no effect on selecting
+          # a driver as the driver name is used directly.
+          #
+          # Note that if no driver is specified the capabilities are used to select a driver
+          # with the required capabilities.
+          sig { returns(T.nilable(T::Array[T::Array[String]])) }
+          attr_reader :capabilities
+
+          sig { params(capabilities: T::Array[T::Array[String]]).void }
+          attr_writer :capabilities
+
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :count
+
+          sig { params(count: Integer).void }
+          attr_writer :count
+
+          sig { returns(T.nilable(T::Array[String])) }
+          attr_reader :device_ids
+
+          sig { params(device_ids: T::Array[String]).void }
+          attr_writer :device_ids
+
+          # The name of the device driver to use for this request.
+          #
+          # Note that if this is specified the capabilities are ignored when selecting a
+          # device driver.
+          sig { returns(T.nilable(String)) }
+          attr_reader :driver
+
+          sig { params(driver: String).void }
+          attr_writer :driver
+
+          # Driver-specific options, specified as a key/value pairs. These options are
+          # passed directly to the driver.
+          sig { returns(T.nilable(T::Hash[Symbol, String])) }
+          attr_reader :options
+
+          sig { params(options: T::Hash[Symbol, String]).void }
+          attr_writer :options
+
+          # A request for devices to be sent to device drivers
+          sig do
+            params(
+              capabilities: T::Array[T::Array[String]],
+              count: Integer,
+              device_ids: T::Array[String],
+              driver: String,
+              options: T::Hash[Symbol, String]
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            # A list of capabilities; an OR list of AND lists of capabilities.
+            #
+            # Note that if a driver is specified the capabilities have no effect on selecting
+            # a driver as the driver name is used directly.
+            #
+            # Note that if no driver is specified the capabilities are used to select a driver
+            # with the required capabilities.
+            capabilities: nil,
+            count: nil,
+            device_ids: nil,
+            # The name of the device driver to use for this request.
+            #
+            # Note that if this is specified the capabilities are ignored when selecting a
+            # device driver.
+            driver: nil,
+            # Driver-specific options, specified as a key/value pairs. These options are
+            # passed directly to the driver.
+            options: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                capabilities: T::Array[T::Array[String]],
+                count: Integer,
+                device_ids: T::Array[String],
+                driver: String,
+                options: T::Hash[Symbol, String]
+              }
+            )
+          end
+          def to_hash
+          end
+        end
+
+        class Device < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::Device,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          sig { returns(T.nilable(String)) }
+          attr_reader :cgroup_permissions
+
+          sig { params(cgroup_permissions: String).void }
+          attr_writer :cgroup_permissions
+
+          sig { returns(T.nilable(String)) }
+          attr_reader :path_in_container
+
+          sig { params(path_in_container: String).void }
+          attr_writer :path_in_container
+
+          sig { returns(T.nilable(String)) }
+          attr_reader :path_on_host
+
+          sig { params(path_on_host: String).void }
+          attr_writer :path_on_host
+
+          # A device mapping between the host and container
+          sig do
+            params(
+              cgroup_permissions: String,
+              path_in_container: String,
+              path_on_host: String
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            cgroup_permissions: nil,
+            path_in_container: nil,
+            path_on_host: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                cgroup_permissions: String,
+                path_in_container: String,
+                path_on_host: String
+              }
+            )
+          end
+          def to_hash
+          end
+        end
+
+        # Isolation technology of the container. (Windows only)
+        module Isolation
+          extend DockerEngine::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(Symbol, DockerEngine::Container::HostConfig::Isolation)
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          DEFAULT =
+            T.let(
+              :default,
+              DockerEngine::Container::HostConfig::Isolation::TaggedSymbol
+            )
+          PROCESS =
+            T.let(
+              :process,
+              DockerEngine::Container::HostConfig::Isolation::TaggedSymbol
+            )
+          HYPERV =
+            T.let(
+              :hyperv,
+              DockerEngine::Container::HostConfig::Isolation::TaggedSymbol
+            )
+          EMPTY =
+            T.let(
+              :"",
+              DockerEngine::Container::HostConfig::Isolation::TaggedSymbol
+            )
+
+          sig do
+            override.returns(
+              T::Array[
+                DockerEngine::Container::HostConfig::Isolation::TaggedSymbol
+              ]
+            )
+          end
+          def self.values
+          end
+        end
+
+        class LogConfig < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::LogConfig,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Driver-specific configuration options for the logging driver.
+          sig { returns(T.nilable(T::Hash[Symbol, String])) }
+          attr_reader :config
+
+          sig { params(config: T::Hash[Symbol, String]).void }
+          attr_writer :config
+
+          # Name of the logging driver used for the container or "none" if logging is
+          # disabled.
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            )
+          end
+          attr_reader :type
+
+          sig do
+            params(
+              type:
+                DockerEngine::Container::HostConfig::LogConfig::Type::OrSymbol
+            ).void
+          end
+          attr_writer :type
+
+          # The logging configuration for this container
+          sig do
+            params(
+              config: T::Hash[Symbol, String],
+              type:
+                DockerEngine::Container::HostConfig::LogConfig::Type::OrSymbol
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            # Driver-specific configuration options for the logging driver.
+            config: nil,
+            # Name of the logging driver used for the container or "none" if logging is
+            # disabled.
+            type: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                config: T::Hash[Symbol, String],
+                type:
+                  DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              }
+            )
+          end
+          def to_hash
+          end
+
+          # Name of the logging driver used for the container or "none" if logging is
+          # disabled.
+          module Type
+            extend DockerEngine::Internal::Type::Enum
+
+            TaggedSymbol =
+              T.type_alias do
+                T.all(
+                  Symbol,
+                  DockerEngine::Container::HostConfig::LogConfig::Type
+                )
+              end
+            OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+            LOCAL =
+              T.let(
+                :local,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            JSON_FILE =
+              T.let(
+                :"json-file",
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            SYSLOG =
+              T.let(
+                :syslog,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            JOURNALD =
+              T.let(
+                :journald,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            GELF =
+              T.let(
+                :gelf,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            FLUENTD =
+              T.let(
+                :fluentd,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            AWSLOGS =
+              T.let(
+                :awslogs,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            SPLUNK =
+              T.let(
+                :splunk,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            ETWLOGS =
+              T.let(
+                :etwlogs,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+            NONE =
+              T.let(
+                :none,
+                DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+              )
+
+            sig do
+              override.returns(
+                T::Array[
+                  DockerEngine::Container::HostConfig::LogConfig::Type::TaggedSymbol
+                ]
+              )
+            end
+            def self.values
+            end
+          end
+        end
+
+        class Mount < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::Mount,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Optional configuration for the `bind` type.
+          sig do
+            returns(
+              T.nilable(DockerEngine::Container::HostConfig::Mount::BindOptions)
+            )
+          end
+          attr_reader :bind_options
+
+          sig do
+            params(
+              bind_options:
+                DockerEngine::Container::HostConfig::Mount::BindOptions::OrHash
+            ).void
+          end
+          attr_writer :bind_options
+
+          # The consistency requirement for the mount: `default`, `consistent`, `cached`, or
+          # `delegated`.
+          sig { returns(T.nilable(String)) }
+          attr_reader :consistency
+
+          sig { params(consistency: String).void }
+          attr_writer :consistency
+
+          # Optional configuration for the `image` type.
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::HostConfig::Mount::ImageOptions
+              )
+            )
+          end
+          attr_reader :image_options
+
+          sig do
+            params(
+              image_options:
+                DockerEngine::Container::HostConfig::Mount::ImageOptions::OrHash
+            ).void
+          end
+          attr_writer :image_options
+
+          # Whether the mount should be read-only.
+          sig { returns(T.nilable(T::Boolean)) }
+          attr_reader :read_only
+
+          sig { params(read_only: T::Boolean).void }
+          attr_writer :read_only
+
+          # Mount source (e.g. a volume name, a host path). The source cannot be specified
+          # when using `Type=tmpfs`. For `Type=bind`, the source path must either exist, or
+          # the `CreateMountpoint` must be set to `true` to create the source path on the
+          # host if missing.
+          #
+          # For `Type=npipe`, the pipe must exist prior to creating the container.
+          sig { returns(T.nilable(String)) }
+          attr_reader :source
+
+          sig { params(source: String).void }
+          attr_writer :source
+
+          # Container path.
+          sig { returns(T.nilable(String)) }
+          attr_reader :target
+
+          sig { params(target: String).void }
+          attr_writer :target
+
+          # Optional configuration for the `tmpfs` type.
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::HostConfig::Mount::TmpfsOptions
+              )
+            )
+          end
+          attr_reader :tmpfs_options
+
+          sig do
+            params(
+              tmpfs_options:
+                DockerEngine::Container::HostConfig::Mount::TmpfsOptions::OrHash
+            ).void
+          end
+          attr_writer :tmpfs_options
+
+          # The mount type. Available types:
+          #
+          # - `bind` a mount of a file or directory from the host into the container.
+          # - `cluster` a Swarm cluster volume.
+          # - `image` an OCI image.
+          # - `npipe` a named pipe from the host into the container.
+          # - `tmpfs` a `tmpfs`.
+          # - `volume` a docker volume with the given `Name`.
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+              )
+            )
+          end
+          attr_reader :type
+
+          sig do
+            params(
+              type: DockerEngine::Container::HostConfig::Mount::Type::OrSymbol
+            ).void
+          end
+          attr_writer :type
+
+          # Optional configuration for the `volume` type.
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::HostConfig::Mount::VolumeOptions
+              )
+            )
+          end
+          attr_reader :volume_options
+
+          sig do
+            params(
+              volume_options:
+                DockerEngine::Container::HostConfig::Mount::VolumeOptions::OrHash
+            ).void
+          end
+          attr_writer :volume_options
+
+          sig do
+            params(
+              bind_options:
+                DockerEngine::Container::HostConfig::Mount::BindOptions::OrHash,
+              consistency: String,
+              image_options:
+                DockerEngine::Container::HostConfig::Mount::ImageOptions::OrHash,
+              read_only: T::Boolean,
+              source: String,
+              target: String,
+              tmpfs_options:
+                DockerEngine::Container::HostConfig::Mount::TmpfsOptions::OrHash,
+              type: DockerEngine::Container::HostConfig::Mount::Type::OrSymbol,
+              volume_options:
+                DockerEngine::Container::HostConfig::Mount::VolumeOptions::OrHash
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            # Optional configuration for the `bind` type.
+            bind_options: nil,
+            # The consistency requirement for the mount: `default`, `consistent`, `cached`, or
+            # `delegated`.
+            consistency: nil,
+            # Optional configuration for the `image` type.
+            image_options: nil,
+            # Whether the mount should be read-only.
+            read_only: nil,
+            # Mount source (e.g. a volume name, a host path). The source cannot be specified
+            # when using `Type=tmpfs`. For `Type=bind`, the source path must either exist, or
+            # the `CreateMountpoint` must be set to `true` to create the source path on the
+            # host if missing.
+            #
+            # For `Type=npipe`, the pipe must exist prior to creating the container.
+            source: nil,
+            # Container path.
+            target: nil,
+            # Optional configuration for the `tmpfs` type.
+            tmpfs_options: nil,
+            # The mount type. Available types:
+            #
+            # - `bind` a mount of a file or directory from the host into the container.
+            # - `cluster` a Swarm cluster volume.
+            # - `image` an OCI image.
+            # - `npipe` a named pipe from the host into the container.
+            # - `tmpfs` a `tmpfs`.
+            # - `volume` a docker volume with the given `Name`.
+            type: nil,
+            # Optional configuration for the `volume` type.
+            volume_options: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                bind_options:
+                  DockerEngine::Container::HostConfig::Mount::BindOptions,
+                consistency: String,
+                image_options:
+                  DockerEngine::Container::HostConfig::Mount::ImageOptions,
+                read_only: T::Boolean,
+                source: String,
+                target: String,
+                tmpfs_options:
+                  DockerEngine::Container::HostConfig::Mount::TmpfsOptions,
+                type:
+                  DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol,
+                volume_options:
+                  DockerEngine::Container::HostConfig::Mount::VolumeOptions
+              }
+            )
+          end
+          def to_hash
+          end
+
+          class BindOptions < DockerEngine::Internal::Type::BaseModel
+            OrHash =
+              T.type_alias do
+                T.any(
+                  DockerEngine::Container::HostConfig::Mount::BindOptions,
+                  DockerEngine::Internal::AnyHash
+                )
+              end
+
+            # Create mount point on host if missing
+            sig { returns(T.nilable(T::Boolean)) }
+            attr_reader :create_mountpoint
+
+            sig { params(create_mountpoint: T::Boolean).void }
+            attr_writer :create_mountpoint
+
+            # Disable recursive bind mount.
+            sig { returns(T.nilable(T::Boolean)) }
+            attr_reader :non_recursive
+
+            sig { params(non_recursive: T::Boolean).void }
+            attr_writer :non_recursive
+
+            # A propagation mode with the value `[r]private`, `[r]shared`, or `[r]slave`.
+            sig do
+              returns(
+                T.nilable(
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                )
+              )
+            end
+            attr_reader :propagation
+
+            sig do
+              params(
+                propagation:
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::OrSymbol
+              ).void
+            end
+            attr_writer :propagation
+
+            # Raise an error if the mount cannot be made recursively read-only.
+            sig { returns(T.nilable(T::Boolean)) }
+            attr_reader :read_only_force_recursive
+
+            sig { params(read_only_force_recursive: T::Boolean).void }
+            attr_writer :read_only_force_recursive
+
+            # Make the mount non-recursively read-only, but still leave the mount recursive
+            # (unless NonRecursive is set to `true` in conjunction).
+            #
+            # Added in v1.44, before that version all read-only mounts were non-recursive by
+            # default. To match the previous behaviour this will default to `true` for clients
+            # on versions prior to v1.44.
+            sig { returns(T.nilable(T::Boolean)) }
+            attr_reader :read_only_non_recursive
+
+            sig { params(read_only_non_recursive: T::Boolean).void }
+            attr_writer :read_only_non_recursive
+
+            # Optional configuration for the `bind` type.
+            sig do
+              params(
+                create_mountpoint: T::Boolean,
+                non_recursive: T::Boolean,
+                propagation:
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::OrSymbol,
+                read_only_force_recursive: T::Boolean,
+                read_only_non_recursive: T::Boolean
+              ).returns(T.attached_class)
+            end
+            def self.new(
+              # Create mount point on host if missing
+              create_mountpoint: nil,
+              # Disable recursive bind mount.
+              non_recursive: nil,
+              # A propagation mode with the value `[r]private`, `[r]shared`, or `[r]slave`.
+              propagation: nil,
+              # Raise an error if the mount cannot be made recursively read-only.
+              read_only_force_recursive: nil,
+              # Make the mount non-recursively read-only, but still leave the mount recursive
+              # (unless NonRecursive is set to `true` in conjunction).
+              #
+              # Added in v1.44, before that version all read-only mounts were non-recursive by
+              # default. To match the previous behaviour this will default to `true` for clients
+              # on versions prior to v1.44.
+              read_only_non_recursive: nil
+            )
+            end
+
+            sig do
+              override.returns(
+                {
+                  create_mountpoint: T::Boolean,
+                  non_recursive: T::Boolean,
+                  propagation:
+                    DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol,
+                  read_only_force_recursive: T::Boolean,
+                  read_only_non_recursive: T::Boolean
+                }
+              )
+            end
+            def to_hash
+            end
+
+            # A propagation mode with the value `[r]private`, `[r]shared`, or `[r]slave`.
+            module Propagation
+              extend DockerEngine::Internal::Type::Enum
+
+              TaggedSymbol =
+                T.type_alias do
+                  T.all(
+                    Symbol,
+                    DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation
+                  )
+                end
+              OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+              PRIVATE =
+                T.let(
+                  :private,
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                )
+              RPRIVATE =
+                T.let(
+                  :rprivate,
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                )
+              SHARED =
+                T.let(
+                  :shared,
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                )
+              RSHARED =
+                T.let(
+                  :rshared,
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                )
+              SLAVE =
+                T.let(
+                  :slave,
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                )
+              RSLAVE =
+                T.let(
+                  :rslave,
+                  DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                )
+
+              sig do
+                override.returns(
+                  T::Array[
+                    DockerEngine::Container::HostConfig::Mount::BindOptions::Propagation::TaggedSymbol
+                  ]
+                )
+              end
+              def self.values
+              end
+            end
+          end
+
+          class ImageOptions < DockerEngine::Internal::Type::BaseModel
+            OrHash =
+              T.type_alias do
+                T.any(
+                  DockerEngine::Container::HostConfig::Mount::ImageOptions,
+                  DockerEngine::Internal::AnyHash
+                )
+              end
+
+            # Source path inside the image. Must be relative without any back traversals.
+            sig { returns(T.nilable(String)) }
+            attr_reader :subpath
+
+            sig { params(subpath: String).void }
+            attr_writer :subpath
+
+            # Optional configuration for the `image` type.
+            sig { params(subpath: String).returns(T.attached_class) }
+            def self.new(
+              # Source path inside the image. Must be relative without any back traversals.
+              subpath: nil
+            )
+            end
+
+            sig { override.returns({ subpath: String }) }
+            def to_hash
+            end
+          end
+
+          class TmpfsOptions < DockerEngine::Internal::Type::BaseModel
+            OrHash =
+              T.type_alias do
+                T.any(
+                  DockerEngine::Container::HostConfig::Mount::TmpfsOptions,
+                  DockerEngine::Internal::AnyHash
+                )
+              end
+
+            # The permission mode for the tmpfs mount in an integer. The value must not be in
+            # octal format (e.g. 755) but rather the decimal representation of the octal value
+            # (e.g. 493).
+            sig { returns(T.nilable(Integer)) }
+            attr_reader :mode
+
+            sig { params(mode: Integer).void }
+            attr_writer :mode
+
+            # The options to be passed to the tmpfs mount. An array of arrays. Flag options
+            # should be provided as 1-length arrays. Other types should be provided as as
+            # 2-length arrays, where the first item is the key and the second the value.
+            sig { returns(T.nilable(T::Array[T::Array[String]])) }
+            attr_reader :options
+
+            sig { params(options: T::Array[T::Array[String]]).void }
+            attr_writer :options
+
+            # The size for the tmpfs mount in bytes.
+            sig { returns(T.nilable(Integer)) }
+            attr_reader :size_bytes
+
+            sig { params(size_bytes: Integer).void }
+            attr_writer :size_bytes
+
+            # Optional configuration for the `tmpfs` type.
+            sig do
+              params(
+                mode: Integer,
+                options: T::Array[T::Array[String]],
+                size_bytes: Integer
+              ).returns(T.attached_class)
+            end
+            def self.new(
+              # The permission mode for the tmpfs mount in an integer. The value must not be in
+              # octal format (e.g. 755) but rather the decimal representation of the octal value
+              # (e.g. 493).
+              mode: nil,
+              # The options to be passed to the tmpfs mount. An array of arrays. Flag options
+              # should be provided as 1-length arrays. Other types should be provided as as
+              # 2-length arrays, where the first item is the key and the second the value.
+              options: nil,
+              # The size for the tmpfs mount in bytes.
+              size_bytes: nil
+            )
+            end
+
+            sig do
+              override.returns(
+                {
+                  mode: Integer,
+                  options: T::Array[T::Array[String]],
+                  size_bytes: Integer
+                }
+              )
+            end
+            def to_hash
+            end
+          end
+
+          # The mount type. Available types:
+          #
+          # - `bind` a mount of a file or directory from the host into the container.
+          # - `cluster` a Swarm cluster volume.
+          # - `image` an OCI image.
+          # - `npipe` a named pipe from the host into the container.
+          # - `tmpfs` a `tmpfs`.
+          # - `volume` a docker volume with the given `Name`.
+          module Type
+            extend DockerEngine::Internal::Type::Enum
+
+            TaggedSymbol =
+              T.type_alias do
+                T.all(Symbol, DockerEngine::Container::HostConfig::Mount::Type)
+              end
+            OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+            BIND =
+              T.let(
+                :bind,
+                DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+              )
+            CLUSTER =
+              T.let(
+                :cluster,
+                DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+              )
+            IMAGE =
+              T.let(
+                :image,
+                DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+              )
+            NPIPE =
+              T.let(
+                :npipe,
+                DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+              )
+            TMPFS =
+              T.let(
+                :tmpfs,
+                DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+              )
+            VOLUME =
+              T.let(
+                :volume,
+                DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+              )
+
+            sig do
+              override.returns(
+                T::Array[
+                  DockerEngine::Container::HostConfig::Mount::Type::TaggedSymbol
+                ]
+              )
+            end
+            def self.values
+            end
+          end
+
+          class VolumeOptions < DockerEngine::Internal::Type::BaseModel
+            OrHash =
+              T.type_alias do
+                T.any(
+                  DockerEngine::Container::HostConfig::Mount::VolumeOptions,
+                  DockerEngine::Internal::AnyHash
+                )
+              end
+
+            # Map of driver specific options
+            sig do
+              returns(
+                T.nilable(
+                  DockerEngine::Container::HostConfig::Mount::VolumeOptions::DriverConfig
+                )
+              )
+            end
+            attr_reader :driver_config
+
+            sig do
+              params(
+                driver_config:
+                  DockerEngine::Container::HostConfig::Mount::VolumeOptions::DriverConfig::OrHash
+              ).void
+            end
+            attr_writer :driver_config
+
+            # User-defined key/value metadata.
+            sig { returns(T.nilable(T::Hash[Symbol, String])) }
+            attr_reader :labels
+
+            sig { params(labels: T::Hash[Symbol, String]).void }
+            attr_writer :labels
+
+            # Populate volume with data from the target.
+            sig { returns(T.nilable(T::Boolean)) }
+            attr_reader :no_copy
+
+            sig { params(no_copy: T::Boolean).void }
+            attr_writer :no_copy
+
+            # Source path inside the volume. Must be relative without any back traversals.
+            sig { returns(T.nilable(String)) }
+            attr_reader :subpath
+
+            sig { params(subpath: String).void }
+            attr_writer :subpath
+
+            # Optional configuration for the `volume` type.
+            sig do
+              params(
+                driver_config:
+                  DockerEngine::Container::HostConfig::Mount::VolumeOptions::DriverConfig::OrHash,
+                labels: T::Hash[Symbol, String],
+                no_copy: T::Boolean,
+                subpath: String
+              ).returns(T.attached_class)
+            end
+            def self.new(
+              # Map of driver specific options
+              driver_config: nil,
+              # User-defined key/value metadata.
+              labels: nil,
+              # Populate volume with data from the target.
+              no_copy: nil,
+              # Source path inside the volume. Must be relative without any back traversals.
+              subpath: nil
+            )
+            end
+
+            sig do
+              override.returns(
+                {
+                  driver_config:
+                    DockerEngine::Container::HostConfig::Mount::VolumeOptions::DriverConfig,
+                  labels: T::Hash[Symbol, String],
+                  no_copy: T::Boolean,
+                  subpath: String
+                }
+              )
+            end
+            def to_hash
+            end
+
+            class DriverConfig < DockerEngine::Internal::Type::BaseModel
+              OrHash =
+                T.type_alias do
+                  T.any(
+                    DockerEngine::Container::HostConfig::Mount::VolumeOptions::DriverConfig,
+                    DockerEngine::Internal::AnyHash
+                  )
+                end
+
+              # Name of the driver to use to create the volume.
+              sig { returns(T.nilable(String)) }
+              attr_reader :name
+
+              sig { params(name: String).void }
+              attr_writer :name
+
+              # key/value map of driver specific options.
+              sig { returns(T.nilable(T::Hash[Symbol, String])) }
+              attr_reader :options
+
+              sig { params(options: T::Hash[Symbol, String]).void }
+              attr_writer :options
+
+              # Map of driver specific options
+              sig do
+                params(name: String, options: T::Hash[Symbol, String]).returns(
+                  T.attached_class
+                )
+              end
+              def self.new(
+                # Name of the driver to use to create the volume.
+                name: nil,
+                # key/value map of driver specific options.
+                options: nil
+              )
+              end
+
+              sig do
+                override.returns(
+                  { name: String, options: T::Hash[Symbol, String] }
+                )
+              end
+              def to_hash
+              end
+            end
+          end
+        end
+
+        class PortBinding < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::PortBinding,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Host IP address that the container's port is mapped to.
+          sig { returns(T.nilable(String)) }
+          attr_reader :host_ip
+
+          sig { params(host_ip: String).void }
+          attr_writer :host_ip
+
+          # Host port number that the container's port is mapped to.
+          sig { returns(T.nilable(String)) }
+          attr_reader :host_port
+
+          sig { params(host_port: String).void }
+          attr_writer :host_port
+
+          # PortBinding represents a binding between a host IP address and a host port.
+          sig do
+            params(host_ip: String, host_port: String).returns(T.attached_class)
+          end
+          def self.new(
+            # Host IP address that the container's port is mapped to.
+            host_ip: nil,
+            # Host port number that the container's port is mapped to.
+            host_port: nil
+          )
+          end
+
+          sig { override.returns({ host_ip: String, host_port: String }) }
+          def to_hash
+          end
+        end
+
+        class RestartPolicy < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::RestartPolicy,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # If `on-failure` is used, the number of times to retry before giving up.
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :maximum_retry_count
+
+          sig { params(maximum_retry_count: Integer).void }
+          attr_writer :maximum_retry_count
+
+          # - Empty string means not to restart
+          # - `no` Do not automatically restart
+          # - `always` Always restart
+          # - `unless-stopped` Restart always except when the user has manually stopped the
+          #   container
+          # - `on-failure` Restart only when the container exit code is non-zero
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+              )
+            )
+          end
+          attr_reader :name
+
+          sig do
+            params(
+              name:
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::OrSymbol
+            ).void
+          end
+          attr_writer :name
+
+          # The behavior to apply when the container exits. The default is not to restart.
+          #
+          # An ever increasing delay (double the previous delay, starting at 100ms) is added
+          # before each restart to prevent flooding the server.
+          sig do
+            params(
+              maximum_retry_count: Integer,
+              name:
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::OrSymbol
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            # If `on-failure` is used, the number of times to retry before giving up.
+            maximum_retry_count: nil,
+            # - Empty string means not to restart
+            # - `no` Do not automatically restart
+            # - `always` Always restart
+            # - `unless-stopped` Restart always except when the user has manually stopped the
+            #   container
+            # - `on-failure` Restart only when the container exit code is non-zero
+            name: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                maximum_retry_count: Integer,
+                name:
+                  DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+              }
+            )
+          end
+          def to_hash
+          end
+
+          # - Empty string means not to restart
+          # - `no` Do not automatically restart
+          # - `always` Always restart
+          # - `unless-stopped` Restart always except when the user has manually stopped the
+          #   container
+          # - `on-failure` Restart only when the container exit code is non-zero
+          module Name
+            extend DockerEngine::Internal::Type::Enum
+
+            TaggedSymbol =
+              T.type_alias do
+                T.all(
+                  Symbol,
+                  DockerEngine::Container::HostConfig::RestartPolicy::Name
+                )
+              end
+            OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+            EMPTY =
+              T.let(
+                :"",
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+              )
+            NO =
+              T.let(
+                :no,
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+              )
+            ALWAYS =
+              T.let(
+                :always,
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+              )
+            UNLESS_STOPPED =
+              T.let(
+                :"unless-stopped",
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+              )
+            ON_FAILURE =
+              T.let(
+                :"on-failure",
+                DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+              )
+
+            sig do
+              override.returns(
+                T::Array[
+                  DockerEngine::Container::HostConfig::RestartPolicy::Name::TaggedSymbol
+                ]
+              )
+            end
+            def self.values
+            end
+          end
+        end
+
+        class Ulimit < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::HostConfig::Ulimit,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Hard limit
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :hard
+
+          sig { params(hard: Integer).void }
+          attr_writer :hard
+
+          # Name of ulimit
+          sig { returns(T.nilable(String)) }
+          attr_reader :name
+
+          sig { params(name: String).void }
+          attr_writer :name
+
+          # Soft limit
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :soft
+
+          sig { params(soft: Integer).void }
+          attr_writer :soft
+
+          sig do
+            params(hard: Integer, name: String, soft: Integer).returns(
+              T.attached_class
+            )
+          end
+          def self.new(
+            # Hard limit
+            hard: nil,
+            # Name of ulimit
+            name: nil,
+            # Soft limit
+            soft: nil
+          )
+          end
+
+          sig do
+            override.returns({ hard: Integer, name: String, soft: Integer })
+          end
+          def to_hash
+          end
+        end
+      end
+
+      class ImageManifestDescriptor < DockerEngine::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              DockerEngine::Container::ImageManifestDescriptor,
+              DockerEngine::Internal::AnyHash
+            )
+          end
+
+        # Arbitrary metadata relating to the targeted content.
+        sig { returns(T.nilable(T::Hash[Symbol, String])) }
+        attr_accessor :annotations
+
+        # ArtifactType is the IANA media type of this artifact.
+        sig { returns(T.nilable(String)) }
+        attr_accessor :artifact_type
+
+        # Data is an embedding of the targeted content. This is encoded as a base64 string
+        # when marshalled to JSON (automatically, by encoding/json). If present, Data can
+        # be used directly to avoid fetching the targeted content.
+        sig { returns(T.nilable(String)) }
+        attr_accessor :data
+
+        # The digest of the targeted content.
+        sig { returns(T.nilable(String)) }
+        attr_reader :digest
+
+        sig { params(digest: String).void }
+        attr_writer :digest
+
+        # The media type of the object this schema refers to.
+        sig { returns(T.nilable(String)) }
+        attr_reader :media_type
+
+        sig { params(media_type: String).void }
+        attr_writer :media_type
+
+        # Describes the platform which the image in the manifest runs on, as defined in
+        # the
+        # [OCI Image Index Specification](https://github.com/opencontainers/image-spec/blob/v1.0.1/image-index.md).
+        sig do
+          returns(
+            T.nilable(
+              DockerEngine::Container::ImageManifestDescriptor::Platform
+            )
+          )
+        end
+        attr_reader :platform
+
+        sig do
+          params(
+            platform:
+              T.nilable(
+                DockerEngine::Container::ImageManifestDescriptor::Platform::OrHash
+              )
+          ).void
+        end
+        attr_writer :platform
+
+        # The size in bytes of the blob.
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :size
+
+        sig { params(size: Integer).void }
+        attr_writer :size
+
+        # List of URLs from which this object MAY be downloaded.
+        sig { returns(T.nilable(T::Array[String])) }
+        attr_accessor :urls
+
+        # A descriptor struct containing digest, media type, and size, as defined in the
+        # [OCI Content Descriptors Specification](https://github.com/opencontainers/image-spec/blob/v1.0.1/descriptor.md).
+        sig do
+          params(
+            annotations: T.nilable(T::Hash[Symbol, String]),
+            artifact_type: T.nilable(String),
+            data: T.nilable(String),
+            digest: String,
+            media_type: String,
+            platform:
+              T.nilable(
+                DockerEngine::Container::ImageManifestDescriptor::Platform::OrHash
+              ),
+            size: Integer,
+            urls: T.nilable(T::Array[String])
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # Arbitrary metadata relating to the targeted content.
+          annotations: nil,
+          # ArtifactType is the IANA media type of this artifact.
+          artifact_type: nil,
+          # Data is an embedding of the targeted content. This is encoded as a base64 string
+          # when marshalled to JSON (automatically, by encoding/json). If present, Data can
+          # be used directly to avoid fetching the targeted content.
+          data: nil,
+          # The digest of the targeted content.
+          digest: nil,
+          # The media type of the object this schema refers to.
+          media_type: nil,
+          # Describes the platform which the image in the manifest runs on, as defined in
+          # the
+          # [OCI Image Index Specification](https://github.com/opencontainers/image-spec/blob/v1.0.1/image-index.md).
+          platform: nil,
+          # The size in bytes of the blob.
+          size: nil,
+          # List of URLs from which this object MAY be downloaded.
+          urls: nil
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              annotations: T.nilable(T::Hash[Symbol, String]),
+              artifact_type: T.nilable(String),
+              data: T.nilable(String),
+              digest: String,
+              media_type: String,
+              platform:
+                T.nilable(
+                  DockerEngine::Container::ImageManifestDescriptor::Platform
+                ),
+              size: Integer,
+              urls: T.nilable(T::Array[String])
+            }
+          )
+        end
+        def to_hash
+        end
+
+        class Platform < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::ImageManifestDescriptor::Platform,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # The CPU architecture, for example `amd64` or `ppc64`.
+          sig { returns(T.nilable(String)) }
+          attr_reader :architecture
+
+          sig { params(architecture: String).void }
+          attr_writer :architecture
+
+          # The operating system, for example `linux` or `windows`.
+          sig { returns(T.nilable(String)) }
+          attr_reader :os
+
+          sig { params(os: String).void }
+          attr_writer :os
+
+          # Optional field specifying an array of strings, each listing a required OS
+          # feature (for example on Windows `win32k`).
+          sig { returns(T.nilable(T::Array[String])) }
+          attr_reader :os_features
+
+          sig { params(os_features: T::Array[String]).void }
+          attr_writer :os_features
+
+          # Optional field specifying the operating system version, for example on Windows
+          # `10.0.19041.1165`.
+          sig { returns(T.nilable(String)) }
+          attr_reader :os_version
+
+          sig { params(os_version: String).void }
+          attr_writer :os_version
+
+          # Optional field specifying a variant of the CPU, for example `v7` to specify
+          # ARMv7 when architecture is `arm`.
+          sig { returns(T.nilable(String)) }
+          attr_reader :variant
+
+          sig { params(variant: String).void }
+          attr_writer :variant
+
+          # Describes the platform which the image in the manifest runs on, as defined in
+          # the
+          # [OCI Image Index Specification](https://github.com/opencontainers/image-spec/blob/v1.0.1/image-index.md).
+          sig do
+            params(
+              architecture: String,
+              os: String,
+              os_features: T::Array[String],
+              os_version: String,
+              variant: String
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            # The CPU architecture, for example `amd64` or `ppc64`.
+            architecture: nil,
+            # The operating system, for example `linux` or `windows`.
+            os: nil,
+            # Optional field specifying an array of strings, each listing a required OS
+            # feature (for example on Windows `win32k`).
+            os_features: nil,
+            # Optional field specifying the operating system version, for example on Windows
+            # `10.0.19041.1165`.
+            os_version: nil,
+            # Optional field specifying a variant of the CPU, for example `v7` to specify
+            # ARMv7 when architecture is `arm`.
+            variant: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                architecture: String,
+                os: String,
+                os_features: T::Array[String],
+                os_version: String,
+                variant: String
+              }
+            )
+          end
+          def to_hash
+          end
+        end
+      end
+
+      class Mount < DockerEngine::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              DockerEngine::Container::Mount,
+              DockerEngine::Internal::AnyHash
+            )
+          end
+
+        # Destination is the path relative to the container root (`/`) where the `Source`
+        # is mounted inside the container.
+        sig { returns(T.nilable(String)) }
+        attr_reader :destination
+
+        sig { params(destination: String).void }
+        attr_writer :destination
+
+        # Driver is the volume driver used to create the volume (if it is a volume).
+        sig { returns(T.nilable(String)) }
+        attr_reader :driver
+
+        sig { params(driver: String).void }
+        attr_writer :driver
+
+        # Mode is a comma separated list of options supplied by the user when creating the
+        # bind/volume mount.
+        #
+        # The default is platform-specific (`"z"` on Linux, empty on Windows).
+        sig { returns(T.nilable(String)) }
+        attr_reader :mode
+
+        sig { params(mode: String).void }
+        attr_writer :mode
+
+        # Name is the name reference to the underlying data defined by `Source` e.g., the
+        # volume name.
+        sig { returns(T.nilable(String)) }
+        attr_reader :name
+
+        sig { params(name: String).void }
+        attr_writer :name
+
+        # Propagation describes how mounts are propagated from the host into the mount
+        # point, and vice-versa. Refer to the
+        # [Linux kernel documentation](https://www.kernel.org/doc/Documentation/filesystems/sharedsubtree.txt)
+        # for details. This field is not used on Windows.
+        sig { returns(T.nilable(String)) }
+        attr_reader :propagation
+
+        sig { params(propagation: String).void }
+        attr_writer :propagation
+
+        # Whether the mount is mounted writable (read-write).
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :rw
+
+        sig { params(rw: T::Boolean).void }
+        attr_writer :rw
+
+        # Source location of the mount.
+        #
+        # For volumes, this contains the storage location of the volume (within
+        # `/var/lib/docker/volumes/`). For bind-mounts, and `npipe`, this contains the
+        # source (host) part of the bind-mount. For `tmpfs` mount points, this field is
+        # empty.
+        sig { returns(T.nilable(String)) }
+        attr_reader :source
+
+        sig { params(source: String).void }
+        attr_writer :source
+
+        # The mount type. Available types:
+        #
+        # - `bind` a mount of a file or directory from the host into the container.
+        # - `cluster` a Swarm cluster volume.
+        # - `image` an OCI image.
+        # - `npipe` a named pipe from the host into the container.
+        # - `tmpfs` a `tmpfs`.
+        # - `volume` a docker volume with the given `Name`.
+        sig do
+          returns(T.nilable(DockerEngine::Container::Mount::Type::TaggedSymbol))
+        end
+        attr_reader :type
+
+        sig do
+          params(type: DockerEngine::Container::Mount::Type::OrSymbol).void
+        end
+        attr_writer :type
+
+        # MountPoint represents a mount point configuration inside the container. This is
+        # used for reporting the mountpoints in use by a container.
+        sig do
+          params(
+            destination: String,
+            driver: String,
+            mode: String,
+            name: String,
+            propagation: String,
+            rw: T::Boolean,
+            source: String,
+            type: DockerEngine::Container::Mount::Type::OrSymbol
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # Destination is the path relative to the container root (`/`) where the `Source`
+          # is mounted inside the container.
+          destination: nil,
+          # Driver is the volume driver used to create the volume (if it is a volume).
+          driver: nil,
+          # Mode is a comma separated list of options supplied by the user when creating the
+          # bind/volume mount.
+          #
+          # The default is platform-specific (`"z"` on Linux, empty on Windows).
+          mode: nil,
+          # Name is the name reference to the underlying data defined by `Source` e.g., the
+          # volume name.
+          name: nil,
+          # Propagation describes how mounts are propagated from the host into the mount
+          # point, and vice-versa. Refer to the
+          # [Linux kernel documentation](https://www.kernel.org/doc/Documentation/filesystems/sharedsubtree.txt)
+          # for details. This field is not used on Windows.
+          propagation: nil,
+          # Whether the mount is mounted writable (read-write).
+          rw: nil,
+          # Source location of the mount.
+          #
+          # For volumes, this contains the storage location of the volume (within
+          # `/var/lib/docker/volumes/`). For bind-mounts, and `npipe`, this contains the
+          # source (host) part of the bind-mount. For `tmpfs` mount points, this field is
+          # empty.
+          source: nil,
+          # The mount type. Available types:
+          #
+          # - `bind` a mount of a file or directory from the host into the container.
+          # - `cluster` a Swarm cluster volume.
+          # - `image` an OCI image.
+          # - `npipe` a named pipe from the host into the container.
+          # - `tmpfs` a `tmpfs`.
+          # - `volume` a docker volume with the given `Name`.
+          type: nil
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              destination: String,
+              driver: String,
+              mode: String,
+              name: String,
+              propagation: String,
+              rw: T::Boolean,
+              source: String,
+              type: DockerEngine::Container::Mount::Type::TaggedSymbol
+            }
+          )
+        end
+        def to_hash
+        end
+
+        # The mount type. Available types:
+        #
+        # - `bind` a mount of a file or directory from the host into the container.
+        # - `cluster` a Swarm cluster volume.
+        # - `image` an OCI image.
+        # - `npipe` a named pipe from the host into the container.
+        # - `tmpfs` a `tmpfs`.
+        # - `volume` a docker volume with the given `Name`.
+        module Type
+          extend DockerEngine::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias { T.all(Symbol, DockerEngine::Container::Mount::Type) }
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          BIND =
+            T.let(:bind, DockerEngine::Container::Mount::Type::TaggedSymbol)
+          CLUSTER =
+            T.let(:cluster, DockerEngine::Container::Mount::Type::TaggedSymbol)
+          IMAGE =
+            T.let(:image, DockerEngine::Container::Mount::Type::TaggedSymbol)
+          NPIPE =
+            T.let(:npipe, DockerEngine::Container::Mount::Type::TaggedSymbol)
+          TMPFS =
+            T.let(:tmpfs, DockerEngine::Container::Mount::Type::TaggedSymbol)
+          VOLUME =
+            T.let(:volume, DockerEngine::Container::Mount::Type::TaggedSymbol)
+
+          sig do
+            override.returns(
+              T::Array[DockerEngine::Container::Mount::Type::TaggedSymbol]
+            )
+          end
+          def self.values
+          end
+        end
+      end
+
+      class NetworkSettings < DockerEngine::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              DockerEngine::Container::NetworkSettings,
+              DockerEngine::Internal::AnyHash
+            )
+          end
+
+        # Information about all networks that the container is connected to.
+        sig do
+          returns(
+            T.nilable(
+              T::Hash[Symbol, DockerEngine::Container::NetworkSettings::Network]
+            )
+          )
+        end
+        attr_reader :networks
+
+        sig do
+          params(
+            networks:
+              T::Hash[
+                Symbol,
+                DockerEngine::Container::NetworkSettings::Network::OrHash
+              ]
+          ).void
+        end
+        attr_writer :networks
+
+        # PortMap describes the mapping of container ports to host ports, using the
+        # container's port-number and protocol as key in the format `<port>/<protocol>`,
+        # for example, `80/udp`.
+        #
+        # If a container's port is mapped for multiple protocols, separate entries are
+        # added to the mapping table.
+        sig do
+          returns(
+            T.nilable(
+              T::Hash[
+                Symbol,
+                T::Array[DockerEngine::Container::NetworkSettings::Port]
+              ]
+            )
+          )
+        end
+        attr_reader :ports
+
+        sig do
+          params(
+            ports:
+              T::Hash[
+                Symbol,
+                T::Array[DockerEngine::Container::NetworkSettings::Port::OrHash]
+              ]
+          ).void
+        end
+        attr_writer :ports
+
+        # SandboxID uniquely represents a container's network stack.
+        sig { returns(T.nilable(String)) }
+        attr_reader :sandbox_id
+
+        sig { params(sandbox_id: String).void }
+        attr_writer :sandbox_id
+
+        # SandboxKey is the full path of the netns handle
+        sig { returns(T.nilable(String)) }
+        attr_reader :sandbox_key
+
+        sig { params(sandbox_key: String).void }
+        attr_writer :sandbox_key
+
+        # NetworkSettings exposes the network settings in the API
+        sig do
+          params(
+            networks:
+              T::Hash[
+                Symbol,
+                DockerEngine::Container::NetworkSettings::Network::OrHash
+              ],
+            ports:
+              T::Hash[
+                Symbol,
+                T::Array[DockerEngine::Container::NetworkSettings::Port::OrHash]
+              ],
+            sandbox_id: String,
+            sandbox_key: String
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # Information about all networks that the container is connected to.
+          networks: nil,
+          # PortMap describes the mapping of container ports to host ports, using the
+          # container's port-number and protocol as key in the format `<port>/<protocol>`,
+          # for example, `80/udp`.
+          #
+          # If a container's port is mapped for multiple protocols, separate entries are
+          # added to the mapping table.
+          ports: nil,
+          # SandboxID uniquely represents a container's network stack.
+          sandbox_id: nil,
+          # SandboxKey is the full path of the netns handle
+          sandbox_key: nil
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              networks:
+                T::Hash[
+                  Symbol,
+                  DockerEngine::Container::NetworkSettings::Network
+                ],
+              ports:
+                T::Hash[
+                  Symbol,
+                  T::Array[DockerEngine::Container::NetworkSettings::Port]
+                ],
+              sandbox_id: String,
+              sandbox_key: String
+            }
+          )
+        end
+        def to_hash
+        end
+
+        class Network < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::NetworkSettings::Network,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          sig { returns(T.nilable(T::Array[String])) }
+          attr_reader :aliases
+
+          sig { params(aliases: T::Array[String]).void }
+          attr_writer :aliases
+
+          # List of all DNS names an endpoint has on a specific network. This list is based
+          # on the container name, network aliases, container short ID, and hostname.
+          #
+          # These DNS names are non-fully qualified but can contain several dots. You can
+          # get fully qualified DNS names by appending `.<network-name>`. For instance, if
+          # container name is `my.ctr` and the network is named `testnet`, `DNSNames` will
+          # contain `my.ctr` and the FQDN will be `my.ctr.testnet`.
+          sig { returns(T.nilable(T::Array[String])) }
+          attr_reader :dns_names
+
+          sig { params(dns_names: T::Array[String]).void }
+          attr_writer :dns_names
+
+          # DriverOpts is a mapping of driver options and values. These options are passed
+          # directly to the driver and are driver specific.
+          sig { returns(T.nilable(T::Hash[Symbol, String])) }
+          attr_accessor :driver_opts
+
+          # Unique ID for the service endpoint in a Sandbox.
+          sig { returns(T.nilable(String)) }
+          attr_reader :endpoint_id
+
+          sig { params(endpoint_id: String).void }
+          attr_writer :endpoint_id
+
+          # Gateway address for this network.
+          sig { returns(T.nilable(String)) }
+          attr_reader :gateway
+
+          sig { params(gateway: String).void }
+          attr_writer :gateway
+
+          # Global IPv6 address.
+          sig { returns(T.nilable(String)) }
+          attr_reader :global_i_pv6_address
+
+          sig { params(global_i_pv6_address: String).void }
+          attr_writer :global_i_pv6_address
+
+          # Mask length of the global IPv6 address.
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :global_i_pv6_prefix_len
+
+          sig { params(global_i_pv6_prefix_len: Integer).void }
+          attr_writer :global_i_pv6_prefix_len
+
+          # This property determines which endpoint will provide the default gateway for a
+          # container. The endpoint with the highest priority will be used. If multiple
+          # endpoints have the same priority, endpoints are lexicographically sorted based
+          # on their network name, and the one that sorts first is picked.
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :gw_priority
+
+          sig { params(gw_priority: Integer).void }
+          attr_writer :gw_priority
+
+          # IPv4 address.
+          sig { returns(T.nilable(String)) }
+          attr_reader :ip_address
+
+          sig { params(ip_address: String).void }
+          attr_writer :ip_address
+
+          # EndpointIPAMConfig represents an endpoint's IPAM configuration.
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::NetworkSettings::Network::IpamConfig
+              )
+            )
+          end
+          attr_reader :ipam_config
+
+          sig do
+            params(
+              ipam_config:
+                T.nilable(
+                  DockerEngine::Container::NetworkSettings::Network::IpamConfig::OrHash
+                )
+            ).void
+          end
+          attr_writer :ipam_config
+
+          # Mask length of the IPv4 address.
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :ip_prefix_len
+
+          sig { params(ip_prefix_len: Integer).void }
+          attr_writer :ip_prefix_len
+
+          # IPv6 gateway address.
+          sig { returns(T.nilable(String)) }
+          attr_reader :i_pv6_gateway
+
+          sig { params(i_pv6_gateway: String).void }
+          attr_writer :i_pv6_gateway
+
+          sig { returns(T.nilable(T::Array[String])) }
+          attr_reader :links
+
+          sig { params(links: T::Array[String]).void }
+          attr_writer :links
+
+          # MAC address for the endpoint on this network. The network driver might ignore
+          # this parameter.
+          sig { returns(T.nilable(String)) }
+          attr_reader :mac_address
+
+          sig { params(mac_address: String).void }
+          attr_writer :mac_address
+
+          # Unique ID of the network.
+          sig { returns(T.nilable(String)) }
+          attr_reader :network_id
+
+          sig { params(network_id: String).void }
+          attr_writer :network_id
+
+          # Configuration for a network endpoint.
+          sig do
+            params(
+              aliases: T::Array[String],
+              dns_names: T::Array[String],
+              driver_opts: T.nilable(T::Hash[Symbol, String]),
+              endpoint_id: String,
+              gateway: String,
+              global_i_pv6_address: String,
+              global_i_pv6_prefix_len: Integer,
+              gw_priority: Integer,
+              ip_address: String,
+              ipam_config:
+                T.nilable(
+                  DockerEngine::Container::NetworkSettings::Network::IpamConfig::OrHash
+                ),
+              ip_prefix_len: Integer,
+              i_pv6_gateway: String,
+              links: T::Array[String],
+              mac_address: String,
+              network_id: String
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            aliases: nil,
+            # List of all DNS names an endpoint has on a specific network. This list is based
+            # on the container name, network aliases, container short ID, and hostname.
+            #
+            # These DNS names are non-fully qualified but can contain several dots. You can
+            # get fully qualified DNS names by appending `.<network-name>`. For instance, if
+            # container name is `my.ctr` and the network is named `testnet`, `DNSNames` will
+            # contain `my.ctr` and the FQDN will be `my.ctr.testnet`.
+            dns_names: nil,
+            # DriverOpts is a mapping of driver options and values. These options are passed
+            # directly to the driver and are driver specific.
+            driver_opts: nil,
+            # Unique ID for the service endpoint in a Sandbox.
+            endpoint_id: nil,
+            # Gateway address for this network.
+            gateway: nil,
+            # Global IPv6 address.
+            global_i_pv6_address: nil,
+            # Mask length of the global IPv6 address.
+            global_i_pv6_prefix_len: nil,
+            # This property determines which endpoint will provide the default gateway for a
+            # container. The endpoint with the highest priority will be used. If multiple
+            # endpoints have the same priority, endpoints are lexicographically sorted based
+            # on their network name, and the one that sorts first is picked.
+            gw_priority: nil,
+            # IPv4 address.
+            ip_address: nil,
+            # EndpointIPAMConfig represents an endpoint's IPAM configuration.
+            ipam_config: nil,
+            # Mask length of the IPv4 address.
+            ip_prefix_len: nil,
+            # IPv6 gateway address.
+            i_pv6_gateway: nil,
+            links: nil,
+            # MAC address for the endpoint on this network. The network driver might ignore
+            # this parameter.
+            mac_address: nil,
+            # Unique ID of the network.
+            network_id: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                aliases: T::Array[String],
+                dns_names: T::Array[String],
+                driver_opts: T.nilable(T::Hash[Symbol, String]),
+                endpoint_id: String,
+                gateway: String,
+                global_i_pv6_address: String,
+                global_i_pv6_prefix_len: Integer,
+                gw_priority: Integer,
+                ip_address: String,
+                ipam_config:
+                  T.nilable(
+                    DockerEngine::Container::NetworkSettings::Network::IpamConfig
+                  ),
+                ip_prefix_len: Integer,
+                i_pv6_gateway: String,
+                links: T::Array[String],
+                mac_address: String,
+                network_id: String
+              }
+            )
+          end
+          def to_hash
+          end
+
+          class IpamConfig < DockerEngine::Internal::Type::BaseModel
+            OrHash =
+              T.type_alias do
+                T.any(
+                  DockerEngine::Container::NetworkSettings::Network::IpamConfig,
+                  DockerEngine::Internal::AnyHash
+                )
+              end
+
+            sig { returns(T.nilable(String)) }
+            attr_reader :i_pv4_address
+
+            sig { params(i_pv4_address: String).void }
+            attr_writer :i_pv4_address
+
+            sig { returns(T.nilable(String)) }
+            attr_reader :i_pv6_address
+
+            sig { params(i_pv6_address: String).void }
+            attr_writer :i_pv6_address
+
+            sig { returns(T.nilable(T::Array[String])) }
+            attr_reader :link_local_ips
+
+            sig { params(link_local_ips: T::Array[String]).void }
+            attr_writer :link_local_ips
+
+            # EndpointIPAMConfig represents an endpoint's IPAM configuration.
+            sig do
+              params(
+                i_pv4_address: String,
+                i_pv6_address: String,
+                link_local_ips: T::Array[String]
+              ).returns(T.attached_class)
+            end
+            def self.new(
+              i_pv4_address: nil,
+              i_pv6_address: nil,
+              link_local_ips: nil
+            )
+            end
+
+            sig do
+              override.returns(
+                {
+                  i_pv4_address: String,
+                  i_pv6_address: String,
+                  link_local_ips: T::Array[String]
+                }
+              )
+            end
+            def to_hash
+            end
+          end
+        end
+
+        class Port < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::NetworkSettings::Port,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Host IP address that the container's port is mapped to.
+          sig { returns(T.nilable(String)) }
+          attr_reader :host_ip
+
+          sig { params(host_ip: String).void }
+          attr_writer :host_ip
+
+          # Host port number that the container's port is mapped to.
+          sig { returns(T.nilable(String)) }
+          attr_reader :host_port
+
+          sig { params(host_port: String).void }
+          attr_writer :host_port
+
+          # PortBinding represents a binding between a host IP address and a host port.
+          sig do
+            params(host_ip: String, host_port: String).returns(T.attached_class)
+          end
+          def self.new(
+            # Host IP address that the container's port is mapped to.
+            host_ip: nil,
+            # Host port number that the container's port is mapped to.
+            host_port: nil
+          )
+          end
+
+          sig { override.returns({ host_ip: String, host_port: String }) }
+          def to_hash
+          end
+        end
+      end
+
+      class State < DockerEngine::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              DockerEngine::Container::State,
+              DockerEngine::Internal::AnyHash
+            )
+          end
+
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :dead
+
+        sig { params(dead: T::Boolean).void }
+        attr_writer :dead
+
+        sig { returns(T.nilable(String)) }
+        attr_reader :error
+
+        sig { params(error: String).void }
+        attr_writer :error
+
+        # The last exit code of this container
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :exit_code
+
+        sig { params(exit_code: Integer).void }
+        attr_writer :exit_code
+
+        # The time when this container last exited.
+        sig { returns(T.nilable(String)) }
+        attr_reader :finished_at
+
+        sig { params(finished_at: String).void }
+        attr_writer :finished_at
+
+        # Health stores information about the container's healthcheck results.
+        sig { returns(T.nilable(DockerEngine::Container::State::Health)) }
+        attr_reader :health
+
+        sig do
+          params(
+            health: T.nilable(DockerEngine::Container::State::Health::OrHash)
+          ).void
+        end
+        attr_writer :health
+
+        # Whether a process within this container has been killed because it ran out of
+        # memory since the container was last started.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :oom_killed
+
+        sig { params(oom_killed: T::Boolean).void }
+        attr_writer :oom_killed
+
+        # Whether this container is paused.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :paused
+
+        sig { params(paused: T::Boolean).void }
+        attr_writer :paused
+
+        # The process ID of this container
+        sig { returns(T.nilable(Integer)) }
+        attr_reader :pid
+
+        sig { params(pid: Integer).void }
+        attr_writer :pid
+
+        # Whether this container is restarting.
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :restarting
+
+        sig { params(restarting: T::Boolean).void }
+        attr_writer :restarting
+
+        # Whether this container is running.
+        #
+        # Note that a running container can be _paused_. The `Running` and `Paused`
+        # booleans are not mutually exclusive:
+        #
+        # When pausing a container (on Linux), the freezer cgroup is used to suspend all
+        # processes in the container. Freezing the process requires the process to be
+        # running. As a result, paused containers are both `Running` _and_ `Paused`.
+        #
+        # Use the `Status` field instead to determine if a container's state is "running".
+        sig { returns(T.nilable(T::Boolean)) }
+        attr_reader :running
+
+        sig { params(running: T::Boolean).void }
+        attr_writer :running
+
+        # The time when this container was last started.
+        sig { returns(T.nilable(String)) }
+        attr_reader :started_at
+
+        sig { params(started_at: String).void }
+        attr_writer :started_at
+
+        # String representation of the container state. Can be one of "created",
+        # "running", "paused", "restarting", "removing", "exited", or "dead".
+        sig do
+          returns(
+            T.nilable(DockerEngine::Container::State::Status::TaggedSymbol)
+          )
+        end
+        attr_reader :status
+
+        sig do
+          params(status: DockerEngine::Container::State::Status::OrSymbol).void
+        end
+        attr_writer :status
+
+        # ContainerState stores container's running state. It's part of ContainerJSONBase
+        # and will be returned by the "inspect" command.
+        sig do
+          params(
+            dead: T::Boolean,
+            error: String,
+            exit_code: Integer,
+            finished_at: String,
+            health: T.nilable(DockerEngine::Container::State::Health::OrHash),
+            oom_killed: T::Boolean,
+            paused: T::Boolean,
+            pid: Integer,
+            restarting: T::Boolean,
+            running: T::Boolean,
+            started_at: String,
+            status: DockerEngine::Container::State::Status::OrSymbol
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          dead: nil,
+          error: nil,
+          # The last exit code of this container
+          exit_code: nil,
+          # The time when this container last exited.
+          finished_at: nil,
+          # Health stores information about the container's healthcheck results.
+          health: nil,
+          # Whether a process within this container has been killed because it ran out of
+          # memory since the container was last started.
+          oom_killed: nil,
+          # Whether this container is paused.
+          paused: nil,
+          # The process ID of this container
+          pid: nil,
+          # Whether this container is restarting.
+          restarting: nil,
+          # Whether this container is running.
+          #
+          # Note that a running container can be _paused_. The `Running` and `Paused`
+          # booleans are not mutually exclusive:
+          #
+          # When pausing a container (on Linux), the freezer cgroup is used to suspend all
+          # processes in the container. Freezing the process requires the process to be
+          # running. As a result, paused containers are both `Running` _and_ `Paused`.
+          #
+          # Use the `Status` field instead to determine if a container's state is "running".
+          running: nil,
+          # The time when this container was last started.
+          started_at: nil,
+          # String representation of the container state. Can be one of "created",
+          # "running", "paused", "restarting", "removing", "exited", or "dead".
+          status: nil
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              dead: T::Boolean,
+              error: String,
+              exit_code: Integer,
+              finished_at: String,
+              health: T.nilable(DockerEngine::Container::State::Health),
+              oom_killed: T::Boolean,
+              paused: T::Boolean,
+              pid: Integer,
+              restarting: T::Boolean,
+              running: T::Boolean,
+              started_at: String,
+              status: DockerEngine::Container::State::Status::TaggedSymbol
+            }
+          )
+        end
+        def to_hash
+        end
+
+        class Health < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::State::Health,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # FailingStreak is the number of consecutive failures
+          sig { returns(T.nilable(Integer)) }
+          attr_reader :failing_streak
+
+          sig { params(failing_streak: Integer).void }
+          attr_writer :failing_streak
+
+          # Log contains the last few results (oldest first)
+          sig do
+            returns(
+              T.nilable(
+                T::Array[T.nilable(DockerEngine::Container::State::Health::Log)]
+              )
+            )
+          end
+          attr_reader :log
+
+          sig do
+            params(
+              log:
+                T::Array[
+                  T.nilable(DockerEngine::Container::State::Health::Log::OrHash)
+                ]
+            ).void
+          end
+          attr_writer :log
+
+          # Status is one of `none`, `starting`, `healthy` or `unhealthy`
+          #
+          # - "none" Indicates there is no healthcheck
+          # - "starting" Starting indicates that the container is not yet ready
+          # - "healthy" Healthy indicates that the container is running correctly
+          # - "unhealthy" Unhealthy indicates that the container has a problem
+          sig do
+            returns(
+              T.nilable(
+                DockerEngine::Container::State::Health::Status::TaggedSymbol
+              )
+            )
+          end
+          attr_reader :status
+
+          sig do
+            params(
+              status: DockerEngine::Container::State::Health::Status::OrSymbol
+            ).void
+          end
+          attr_writer :status
+
+          # Health stores information about the container's healthcheck results.
+          sig do
+            params(
+              failing_streak: Integer,
+              log:
+                T::Array[
+                  T.nilable(DockerEngine::Container::State::Health::Log::OrHash)
+                ],
+              status: DockerEngine::Container::State::Health::Status::OrSymbol
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            # FailingStreak is the number of consecutive failures
+            failing_streak: nil,
+            # Log contains the last few results (oldest first)
+            log: nil,
+            # Status is one of `none`, `starting`, `healthy` or `unhealthy`
+            #
+            # - "none" Indicates there is no healthcheck
+            # - "starting" Starting indicates that the container is not yet ready
+            # - "healthy" Healthy indicates that the container is running correctly
+            # - "unhealthy" Unhealthy indicates that the container has a problem
+            status: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              {
+                failing_streak: Integer,
+                log:
+                  T::Array[
+                    T.nilable(DockerEngine::Container::State::Health::Log)
+                  ],
+                status:
+                  DockerEngine::Container::State::Health::Status::TaggedSymbol
+              }
+            )
+          end
+          def to_hash
+          end
+
+          class Log < DockerEngine::Internal::Type::BaseModel
+            OrHash =
+              T.type_alias do
+                T.any(
+                  DockerEngine::Container::State::Health::Log,
+                  DockerEngine::Internal::AnyHash
+                )
+              end
+
+            # Date and time at which this check ended in
+            # [RFC 3339](https://www.ietf.org/rfc/rfc3339.txt) format with nano-seconds.
+            sig { returns(T.nilable(String)) }
+            attr_reader :end_
+
+            sig { params(end_: String).void }
+            attr_writer :end_
+
+            # ExitCode meanings:
+            #
+            # - `0` healthy
+            # - `1` unhealthy
+            # - `2` reserved (considered unhealthy)
+            # - other values: error running probe
+            sig { returns(T.nilable(Integer)) }
+            attr_reader :exit_code
+
+            sig { params(exit_code: Integer).void }
+            attr_writer :exit_code
+
+            # Output from last check
+            sig { returns(T.nilable(String)) }
+            attr_reader :output
+
+            sig { params(output: String).void }
+            attr_writer :output
+
+            # Date and time at which this check started in
+            # [RFC 3339](https://www.ietf.org/rfc/rfc3339.txt) format with nano-seconds.
+            sig { returns(T.nilable(Time)) }
+            attr_reader :start
+
+            sig { params(start: Time).void }
+            attr_writer :start
+
+            # HealthcheckResult stores information about a single run of a healthcheck probe
+            sig do
+              params(
+                end_: String,
+                exit_code: Integer,
+                output: String,
+                start: Time
+              ).returns(T.attached_class)
+            end
+            def self.new(
+              # Date and time at which this check ended in
+              # [RFC 3339](https://www.ietf.org/rfc/rfc3339.txt) format with nano-seconds.
+              end_: nil,
+              # ExitCode meanings:
+              #
+              # - `0` healthy
+              # - `1` unhealthy
+              # - `2` reserved (considered unhealthy)
+              # - other values: error running probe
+              exit_code: nil,
+              # Output from last check
+              output: nil,
+              # Date and time at which this check started in
+              # [RFC 3339](https://www.ietf.org/rfc/rfc3339.txt) format with nano-seconds.
+              start: nil
+            )
+            end
+
+            sig do
+              override.returns(
+                {
+                  end_: String,
+                  exit_code: Integer,
+                  output: String,
+                  start: Time
+                }
+              )
+            end
+            def to_hash
+            end
+          end
+
+          # Status is one of `none`, `starting`, `healthy` or `unhealthy`
+          #
+          # - "none" Indicates there is no healthcheck
+          # - "starting" Starting indicates that the container is not yet ready
+          # - "healthy" Healthy indicates that the container is running correctly
+          # - "unhealthy" Unhealthy indicates that the container has a problem
+          module Status
+            extend DockerEngine::Internal::Type::Enum
+
+            TaggedSymbol =
+              T.type_alias do
+                T.all(Symbol, DockerEngine::Container::State::Health::Status)
+              end
+            OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+            NONE =
+              T.let(
+                :none,
+                DockerEngine::Container::State::Health::Status::TaggedSymbol
+              )
+            STARTING =
+              T.let(
+                :starting,
+                DockerEngine::Container::State::Health::Status::TaggedSymbol
+              )
+            HEALTHY =
+              T.let(
+                :healthy,
+                DockerEngine::Container::State::Health::Status::TaggedSymbol
+              )
+            UNHEALTHY =
+              T.let(
+                :unhealthy,
+                DockerEngine::Container::State::Health::Status::TaggedSymbol
+              )
+
+            sig do
+              override.returns(
+                T::Array[
+                  DockerEngine::Container::State::Health::Status::TaggedSymbol
+                ]
+              )
+            end
+            def self.values
+            end
+          end
+        end
+
+        # String representation of the container state. Can be one of "created",
+        # "running", "paused", "restarting", "removing", "exited", or "dead".
+        module Status
+          extend DockerEngine::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(Symbol, DockerEngine::Container::State::Status)
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          CREATED =
+            T.let(
+              :created,
+              DockerEngine::Container::State::Status::TaggedSymbol
+            )
+          RUNNING =
+            T.let(
+              :running,
+              DockerEngine::Container::State::Status::TaggedSymbol
+            )
+          PAUSED =
+            T.let(:paused, DockerEngine::Container::State::Status::TaggedSymbol)
+          RESTARTING =
+            T.let(
+              :restarting,
+              DockerEngine::Container::State::Status::TaggedSymbol
+            )
+          REMOVING =
+            T.let(
+              :removing,
+              DockerEngine::Container::State::Status::TaggedSymbol
+            )
+          EXITED =
+            T.let(:exited, DockerEngine::Container::State::Status::TaggedSymbol)
+          DEAD =
+            T.let(:dead, DockerEngine::Container::State::Status::TaggedSymbol)
+
+          sig do
+            override.returns(
+              T::Array[DockerEngine::Container::State::Status::TaggedSymbol]
+            )
+          end
+          def self.values
+          end
+        end
+      end
+
+      class Storage < DockerEngine::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              DockerEngine::Container::Storage,
+              DockerEngine::Internal::AnyHash
+            )
+          end
+
+        # Information about the storage used for the container's root filesystem.
+        sig { returns(T.nilable(DockerEngine::Container::Storage::RootFs)) }
+        attr_reader :root_fs
+
+        sig do
+          params(root_fs: DockerEngine::Container::Storage::RootFs::OrHash).void
+        end
+        attr_writer :root_fs
+
+        # Information about the storage used by the container.
+        sig do
+          params(
+            root_fs: DockerEngine::Container::Storage::RootFs::OrHash
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # Information about the storage used for the container's root filesystem.
+          root_fs: nil
+        )
+        end
+
+        sig do
+          override.returns(
+            { root_fs: DockerEngine::Container::Storage::RootFs }
+          )
+        end
+        def to_hash
+        end
+
+        class RootFs < DockerEngine::Internal::Type::BaseModel
+          OrHash =
+            T.type_alias do
+              T.any(
+                DockerEngine::Container::Storage::RootFs,
+                DockerEngine::Internal::AnyHash
+              )
+            end
+
+          # Information about a snapshot backend of the container's root filesystem.
+          sig do
+            returns(
+              T.nilable(DockerEngine::Container::Storage::RootFs::Snapshot)
+            )
+          end
+          attr_reader :snapshot
+
+          sig do
+            params(
+              snapshot:
+                DockerEngine::Container::Storage::RootFs::Snapshot::OrHash
+            ).void
+          end
+          attr_writer :snapshot
+
+          # Information about the storage used for the container's root filesystem.
+          sig do
+            params(
+              snapshot:
+                DockerEngine::Container::Storage::RootFs::Snapshot::OrHash
+            ).returns(T.attached_class)
+          end
+          def self.new(
+            # Information about a snapshot backend of the container's root filesystem.
+            snapshot: nil
+          )
+          end
+
+          sig do
+            override.returns(
+              { snapshot: DockerEngine::Container::Storage::RootFs::Snapshot }
+            )
+          end
+          def to_hash
+          end
+
+          class Snapshot < DockerEngine::Internal::Type::BaseModel
+            OrHash =
+              T.type_alias do
+                T.any(
+                  DockerEngine::Container::Storage::RootFs::Snapshot,
+                  DockerEngine::Internal::AnyHash
+                )
+              end
+
+            # Name of the snapshotter.
+            sig { returns(T.nilable(String)) }
+            attr_reader :name
+
+            sig { params(name: String).void }
+            attr_writer :name
+
+            # Information about a snapshot backend of the container's root filesystem.
+            sig { params(name: String).returns(T.attached_class) }
+            def self.new(
+              # Name of the snapshotter.
+              name: nil
+            )
+            end
+
+            sig { override.returns({ name: String }) }
+            def to_hash
+            end
+          end
+        end
+      end
+    end
+  end
+end