@docker/actions-toolkit 0.64.0 → 0.65.0

package/lib/cosign/dockerfile.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export declare const dockerfileContent = "\n# syntax=docker/dockerfile:1\n\nARG GO_VERSION=\"1.24\"\nARG ALPINE_VERSION=\"3.22\"\n\nFROM --platform=$BUILDPLATFORM tonistiigi/xx:1.7.0 AS xx\n\nFROM --platform=$BUILDPLATFORM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS builder-base\nCOPY --from=xx / /\nRUN apk add --no-cache git\nENV GOTOOLCHAIN=auto\nENV CGO_ENABLED=0\nWORKDIR /src\nRUN --mount=type=cache,target=/go/pkg/mod \\\n    --mount=type=bind,source=go.mod,target=go.mod \\\n    --mount=type=bind,source=go.sum,target=go.sum \\\n    go mod download\n\nFROM builder-base AS version\nRUN --mount=type=bind,target=. <<'EOT'\n  git rev-parse HEAD 2>/dev/null || {\n    echo >&2 \"Failed to get git revision, make sure --build-arg BUILDKIT_CONTEXT_KEEP_GIT_DIR=1 is set when building from Git directly\"\n    exit 1\n  }\n  set -ex\n  export PKG=sigs.k8s.io BUILDDATE=$(date -u +\"%Y-%m-%dT%H:%M:%SZ\") TREESTATE=$(if ! git diff --no-ext-diff --quiet --exit-code; then echo dirty; else echo clean; fi) VERSION=$(git describe --match 'v[0-9]*' --dirty='.m' --always --tags) COMMIT=$(git rev-parse HEAD)$(if ! git diff --no-ext-diff --quiet --exit-code; then echo .m; fi);\n  echo \"-X ${PKG}/release-utils/version.gitVersion=${VERSION} -X ${PKG}/release-utils/version.gitCommit=${COMMIT} -X ${PKG}/release-utils/version.gitTreeState=${TREESTATE} -X ${PKG}/release-utils/version.buildDate=${BUILDDATE}\" > /tmp/.ldflags;\n  echo -n \"${VERSION}\" > /tmp/.version;\nEOT\n\nFROM builder-base AS builder\nARG TARGETPLATFORM\nRUN --mount=type=bind,target=. \\\n    --mount=type=cache,target=/root/.cache,id=cosign-$TARGETPLATFORM \\\n    --mount=source=/tmp/.ldflags,target=/tmp/.ldflags,from=version \\\n    --mount=type=cache,target=/go/pkg/mod <<EOT\n  set -ex\n  xx-go build -trimpath -ldflags \"-s -w $(cat /tmp/.ldflags)\" -o /out/cosign ./cmd/cosign\n  xx-verify --static /out/cosign\nEOT\n\nFROM scratch\nCOPY --from=builder /out /\n";

package/lib/cosign/dockerfile.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dockerfileContent = void 0;
+exports.dockerfileContent = `
+# syntax=docker/dockerfile:1
+
+ARG GO_VERSION="1.24"
+ARG ALPINE_VERSION="3.22"
+
+FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.7.0 AS xx
+
+FROM --platform=$BUILDPLATFORM golang:\${GO_VERSION}-alpine\${ALPINE_VERSION} AS builder-base
+COPY --from=xx / /
+RUN apk add --no-cache git
+ENV GOTOOLCHAIN=auto
+ENV CGO_ENABLED=0
+WORKDIR /src
+RUN --mount=type=cache,target=/go/pkg/mod \\
+    --mount=type=bind,source=go.mod,target=go.mod \\
+    --mount=type=bind,source=go.sum,target=go.sum \\
+    go mod download
+
+FROM builder-base AS version
+RUN --mount=type=bind,target=. <<'EOT'
+  git rev-parse HEAD 2>/dev/null || {
+    echo >&2 "Failed to get git revision, make sure --build-arg BUILDKIT_CONTEXT_KEEP_GIT_DIR=1 is set when building from Git directly"
+    exit 1
+  }
+  set -ex
+  export PKG=sigs.k8s.io BUILDDATE=$(date -u +"%Y-%m-%dT%H:%M:%SZ") TREESTATE=$(if ! git diff --no-ext-diff --quiet --exit-code; then echo dirty; else echo clean; fi) VERSION=$(git describe --match 'v[0-9]*' --dirty='.m' --always --tags) COMMIT=$(git rev-parse HEAD)$(if ! git diff --no-ext-diff --quiet --exit-code; then echo .m; fi);
+  echo "-X \${PKG}/release-utils/version.gitVersion=\${VERSION} -X \${PKG}/release-utils/version.gitCommit=\${COMMIT} -X \${PKG}/release-utils/version.gitTreeState=\${TREESTATE} -X \${PKG}/release-utils/version.buildDate=\${BUILDDATE}" > /tmp/.ldflags;
+  echo -n "\${VERSION}" > /tmp/.version;
+EOT
+
+FROM builder-base AS builder
+ARG TARGETPLATFORM
+RUN --mount=type=bind,target=. \\
+    --mount=type=cache,target=/root/.cache,id=cosign-$TARGETPLATFORM \\
+    --mount=source=/tmp/.ldflags,target=/tmp/.ldflags,from=version \\
+    --mount=type=cache,target=/go/pkg/mod <<EOT
+  set -ex
+  xx-go build -trimpath -ldflags "-s -w $(cat /tmp/.ldflags)" -o /out/cosign ./cmd/cosign
+  xx-verify --static /out/cosign
+EOT
+
+FROM scratch
+COPY --from=builder /out /
+`;
+//# sourceMappingURL=dockerfile.js.map

package/lib/cosign/dockerfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerfile.js","sourceRoot":"","sources":["../../src/cosign/dockerfile.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEU,QAAA,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4ChC,CAAC"}

package/lib/cosign/install.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Buildx } from '../buildx/buildx';
+import { DownloadVersion } from '../types/cosign/cosign';
+import { GitHubRelease } from '../types/github';
+export interface InstallOpts {
+    githubToken?: string;
+    buildx?: Buildx;
+}
+export declare class Install {
+    private readonly githubToken;
+    private readonly buildx;
+    constructor(opts?: InstallOpts);
+    download(v: string, ghaNoCache?: boolean, skipState?: boolean): Promise<string>;
+    build(gitContext: string, ghaNoCache?: boolean, skipState?: boolean): Promise<string>;
+    install(binPath: string, dest?: string): Promise<string>;
+    private buildCommand;
+    private filename;
+    private vspec;
+    static getDownloadVersion(v: string): Promise<DownloadVersion>;
+    static getRelease(version: DownloadVersion, githubToken?: string): Promise<GitHubRelease>;
+}

package/lib/cosign/install.js

@@ -0,0 +1,273 @@
+"use strict";
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Install = void 0;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const core = __importStar(require("@actions/core"));
+const tc = __importStar(require("@actions/tool-cache"));
+const semver = __importStar(require("semver"));
+const util = __importStar(require("util"));
+const buildx_1 = require("../buildx/buildx");
+const cache_1 = require("../cache");
+const context_1 = require("../context");
+const exec_1 = require("../exec");
+const git_1 = require("../git");
+const github_1 = require("../github");
+const util_1 = require("../util");
+const dockerfile_1 = require("./dockerfile");
+class Install {
+    constructor(opts) {
+        this.githubToken = (opts === null || opts === void 0 ? void 0 : opts.githubToken) || process.env.GITHUB_TOKEN;
+        this.buildx = (opts === null || opts === void 0 ? void 0 : opts.buildx) || new buildx_1.Buildx();
+    }
+    download(v, ghaNoCache, skipState) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const version = yield Install.getDownloadVersion(v);
+            core.debug(`Install.download version: ${version.version}`);
+            const release = yield Install.getRelease(version, this.githubToken);
+            core.debug(`Install.download release tag name: ${release.tag_name}`);
+            const vspec = yield this.vspec(release.tag_name);
+            core.debug(`Install.download vspec: ${vspec}`);
+            const c = semver.clean(vspec) || '';
+            if (!semver.valid(c)) {
+                throw new Error(`Invalid Cosign version "${vspec}".`);
+            }
+            const installCache = new cache_1.Cache({
+                htcName: 'cosign-dl-bin',
+                htcVersion: vspec,
+                baseCacheDir: path_1.default.join(os_1.default.homedir(), '.bin'),
+                cacheFile: os_1.default.platform() == 'win32' ? 'cosign.exe' : 'cosign',
+                ghaNoCache: ghaNoCache
+            });
+            const cacheFoundPath = yield installCache.find();
+            if (cacheFoundPath) {
+                core.info(`Cosign binary found in ${cacheFoundPath}`);
+                return cacheFoundPath;
+            }
+            const downloadURL = util.format(version.downloadURL, vspec, this.filename());
+            core.info(`Downloading ${downloadURL}`);
+            const htcDownloadPath = yield tc.downloadTool(downloadURL, undefined, this.githubToken);
+            core.debug(`Install.download htcDownloadPath: ${htcDownloadPath}`);
+            const cacheSavePath = yield installCache.save(htcDownloadPath, skipState);
+            core.info(`Cached to ${cacheSavePath}`);
+            return cacheSavePath;
+        });
+    }
+    build(gitContext, ghaNoCache, skipState) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const vspec = yield this.vspec(gitContext);
+            core.debug(`Install.build vspec: ${vspec}`);
+            const installCache = new cache_1.Cache({
+                htcName: 'cosign-build-bin',
+                htcVersion: vspec,
+                baseCacheDir: path_1.default.join(os_1.default.homedir(), '.bin'),
+                cacheFile: os_1.default.platform() == 'win32' ? 'cosign.exe' : 'cosign',
+                ghaNoCache: ghaNoCache
+            });
+            const cacheFoundPath = yield installCache.find();
+            if (cacheFoundPath) {
+                core.info(`Cosign binary found in ${cacheFoundPath}`);
+                return cacheFoundPath;
+            }
+            const outputDir = path_1.default.join(context_1.Context.tmpDir(), 'cosign-build-cache');
+            const buildCmd = yield this.buildCommand(gitContext, outputDir);
+            const buildBinPath = yield exec_1.Exec.getExecOutput(buildCmd.command, buildCmd.args, {
+                ignoreReturnCode: true,
+                input: Buffer.from(dockerfile_1.dockerfileContent)
+            }).then(res => {
+                var _a, _b, _c;
+                if (res.stderr.length > 0 && res.exitCode != 0) {
+                    throw new Error(`build failed with: ${(_c = (_b = (_a = res.stderr.match(/(.*)\s*$/)) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.trim()) !== null && _c !== void 0 ? _c : 'unknown error'}`);
+                }
+                return `${outputDir}/cosign`;
+            });
+            const cacheSavePath = yield installCache.save(buildBinPath, skipState);
+            core.info(`Cached to ${cacheSavePath}`);
+            return cacheSavePath;
+        });
+    }
+    install(binPath, dest) {
+        return __awaiter(this, void 0, void 0, function* () {
+            dest = dest || context_1.Context.tmpDir();
+            const binDir = path_1.default.join(dest, 'cosign-bin');
+            if (!fs_1.default.existsSync(binDir)) {
+                fs_1.default.mkdirSync(binDir, { recursive: true });
+            }
+            const binName = os_1.default.platform() == 'win32' ? 'cosign.exe' : 'cosign';
+            const cosignPath = path_1.default.join(binDir, binName);
+            fs_1.default.copyFileSync(binPath, cosignPath);
+            core.info('Fixing perms');
+            fs_1.default.chmodSync(cosignPath, '0755');
+            core.addPath(binDir);
+            core.info('Added Cosign to PATH');
+            core.info(`Binary path: ${cosignPath}`);
+            return cosignPath;
+        });
+    }
+    buildCommand(gitContext, outputDir) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const buildxStandaloneFound = yield new buildx_1.Buildx({ standalone: true }).isAvailable();
+            const buildxPluginFound = yield new buildx_1.Buildx({ standalone: false }).isAvailable();
+            let buildStandalone = false;
+            if ((yield this.buildx.isStandalone()) && buildxStandaloneFound) {
+                core.debug(`Install.buildCommand: Buildx standalone found, build with it`);
+                buildStandalone = true;
+            }
+            else if (!(yield this.buildx.isStandalone()) && buildxPluginFound) {
+                core.debug(`Install.buildCommand: Buildx plugin found, build with it`);
+                buildStandalone = false;
+            }
+            else if (buildxStandaloneFound) {
+                core.debug(`Install.buildCommand: Buildx plugin not found, but standalone found so trying to build with it`);
+                buildStandalone = true;
+            }
+            else if (buildxPluginFound) {
+                core.debug(`Install.buildCommand: Buildx standalone not found, but plugin found so trying to build with it`);
+                buildStandalone = false;
+            }
+            else {
+                throw new Error(`Neither buildx standalone or plugin have been found to build from ref ${gitContext}`);
+            }
+            const args = ['build', '--platform', 'local', '--build-arg', 'BUILDKIT_CONTEXT_KEEP_GIT_DIR=1', '--output', `type=local,dest=${outputDir}`];
+            if (process.env.GIT_AUTH_TOKEN) {
+                args.push('--secret', 'id=GIT_AUTH_TOKEN');
+            }
+            args.push('-f-', gitContext);
+            // prettier-ignore
+            return yield new buildx_1.Buildx({ standalone: buildStandalone }).getCommand(args);
+        });
+    }
+    filename() {
+        let arch;
+        switch (os_1.default.arch()) {
+            case 'x64': {
+                arch = 'amd64';
+                break;
+            }
+            case 'ppc64': {
+                arch = 'ppc64le';
+                break;
+            }
+            default: {
+                arch = os_1.default.arch();
+                break;
+            }
+        }
+        const platform = os_1.default.platform() == 'win32' ? 'windows' : os_1.default.platform();
+        const ext = os_1.default.platform() == 'win32' ? '.exe' : '';
+        return util.format('cosign-%s-%s%s', platform, arch, ext);
+    }
+    vspec(versionOrRef) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!util_1.Util.isValidRef(versionOrRef)) {
+                const v = versionOrRef.replace(/^v+|v+$/g, '');
+                core.info(`Use ${v} version spec cache key for ${versionOrRef}`);
+                return v;
+            }
+            // eslint-disable-next-line prefer-const
+            let [baseURL, ref] = versionOrRef.split('#');
+            if (ref.length == 0) {
+                ref = 'master';
+            }
+            let sha;
+            if (ref.match(/^[0-9a-fA-F]{40}$/)) {
+                sha = ref;
+            }
+            else {
+                sha = yield git_1.Git.remoteSha(baseURL, ref, process.env.GIT_AUTH_TOKEN);
+            }
+            const [owner, repo] = baseURL.substring('https://github.com/'.length).split('/');
+            const key = `${owner}/${util_1.Util.trimSuffix(repo, '.git')}/${sha}`;
+            const hash = util_1.Util.hash(key);
+            core.info(`Use ${hash} version spec cache key for ${key}`);
+            return hash;
+        });
+    }
+    static getDownloadVersion(v) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return {
+                version: v,
+                downloadURL: 'https://github.com/sigstore/cosign/releases/download/v%s/%s',
+                contentOpts: {
+                    owner: 'docker',
+                    repo: 'actions-toolkit',
+                    ref: 'main',
+                    path: '.github/cosign-releases.json'
+                }
+            };
+        });
+    }
+    static getRelease(version, githubToken) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const github = new github_1.GitHub({ token: githubToken });
+            const releases = yield github.releases('Cosign', version.contentOpts);
+            if (!releases[version.version]) {
+                throw new Error(`Cannot find Cosign release ${version.version} in releases JSON`);
+            }
+            return releases[version.version];
+        });
+    }
+}
+exports.Install = Install;
+//# sourceMappingURL=install.js.map

package/lib/cosign/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/cosign/install.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,oDAAsC;AACtC,wDAA0C;AAC1C,+CAAiC;AACjC,2CAA6B;AAE7B,6CAAwC;AACxC,oCAA+B;AAC/B,wCAAmC;AACnC,kCAA6B;AAC7B,gCAA2B;AAC3B,sCAAiC;AACjC,kCAA6B;AAI7B,6CAA+C;AAO/C,MAAa,OAAO;IAIlB,YAAY,IAAkB;QAC5B,IAAI,CAAC,WAAW,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,KAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACjE,IAAI,CAAC,MAAM,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,KAAI,IAAI,eAAM,EAAE,CAAC;IAC7C,CAAC;IAEY,QAAQ,CAAC,CAAS,EAAE,UAAoB,EAAE,SAAmB;;YACxE,MAAM,OAAO,GAAoB,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAE3D,MAAM,OAAO,GAAkB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,sCAAsC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAErE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YAE/C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,IAAI,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,aAAK,CAAC;gBAC7B,OAAO,EAAE,eAAe;gBACxB,UAAU,EAAE,KAAK;gBACjB,YAAY,EAAE,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC;gBAC7C,SAAS,EAAE,YAAE,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;gBAC7D,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,0BAA0B,cAAc,EAAE,CAAC,CAAC;gBACtD,OAAO,cAAc,CAAC;YACxB,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;YAExC,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACxF,IAAI,CAAC,KAAK,CAAC,qCAAqC,eAAe,EAAE,CAAC,CAAC;YAEnE,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,aAAa,aAAa,EAAE,CAAC,CAAC;YACxC,OAAO,aAAa,CAAC;QACvB,CAAC;KAAA;IAEY,KAAK,CAAC,UAAkB,EAAE,UAAoB,EAAE,SAAmB;;YAC9E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;YAE5C,MAAM,YAAY,GAAG,IAAI,aAAK,CAAC;gBAC7B,OAAO,EAAE,kBAAkB;gBAC3B,UAAU,EAAE,KAAK;gBACjB,YAAY,EAAE,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC;gBAC7C,SAAS,EAAE,YAAE,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;gBAC7D,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,0BAA0B,cAAc,EAAE,CAAC,CAAC;gBACtD,OAAO,cAAc,CAAC;YACxB,CAAC;YAED,MAAM,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,iBAAO,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAEhE,MAAM,YAAY,GAAG,MAAM,WAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;gBAC7E,gBAAgB,EAAE,IAAI;gBACtB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,8BAAiB,CAAC;aACtC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;;gBACZ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAA,MAAA,MAAA,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,0CAAG,CAAC,CAAC,0CAAE,IAAI,EAAE,mCAAI,eAAe,EAAE,CAAC,CAAC;gBACxG,CAAC;gBACD,OAAO,GAAG,SAAS,SAAS,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI,CAAC,aAAa,aAAa,EAAE,CAAC,CAAC;YACxC,OAAO,aAAa,CAAC;QACvB,CAAC;KAAA;IAEY,OAAO,CAAC,OAAe,EAAE,IAAa;;YACjD,IAAI,GAAG,IAAI,IAAI,iBAAO,CAAC,MAAM,EAAE,CAAC;YAEhC,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,YAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,OAAO,GAAW,YAAE,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3E,MAAM,UAAU,GAAW,cAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtD,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAErC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC1B,YAAE,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAEjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAElC,IAAI,CAAC,IAAI,CAAC,gBAAgB,UAAU,EAAE,CAAC,CAAC;YACxC,OAAO,UAAU,CAAC;QACpB,CAAC;KAAA;IAEa,YAAY,CAAC,UAAkB,EAAE,SAAiB;;YAC9D,MAAM,qBAAqB,GAAG,MAAM,IAAI,eAAM,CAAC,EAAC,UAAU,EAAE,IAAI,EAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACjF,MAAM,iBAAiB,GAAG,MAAM,IAAI,eAAM,CAAC,EAAC,UAAU,EAAE,KAAK,EAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAE9E,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC;gBAChE,IAAI,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBAC3E,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC;gBACpE,IAAI,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACvE,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;iBAAM,IAAI,qBAAqB,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,gGAAgG,CAAC,CAAC;gBAC7G,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC;iBAAM,IAAI,iBAAiB,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,gGAAgG,CAAC,CAAC;gBAC7G,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,yEAAyE,UAAU,EAAE,CAAC,CAAC;YACzG,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,iCAAiC,EAAE,UAAU,EAAE,mBAAmB,SAAS,EAAE,CAAC,CAAC;YAC5I,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAE7B,kBAAkB;YAClB,OAAO,MAAM,IAAI,eAAM,CAAC,EAAC,UAAU,EAAE,eAAe,EAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;KAAA;IAEO,QAAQ;QACd,IAAI,IAAY,CAAC;QACjB,QAAQ,YAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,IAAI,GAAG,OAAO,CAAC;gBACf,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,GAAG,SAAS,CAAC;gBACjB,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,IAAI,GAAG,YAAE,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM;YACR,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAW,YAAE,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAE,CAAC,QAAQ,EAAE,CAAC;QAC9E,MAAM,GAAG,GAAW,YAAE,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAEa,KAAK,CAAC,YAAoB;;YACtC,IAAI,CAAC,WAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;gBACjE,OAAO,CAAC,CAAC;YACX,CAAC;YAED,wCAAwC;YACxC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACpB,GAAG,GAAG,QAAQ,CAAC;YACjB,CAAC;YAED,IAAI,GAAW,CAAC;YAChB,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACnC,GAAG,GAAG,GAAG,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,MAAM,SAAG,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjF,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,WAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,WAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,+BAA+B,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAEM,MAAM,CAAO,kBAAkB,CAAC,CAAS;;YAC9C,OAAO;gBACL,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,6DAA6D;gBAC1E,WAAW,EAAE;oBACX,KAAK,EAAE,QAAQ;oBACf,IAAI,EAAE,iBAAiB;oBACvB,GAAG,EAAE,MAAM;oBACX,IAAI,EAAE,8BAA8B;iBACrC;aACF,CAAC;QACJ,CAAC;KAAA;IAEM,MAAM,CAAO,UAAU,CAAC,OAAwB,EAAE,WAAoB;;YAC3E,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAC,KAAK,EAAE,WAAW,EAAC,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,OAAO,mBAAmB,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;KAAA;CACF;AA9MD,0BA8MC"}

package/lib/docker/assets.d.ts

@@ -18,4 +18,4 @@ export declare const dockerServiceLogsPs1: () => string;
 export declare const limaYaml: () => string;
 export declare const setupDockerWinPs1Data = "\n[CmdletBinding()]\nparam(\n    [Parameter(Mandatory = $true)]\n    [string]$ToolDir,\n\n    [Parameter(Mandatory = $true)]\n    [string]$RunDir,\n\n    [Parameter(Mandatory = $true)]\n    [string]$DockerHostSocket,\n\n    [Parameter(Mandatory = $false)]\n    [string]$DockerHostTCP,\n\n    [Parameter(Mandatory = $false)]\n    [string]$DaemonConfig)\n\n$pwver = (Get-ItemProperty -Path HKLM:\\SOFTWARE\\Microsoft\\PowerShell\\3\\PowerShellEngine -Name 'PowerShellVersion').PowerShellVersion\nWrite-Host \"PowerShell version: $pwver\"\n\n# Create run directory\nNew-Item -ItemType Directory \"$RunDir\" -ErrorAction SilentlyContinue | Out-Null\n\n# Remove existing service\nif (Get-Service docker -ErrorAction SilentlyContinue) {\n  $dockerVersion = (docker version -f \"{{.Server.Version}}\")\n  Write-Host \"Current installed Docker version: $dockerVersion\"\n  # stop service\n  Stop-Service -Force -Name docker\n  Write-Host \"Service stopped\"\n  # remove service\n  sc.exe delete \"docker\"\n  # removes event log entry. we could use \"Remove-EventLog -LogName -Source docker\"\n  # but this cmd is not available atm\n  $ErrorActionPreference = \"SilentlyContinue\"\n  & reg delete \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\EventLog\\Application\\docker\" /f 2>&1 | Out-Null\n  $ErrorActionPreference = \"Stop\"\n  Write-Host \"Service removed\"\n}\n\n$env:Path = \"$ToolDir;\" + [System.Environment]::GetEnvironmentVariable(\"Path\",\"Machine\") + \";\" + [System.Environment]::GetEnvironmentVariable(\"Path\",\"User\")\nWrite-Host \"Path: $env:Path\"\n\n$env:DOCKER_HOST = $DockerHostSocket\nWrite-Host \"DOCKER_HOST: $env:DOCKER_HOST\"\n\nif ($DaemonConfig) {\n  Write-Host \"Writing Docker daemon config\"\n  New-Item -ItemType Directory -Force -Path \"$env:ProgramData\\Docker\\config\"\n  $DaemonConfig | Out-File -FilePath \"$env:ProgramData\\Docker\\config\\daemon.json\"\n}\n\n$arguments = @(\n  \"--host=$DockerHostSocket\",\n  \"--data-root=$RunDir\\\\moby-root\",\n  \"--exec-root=$RunDir\\\\moby-exec\",\n  \"--pidfile=$RunDir\\\\docker.pid\",\n  \"--register-service\"\n)\nif ($DockerHostTCP) {\n  $arguments += \"--host=$DockerHostTCP\"\n}\n\nWrite-Host \"Creating service\"\nNew-Item -ItemType Directory \"$RunDir\\moby-root\" -ErrorAction SilentlyContinue | Out-Null\nNew-Item -ItemType Directory \"$RunDir\\moby-exec\" -ErrorAction SilentlyContinue | Out-Null\nStart-Process -Wait -NoNewWindow \"$ToolDir\\dockerd\" -ArgumentList $arguments\nWrite-Host \"Starting service\"\nStart-Service -Name docker\nWrite-Host \"Service started successfully!\"\n\n$tries=20\nWrite-Host \"Waiting for Docker daemon to start...\"\nWhile ($true) {\n  $ErrorActionPreference = \"SilentlyContinue\"\n  & \"$ToolDir\\docker\" version | Out-Null\n  $ErrorActionPreference = \"Stop\"\n  If ($LastExitCode -eq 0) {\n    break\n  }\n  $tries--\n  If ($tries -le 0) {\n    Throw \"Failed to get a response from Docker daemon\"\n  }\n  Write-Host -NoNewline \".\"\n  Start-Sleep -Seconds 1\n}\nWrite-Host \"Docker daemon started successfully!\"\n";
 export declare const dockerServiceLogsPs1Data = "\nGet-WinEvent -ea SilentlyContinue `\n  -FilterHashtable @{ProviderName= \"docker\"; LogName = \"application\"} |\n    Sort-Object @{Expression=\"TimeCreated\";Descending=$false} |\n    ForEach-Object {\"$($_.TimeCreated.ToUniversalTime().ToString(\"o\")) [$($_.LevelDisplayName)] $($_.Message)\"}\n";
-export declare const limaYamlData = "\n# Source: https://github.com/lima-vm/lima/blob/master/templates/docker-rootful.yaml\n\n# VM type: \"qemu\" or \"vz\" (on macOS 13 and later).\n# The vmType can be specified only on creating the instance.\n# The vmType of existing instances cannot be changed.\n# Builtin default: \"qemu\"\nvmType: qemu\n\n# OS: \"Linux\".\n# Builtin default: \"Linux\"\nos: null\n\n# Arch: \"default\", \"x86_64\", \"aarch64\".\n# Builtin default: \"default\" (corresponds to the host architecture)\narch: null\n\nimages:\n{{#each customImages}}\n- location: \"{{location}}\"\n  arch: \"{{arch}}\"\n  digest: \"{{digest}}\"\n{{/each}}\n- location: \"https://cloud-images.ubuntu.com/releases/24.04/release-20250228/ubuntu-24.04-server-cloudimg-amd64.img\"\n  arch: \"x86_64\"\n  digest: \"sha256:a3aea891c930ee0c762077b963834f5e083eb8102574f1e4dfc9e6e4c1c73ac0\"\n  kernel:\n    location: \"https://cloud-images.ubuntu.com/releases/24.04/release-20250228/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic\"\n    digest: \"sha256:2d9f30959f01675fd28aa1c2fe8934728e46766d04ecfad2d206823696a3f830\"\n    cmdline: \"root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyAMA0 no_timer_check\"\n  initrd:\n    location: \"https://cloud-images.ubuntu.com/releases/24.04/release-20250228/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic\"\n    digest: \"sha256:231352d027aeebf0bb7dca281dfebae894c86e789c7377788d3c2c149471caa3\"\n- location: \"https://cloud-images.ubuntu.com/releases/24.04/release-20250228/ubuntu-24.04-server-cloudimg-arm64.img\"\n  arch: \"aarch64\"\n  digest: \"sha256:278a0e8475008673d9d3da10ae66a7b1a3dda059746b83d749eca386a5670bd4\"\n# Fallback to the latest release image.\n# Hint: run `limactl prune` to invalidate the cache\n- location: \"https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-amd64.img\"\n  arch: \"x86_64\"\n- location: \"https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-arm64.img\"\n  arch: \"aarch64\"\n\n# CPUs\n# Builtin default: min(4, host CPU cores)\ncpus: null\n\n# Memory size\n# Builtin default: min(\"4GiB\", half of host memory)\nmemory: null\n\n# Disk size\n# Builtin default: \"100GiB\"\ndisk: 60GiB\n\n# Expose host directories to the guest, the mount point might be accessible from all UIDs in the guest\n# Builtin default: null (Mount nothing)\n# This file: Mount the home as read-only, /tmp/lima as writable\nmounts:\n- location: \"~\"\n- location: \"/tmp/lima\"\n  writable: true\n\n# Mount type for above mounts, such as \"reverse-sshfs\" (from sshocker), \"9p\" (EXPERIMENTAL, from QEMU\u2019s virtio-9p-pci, aka virtfs),\n# or \"virtiofs\" (EXPERIMENTAL, needs `vmType: vz`)\n# Builtin default: \"reverse-sshfs\" (for QEMU), \"virtiofs\" (for vz)\nmountType: null\n\ncontainerd:\n  system: false\n  user: false\n\nprovision:\n- mode: system\n  # This script defines the host.docker.internal hostname when hostResolver is disabled.\n  # It is also needed for lima 0.8.2 and earlier, which does not support hostResolver.hosts.\n  # Names defined in /etc/hosts inside the VM are not resolved inside containers when\n  # using the hostResolver; use hostResolver.hosts instead (requires lima 0.8.3 or later).\n  script: |\n    #!/bin/sh\n    sed -i 's/host.lima.internal.*/host.lima.internal host.docker.internal/' /etc/hosts\n- mode: system\n  script: |\n    #!/bin/sh\n    apt-get install -f -y iptables\n- mode: system\n  script: |\n    #!/bin/bash\n    set -eux -o pipefail\n    command -v docker >/dev/null 2>&1 && exit 0\n    if [ ! -e /etc/systemd/system/docker.socket.d/override.conf ]; then\n      mkdir -p /etc/systemd/system/docker.socket.d\n      # Alternatively we could just add the user to the \"docker\" group, but that requires restarting the user session\n      cat <<-EOF >/etc/systemd/system/docker.socket.d/override.conf\n      [Socket]\n      SocketUser=${LIMA_CIDATA_USER}\n    EOF\n    fi\n    if [ ! -e /etc/docker/daemon.json ]; then\n      mkdir -p /etc/docker\n      cat <<-EOF >/etc/docker/daemon.json\n      {{stringify daemonConfig}}\n    EOF\n    fi\n    export DEBIAN_FRONTEND=noninteractive\n    if [ \"{{srcType}}\" == \"archive\" ]; then\n      curl -fsSL https://get.docker.com | sh -s -- --channel {{srcArchiveChannel}} --version {{srcArchiveVersion}}\n      sed -i 's|^ExecStart=.*|ExecStart=/usr/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}} --containerd=/run/containerd/containerd.sock|' /usr/lib/systemd/system/docker.service\n      systemctl daemon-reload\n      systemctl restart docker\n      systemctl status docker.socket || true\n      systemctl status docker.service || true\n    elif [ \"{{srcType}}\" == \"image\" ]; then\n      arch=$(uname -m)\n      case $arch in\n        x86_64) arch=amd64;;\n        aarch64) arch=arm64;;\n      esac\n      url=\"https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_$arch.tar.gz\"\n\n      wget \"$url\" -O /tmp/undock.tar.gz\n      tar -C /usr/local/bin -xvf /tmp/undock.tar.gz\n      undock --version\n\n      HOME=/tmp undock moby/moby-bin:{{srcImageTag}} /usr/local/bin\n\n      wget https://raw.githubusercontent.com/moby/moby/{{gitCommit}}/contrib/init/systemd/docker.service         -O /etc/systemd/system/docker.service\n      wget https://raw.githubusercontent.com/moby/moby/{{gitCommit}}/contrib/init/systemd/docker.socket         -O /etc/systemd/system/docker.socket\n\n      sed -i 's|^ExecStart=.*|ExecStart=/usr/local/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}}|' /etc/systemd/system/docker.service\n      sed -i 's|containerd.service||' /etc/systemd/system/docker.service\n      if ! getent group docker; then\n        groupadd --system docker\n      fi\n      systemctl daemon-reload\n      fail=0\n      if ! systemctl enable --now docker; then\n        fail=1\n      fi\n      systemctl status docker.socket || true\n      systemctl status docker.service || true\n      exit $fail\n    fi\n\nprobes:\n- script: |\n    #!/bin/bash\n    set -eux -o pipefail\n    # Don't check for docker CLI as it's not installed in the VM (only on the host)\n    if ! timeout 30s bash -c \"until pgrep dockerd; do sleep 3; done\"; then\n      echo >&2 \"dockerd is not running\"\n      exit 1\n    fi\n  hint: See \"/var/log/cloud-init-output.log\". in the guest\n\nhostResolver:\n  # hostResolver.hosts requires lima 0.8.3 or later. Names defined here will also\n  # resolve inside containers, and not just inside the VM itself.\n  hosts:\n    host.docker.internal: host.lima.internal\n\nportForwards:\n- guestSocket: \"/var/run/docker.sock\"\n  hostSocket: \"{{dockerSock}}\"\n{{#if localTCPPort}}\n- guestPort: 2375\n  hostPort: {{localTCPPort}}\n{{/if}}\n\naudio:\n  # EXPERIMENTAL\n  # QEMU audiodev, e.g., \"none\", \"coreaudio\", \"pa\", \"alsa\", \"oss\".\n  # VZ driver, use \"vz\" as device name\n  # Choosing \"none\" will mute the audio output, and not play any sound.\n  # Builtin default: \"\"\n  device: none\n";
+export declare const limaYamlData = "\n# Source:\n# - https://github.com/lima-vm/lima/blob/master/templates/docker-rootful.yaml\n# - https://github.com/lima-vm/lima/blob/master/templates/_images/ubuntu-lts.yaml\n# - https://github.com/lima-vm/lima/blob/master/templates/_images/ubuntu-24.04.yaml\n\n# VM type: \"qemu\" or \"vz\" (on macOS 13 and later).\n# The vmType can be specified only on creating the instance.\n# The vmType of existing instances cannot be changed.\n# Builtin default: \"qemu\"\nvmType: qemu\n\n# OS: \"Linux\".\n# Builtin default: \"Linux\"\nos: null\n\n# Arch: \"default\", \"x86_64\", \"aarch64\".\n# Builtin default: \"default\" (corresponds to the host architecture)\narch: null\n\nimages:\n{{#each customImages}}\n- location: \"{{location}}\"\n  arch: \"{{arch}}\"\n  digest: \"{{digest}}\"\n{{/each}}\n- location: \"https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-amd64.img\"\n  arch: \"x86_64\"\n  digest: \"sha256:f1652d29d497fb7c623433705c9fca6525d1311b11294a0f495eed55c7639d1f\"\n  kernel:\n    location: \"https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic\"\n    digest: \"sha256:67cd9af083515de2101de032b49a64fc4b65778e5383df6ef21cf788a3f4688e\"\n    cmdline: \"root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyAMA0 no_timer_check\"\n  initrd:\n    location: \"https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic\"\n    digest: \"sha256:f257d581c44f66da2d80c7c5dc3fa598ce76ef313d6e27b368683e8030a9e8fd\"\n- location: \"https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-arm64.img\"\n  arch: \"aarch64\"\n  digest: \"sha256:bbecbb88100ee65497927ed0da247ba15af576a8855004182cf3c87265e25d35\"\n# Fallback to the latest release image.\n# Hint: run `limactl prune` to invalidate the cache\n- location: https://cloud-images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg-amd64.img\n  arch: \"x86_64\"\n- location: https://cloud-images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg-arm64.img\n  arch: \"aarch64\"\n\n# CPUs\n# Builtin default: min(4, host CPU cores)\ncpus: null\n\n# Memory size\n# Builtin default: min(\"4GiB\", half of host memory)\nmemory: null\n\n# Disk size\n# Builtin default: \"100GiB\"\ndisk: 60GiB\n\n# Expose host directories to the guest, the mount point might be accessible from all UIDs in the guest\n# Builtin default: null (Mount nothing)\n# This file: Mount the home as read-only, /tmp/lima as writable\nmounts:\n- location: \"~\"\n- location: \"/tmp/lima\"\n  writable: true\n\n# Mount type for above mounts, such as \"reverse-sshfs\" (from sshocker), \"9p\" (EXPERIMENTAL, from QEMU\u2019s virtio-9p-pci, aka virtfs),\n# or \"virtiofs\" (EXPERIMENTAL, needs `vmType: vz`)\n# Builtin default: \"reverse-sshfs\" (for QEMU), \"virtiofs\" (for vz)\nmountType: null\n\ncontainerd:\n  system: false\n  user: false\n\nprovision:\n- mode: system\n  # This script defines the host.docker.internal hostname when hostResolver is disabled.\n  # It is also needed for lima 0.8.2 and earlier, which does not support hostResolver.hosts.\n  # Names defined in /etc/hosts inside the VM are not resolved inside containers when\n  # using the hostResolver; use hostResolver.hosts instead (requires lima 0.8.3 or later).\n  script: |\n    #!/bin/sh\n    sed -i 's/host.lima.internal.*/host.lima.internal host.docker.internal/' /etc/hosts\n- mode: system\n  script: |\n    #!/bin/sh\n    apt-get install -f -y iptables\n- mode: system\n  script: |\n    #!/bin/bash\n    set -eux -o pipefail\n    command -v docker >/dev/null 2>&1 && exit 0\n    if [ ! -e /etc/systemd/system/docker.socket.d/override.conf ]; then\n      mkdir -p /etc/systemd/system/docker.socket.d\n      # Alternatively we could just add the user to the \"docker\" group, but that requires restarting the user session\n      cat <<-EOF >/etc/systemd/system/docker.socket.d/override.conf\n      [Socket]\n      SocketUser=${LIMA_CIDATA_USER}\n    EOF\n    fi\n    if [ ! -e /etc/docker/daemon.json ]; then\n      mkdir -p /etc/docker\n      cat <<-EOF >/etc/docker/daemon.json\n      {{stringify daemonConfig}}\n    EOF\n    fi\n    export DEBIAN_FRONTEND=noninteractive\n    if [ \"{{srcType}}\" == \"archive\" ]; then\n      curl -fsSL https://get.docker.com | sh -s -- --channel {{srcArchiveChannel}} --version {{srcArchiveVersion}}\n      sed -i 's|^ExecStart=.*|ExecStart=/usr/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}} --containerd=/run/containerd/containerd.sock|' /usr/lib/systemd/system/docker.service\n      systemctl daemon-reload\n      systemctl restart docker\n      systemctl status docker.socket || true\n      systemctl status docker.service || true\n    elif [ \"{{srcType}}\" == \"image\" ]; then\n      arch=$(uname -m)\n      case $arch in\n        x86_64) arch=amd64;;\n        aarch64) arch=arm64;;\n      esac\n      url=\"https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_$arch.tar.gz\"\n\n      wget \"$url\" -O /tmp/undock.tar.gz\n      tar -C /usr/local/bin -xvf /tmp/undock.tar.gz\n      undock --version\n\n      HOME=/tmp undock moby/moby-bin:{{srcImageTag}} /usr/local/bin\n\n      wget https://raw.githubusercontent.com/moby/moby/{{gitCommit}}/contrib/init/systemd/docker.service         -O /etc/systemd/system/docker.service\n      wget https://raw.githubusercontent.com/moby/moby/{{gitCommit}}/contrib/init/systemd/docker.socket         -O /etc/systemd/system/docker.socket\n\n      sed -i 's|^ExecStart=.*|ExecStart=/usr/local/bin/dockerd -H fd://{{#if localTCPPort}} -H tcp://0.0.0.0:2375{{/if}}|' /etc/systemd/system/docker.service\n      sed -i 's|containerd.service||' /etc/systemd/system/docker.service\n      if ! getent group docker; then\n        groupadd --system docker\n      fi\n      systemctl daemon-reload\n      fail=0\n      if ! systemctl enable --now docker; then\n        fail=1\n      fi\n      systemctl status docker.socket || true\n      systemctl status docker.service || true\n      exit $fail\n    fi\n\nprobes:\n- script: |\n    #!/bin/bash\n    set -eux -o pipefail\n    # Don't check for docker CLI as it's not installed in the VM (only on the host)\n    if ! timeout 60s bash -c \"until pgrep dockerd; do sleep 3; done\"; then\n      echo >&2 \"dockerd is not running\"\n      exit 1\n    fi\n  hint: See \"/var/log/cloud-init-output.log\". in the guest\n\nhostResolver:\n  # Don't use local system resolver\n  enabled: false\n  # hostResolver.hosts requires lima 0.8.3 or later. Names defined here will also\n  # resolve inside containers, and not just inside the VM itself.\n  hosts:\n    host.docker.internal: host.lima.internal\n\n# Use custom DNS servers instead of the host's DNS settings\ndns:\n  - 1.1.1.1\n  - 1.0.0.1\n\nportForwards:\n- guestSocket: \"/var/run/docker.sock\"\n  hostSocket: \"{{dockerSock}}\"\n{{#if localTCPPort}}\n- guestPort: 2375\n  hostPort: {{localTCPPort}}\n{{/if}}\n\naudio:\n  # EXPERIMENTAL\n  # QEMU audiodev, e.g., \"none\", \"coreaudio\", \"pa\", \"alsa\", \"oss\".\n  # VZ driver, use \"vz\" as device name\n  # Choosing \"none\" will mute the audio output, and not play any sound.\n  # Builtin default: \"\"\n  device: none\n";

package/lib/docker/assets.js

@@ -141,7 +141,10 @@ Get-WinEvent -ea SilentlyContinue \`
     ForEach-Object {"$($_.TimeCreated.ToUniversalTime().ToString("o")) [$($_.LevelDisplayName)] $($_.Message)"}
 `;
 exports.limaYamlData = `
-# Source: https://github.com/lima-vm/lima/blob/master/templates/docker-rootful.yaml
+# Source:
+# - https://github.com/lima-vm/lima/blob/master/templates/docker-rootful.yaml
+# - https://github.com/lima-vm/lima/blob/master/templates/_images/ubuntu-lts.yaml
+# - https://github.com/lima-vm/lima/blob/master/templates/_images/ubuntu-24.04.yaml
 
 # VM type: "qemu" or "vz" (on macOS 13 and later).
 # The vmType can be specified only on creating the instance.
@@ -163,24 +166,24 @@ images:
   arch: "{{arch}}"
   digest: "{{digest}}"
 {{/each}}
-- location: "https://cloud-images.ubuntu.com/releases/24.04/release-20250228/ubuntu-24.04-server-cloudimg-amd64.img"
+- location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-amd64.img"
   arch: "x86_64"
-  digest: "sha256:a3aea891c930ee0c762077b963834f5e083eb8102574f1e4dfc9e6e4c1c73ac0"
+  digest: "sha256:f1652d29d497fb7c623433705c9fca6525d1311b11294a0f495eed55c7639d1f"
   kernel:
-    location: "https://cloud-images.ubuntu.com/releases/24.04/release-20250228/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic"
-    digest: "sha256:2d9f30959f01675fd28aa1c2fe8934728e46766d04ecfad2d206823696a3f830"
+    location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-vmlinuz-generic"
+    digest: "sha256:67cd9af083515de2101de032b49a64fc4b65778e5383df6ef21cf788a3f4688e"
     cmdline: "root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyAMA0 no_timer_check"
   initrd:
-    location: "https://cloud-images.ubuntu.com/releases/24.04/release-20250228/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic"
-    digest: "sha256:231352d027aeebf0bb7dca281dfebae894c86e789c7377788d3c2c149471caa3"
-- location: "https://cloud-images.ubuntu.com/releases/24.04/release-20250228/ubuntu-24.04-server-cloudimg-arm64.img"
+    location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/unpacked/ubuntu-24.04-server-cloudimg-amd64-initrd-generic"
+    digest: "sha256:f257d581c44f66da2d80c7c5dc3fa598ce76ef313d6e27b368683e8030a9e8fd"
+- location: "https://cloud-images.ubuntu.com/releases/noble/release-20250704/ubuntu-24.04-server-cloudimg-arm64.img"
   arch: "aarch64"
-  digest: "sha256:278a0e8475008673d9d3da10ae66a7b1a3dda059746b83d749eca386a5670bd4"
+  digest: "sha256:bbecbb88100ee65497927ed0da247ba15af576a8855004182cf3c87265e25d35"
 # Fallback to the latest release image.
 # Hint: run \`limactl prune\` to invalidate the cache
-- location: "https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-amd64.img"
+- location: https://cloud-images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg-amd64.img
   arch: "x86_64"
-- location: "https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-arm64.img"
+- location: https://cloud-images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg-arm64.img
   arch: "aarch64"
 
 # CPUs
@@ -291,18 +294,25 @@ probes:
     #!/bin/bash
     set -eux -o pipefail
     # Don't check for docker CLI as it's not installed in the VM (only on the host)
-    if ! timeout 30s bash -c "until pgrep dockerd; do sleep 3; done"; then
+    if ! timeout 60s bash -c "until pgrep dockerd; do sleep 3; done"; then
       echo >&2 "dockerd is not running"
       exit 1
     fi
   hint: See "/var/log/cloud-init-output.log". in the guest
 
 hostResolver:
+  # Don't use local system resolver
+  enabled: false
   # hostResolver.hosts requires lima 0.8.3 or later. Names defined here will also
   # resolve inside containers, and not just inside the VM itself.
   hosts:
     host.docker.internal: host.lima.internal
 
+# Use custom DNS servers instead of the host's DNS settings
+dns:
+  - 1.1.1.1
+  - 1.0.0.1
+
 portForwards:
 - guestSocket: "/var/run/docker.sock"
   hostSocket: "{{dockerSock}}"

package/lib/docker/assets.js.map

@@ -1 +1 @@
-{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../src/docker/assets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;AAEH,4CAAoB;AACpB,wCAAmC;AAE5B,MAAM,iBAAiB,GAAG,GAAW,EAAE;IAC5C,OAAO,GAAG,CAAC,sBAAsB,EAAE,6BAAqB,CAAC,CAAC;AAC5D,CAAC,CAAC;AAFW,QAAA,iBAAiB,qBAE5B;AAEK,MAAM,oBAAoB,GAAG,GAAW,EAAE;IAC/C,OAAO,GAAG,CAAC,yBAAyB,EAAE,gCAAwB,CAAC,CAAC;AAClE,CAAC,CAAC;AAFW,QAAA,oBAAoB,wBAE/B;AAEK,MAAM,QAAQ,GAAG,GAAW,EAAE;IACnC,OAAO,GAAG,CAAC,WAAW,EAAE,oBAAY,CAAC,CAAC;AACxC,CAAC,CAAC;AAFW,QAAA,QAAQ,YAEnB;AAEF,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAa,EAAU,EAAE;IACpE,MAAM,SAAS,GAAG,iBAAO,CAAC,OAAO,CAAC;QAChC,QAAQ,EAAE,uBAAuB,QAAQ,EAAE;QAC3C,MAAM,EAAE,iBAAO,CAAC,MAAM,EAAE;KACzB,CAAC,CAAC;IACH,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,CAAC;QACT,YAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEW,QAAA,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyFpC,CAAC;AAEW,QAAA,wBAAwB,GAAG;;;;;CAKvC,CAAC;AAEW,QAAA,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkL3B,CAAC"}
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../src/docker/assets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;AAEH,4CAAoB;AACpB,wCAAmC;AAE5B,MAAM,iBAAiB,GAAG,GAAW,EAAE;IAC5C,OAAO,GAAG,CAAC,sBAAsB,EAAE,6BAAqB,CAAC,CAAC;AAC5D,CAAC,CAAC;AAFW,QAAA,iBAAiB,qBAE5B;AAEK,MAAM,oBAAoB,GAAG,GAAW,EAAE;IAC/C,OAAO,GAAG,CAAC,yBAAyB,EAAE,gCAAwB,CAAC,CAAC;AAClE,CAAC,CAAC;AAFW,QAAA,oBAAoB,wBAE/B;AAEK,MAAM,QAAQ,GAAG,GAAW,EAAE;IACnC,OAAO,GAAG,CAAC,WAAW,EAAE,oBAAY,CAAC,CAAC;AACxC,CAAC,CAAC;AAFW,QAAA,QAAQ,YAEnB;AAEF,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAa,EAAU,EAAE;IACpE,MAAM,SAAS,GAAG,iBAAO,CAAC,OAAO,CAAC;QAChC,QAAQ,EAAE,uBAAuB,QAAQ,EAAE;QAC3C,MAAM,EAAE,iBAAO,CAAC,MAAM,EAAE;KACzB,CAAC,CAAC;IACH,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,CAAC;QACT,YAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEW,QAAA,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyFpC,CAAC;AAEW,QAAA,wBAAwB,GAAG;;;;;CAKvC,CAAC;AAEW,QAAA,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4L3B,CAAC"}

package/lib/docker/install.d.ts

@@ -35,6 +35,7 @@ export interface InstallOpts {
     localTCPPort?: number;
     regctl?: Regctl;
     undock?: Undock;
+    githubToken?: string;
 }
 interface LimaImage {
     location: string;
@@ -50,6 +51,7 @@ export declare class Install {
     private readonly localTCPPort?;
     private readonly regctl;
     private readonly undock;
+    private readonly githubToken?;
     private _version;
     private _toolDir;
     private gitCommit;
@@ -73,7 +75,7 @@ export declare class Install {
     private static limaInstalled;
     private static qemuBin;
     private static qemuInstalled;
-    static getRelease(version: string): Promise<GitHubRelease>;
+    static getRelease(version: string, githubToken?: string): Promise<GitHubRelease>;
     static limaCustomImages(): LimaImage[];
     private imageConfig;
 }