@lakutata/docker 3.0.0-beta.0

package/dist/cjs/docker/lib/DockerContainer.js

@@ -0,0 +1,742 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerContainer = void 0;
+const core_1 = require("@lakutata/core");
+const di_1 = require("@lakutata/core/decorator/di");
+const DockerStreams_js_1 = require("../../client/DockerStreams.js");
+const utils_1 = require("@lakutata/utils");
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:timers/promises");
+const Time_1 = require("@lakutata/utils/Time");
+const dto_1 = require("@lakutata/core/decorator/dto");
+const ContainerStopOptions_js_1 = require("../options/container/ContainerStopOptions.js");
+const ContainerRemoveOptions_js_1 = require("../options/container/ContainerRemoveOptions.js");
+const ContainerSettingOptions_js_1 = require("../options/container/ContainerSettingOptions.js");
+const ContainerKillOptions_js_1 = require("../options/container/ContainerKillOptions.js");
+const ParseEnvToRecord_js_1 = require("./ParseEnvToRecord.js");
+const ContainerCommitOptions_js_1 = require("../options/container/ContainerCommitOptions.js");
+const ParseRepositoryTag_js_1 = require("./ParseRepositoryTag.js");
+const DockerContainerTTY_js_1 = require("./DockerContainerTTY.js");
+const ContainerCreateTTYOptions_js_1 = require("../options/container/ContainerCreateTTYOptions.js");
+const ContainerLogsOptions_js_1 = require("../options/container/ContainerLogsOptions.js");
+const ContainerExecOptions_js_1 = require("../options/container/ContainerExecOptions.js");
+const ContainerExportDirectoryOptions_js_1 = require("../options/container/ContainerExportDirectoryOptions.js");
+const promises_2 = require("stream/promises");
+const node_fs_1 = require("node:fs");
+const DockerImageNotFoundException_js_1 = require("../exceptions/DockerImageNotFoundException.js");
+const DockerContainerNotFoundException_js_1 = require("../exceptions/DockerContainerNotFoundException.js");
+const EngineSettings_js_1 = require("./EngineSettings.js");
+/**
+ * A container of the Docker daemon, with its settings and its state as inspected, and its operations: start, stop,
+ * restart, pause, kill, remove, update, commit, exec, TTYs, logs, stats and the export of its files. It is not created
+ * with `new`: {@link Docker.getContainer}, {@link Docker.listContainers}, {@link Docker.createContainer} and
+ * {@link DockerImage.run} return it.
+ *
+ * Its properties are a snapshot, taken when it is obtained and refreshed by its own operations (`start()`, `stop()`,
+ * `restart()`, `pause()`, `unpause()`, `kill()`, `update()`): the changes made by others (the container exiting,
+ * `docker stop`) are seen by getting it again. Its operations reject with {@link DockerContainerNotFoundException} when
+ * the container was removed, with {@link DockerRequestException} when the daemon refuses them otherwise (not running:
+ * HTTP 409), and with the network error of Node.js when the daemon cannot be reached.
+ * @example
+ * ```typescript
+ * import {type Docker, type DockerContainer, type DockerImage} from 'lakutata/com/docker'
+ *
+ * declare const docker: Docker
+ *
+ * const image: DockerImage = await docker.getImage('alpine:3.20')
+ * const container: DockerContainer = await docker.createContainer(image.id, {
+ *     name: 'worker',
+ *     cmd: ['sh', '-c', 'echo started; sleep 3600'],
+ *     env: {MODE: 'production'},
+ *     ports: [{port: 8080, type: 'tcp', hostPorts: [18080]}],
+ *     binds: [{hostPath: '/srv/data', containerPath: '/data', rw: true}],
+ *     restartPolicy: 'unless-stopped'
+ * })
+ * await container.start()
+ * console.log(container.state.status, container.ports)
+ * //The exit code, stdout and stderr
+ * const {exitCode, stdout} = await container.exec({cmd: ['ls', '/data']})
+ * console.log(exitCode, stdout)
+ * await container.stop({timeout: 10})
+ * await container.remove()
+ * ```
+ */
+let DockerContainer = class DockerContainer extends core_1.Provider {
+    #abortController = new AbortController();
+    /**
+     * Inspect the container.
+     * @throws {DockerContainerNotFoundException} When the container does not exist.
+     * @protected
+     */
+    async init() {
+        await this.syncContainerInfo();
+    }
+    /**
+     * Abort the requests in progress of the object (the container itself is left as it is).
+     * @protected
+     */
+    async destroy() {
+        this.#abortController.abort();
+    }
+    /**
+     * Refresh the properties from the daemon's inspection of the container, and its image (`undefined` when it no longer
+     * exists).
+     * @throws {DockerContainerNotFoundException} When the container does not exist.
+     * @protected
+     */
+    async syncContainerInfo() {
+        try {
+            const inspectInfo = await this.getClient().inspectContainer(this.id, this.#abortController.signal);
+            //Got by its name or a short ID: its full ID
+            this.id = inspectInfo.Id;
+            this.createdAt = new Time_1.Time(inspectInfo.Created);
+            this.name = inspectInfo.Name.substring(1);
+            this.hostname = inspectInfo.Config.Hostname;
+            try {
+                this.image = await this.getDocker().getImage(inspectInfo.Image);
+            }
+            catch (e) {
+                //Its image removed with force: the container is read without it
+                if (!(e instanceof DockerImageNotFoundException_js_1.DockerImageNotFoundException))
+                    throw e;
+                this.image = undefined;
+            }
+            this.restartCount = inspectInfo.RestartCount;
+            this.state = {
+                status: (0, utils_1.As)(inspectInfo.State.Status),
+                running: inspectInfo.State.Running,
+                paused: inspectInfo.State.Paused,
+                restarting: inspectInfo.State.Restarting,
+                OOMKilled: inspectInfo.State.OOMKilled,
+                dead: inspectInfo.State.Dead,
+                pid: inspectInfo.State.Pid,
+                exitCode: inspectInfo.State.ExitCode,
+                startedAt: this.#time(inspectInfo.State.StartedAt),
+                finishedAt: this.#time(inspectInfo.State.FinishedAt)
+            };
+            const networkSettings = inspectInfo.NetworkSettings ? inspectInfo.NetworkSettings.Networks ? inspectInfo.NetworkSettings.Networks : {} : {};
+            this.tty = inspectInfo.Config.Tty;
+            this.OOMKillDisable = !!inspectInfo.HostConfig.OomKillDisable;
+            this.networks = Object.keys(networkSettings).map((networkSettingName) => ({
+                networkName: networkSettingName,
+                networkId: networkSettings[networkSettingName].NetworkID,
+                endpointId: networkSettings[networkSettingName].EndpointID,
+                mac: networkSettings[networkSettingName].MacAddress,
+                ip: networkSettings[networkSettingName].IPAddress,
+                gateway: networkSettings[networkSettingName].Gateway,
+                ipPrefixLen: networkSettings[networkSettingName].IPPrefixLen,
+                ipv6: networkSettings[networkSettingName].GlobalIPv6Address,
+                ipv6Gateway: networkSettings[networkSettingName].IPv6Gateway,
+                ipv6PrefixLen: networkSettings[networkSettingName].GlobalIPv6PrefixLen
+            }));
+            const containerIpAddresses = [];
+            this.networks.forEach((network) => {
+                if (network.ip)
+                    containerIpAddresses.push(network.ip);
+                if (network.ipv6)
+                    containerIpAddresses.push(`[${network.ipv6}]`);
+            });
+            const ports = [];
+            const portMap = new Map();
+            this.image?.config.ports?.forEach((exposePortInfo) => {
+                containerIpAddresses.forEach((containerIpAddress) => {
+                    const types = [];
+                    if (exposePortInfo.tcp)
+                        types.push('tcp');
+                    if (exposePortInfo.udp)
+                        types.push('udp');
+                    types.forEach(type => {
+                        const portMapKey = `${containerIpAddress}_${exposePortInfo.port}_${type}`;
+                        if (!portMap.has(portMapKey))
+                            portMap.set(portMapKey, []);
+                    });
+                });
+            });
+            if (inspectInfo.NetworkSettings.Ports) {
+                Object.keys(inspectInfo.NetworkSettings.Ports).forEach((portWithType) => {
+                    const portInfo = portWithType.split('/');
+                    const port = parseInt(portInfo[0]);
+                    const type = (0, utils_1.As)(portInfo[1].toLowerCase());
+                    inspectInfo.NetworkSettings.Ports[portWithType]?.forEach((hostBinding) => {
+                        containerIpAddresses.forEach((containerIpAddress) => {
+                            const portMapKey = `${containerIpAddress}_${port}_${type}`;
+                            if (!portMap.has(portMapKey))
+                                portMap.set(portMapKey, []);
+                            //A host port is bound on the IPv4 and the IPv6 addresses of the host: listed once
+                            const hostPorts = portMap.get(portMapKey);
+                            const hostPort = parseInt(hostBinding.HostPort);
+                            if (!hostPorts.includes(hostPort))
+                                hostPorts.push(hostPort);
+                        });
+                    });
+                });
+            }
+            portMap.forEach((hostPorts, portMapKey) => {
+                const infos = portMapKey.split('_');
+                const containerIpAddress = infos[0];
+                const port = parseInt(infos[1]);
+                const type = (0, utils_1.As)(infos[2]);
+                ports.push({
+                    host: containerIpAddress,
+                    port: port,
+                    type: type,
+                    hostPorts: hostPorts
+                });
+            });
+            this.ports = ports;
+            const binds = [];
+            for (const mount of inspectInfo.Mounts ?? []) {
+                if (mount.Type === 'bind') {
+                    binds.push({
+                        hostPath: mount.Source,
+                        containerPath: mount.Destination,
+                        rw: mount.RW
+                    });
+                }
+            }
+            this.binds = binds;
+            this.devices = inspectInfo.HostConfig.Devices ? (0, utils_1.As)(inspectInfo.HostConfig.Devices).map(device => ({
+                hostPath: device.PathOnHost,
+                containerPath: device.PathInContainer,
+                cgroupPermissions: device.CgroupPermissions
+            })) : [];
+            this.memoryLimit = inspectInfo.HostConfig.Memory ? inspectInfo.HostConfig.Memory : 0;
+            this.privileged = !!inspectInfo.HostConfig.Privileged;
+            this.restartPolicy = (0, EngineSettings_js_1.parseRestartPolicy)(inspectInfo.HostConfig.RestartPolicy);
+            this.cgroup = inspectInfo.HostConfig.Cgroup;
+            this.cgroupParent = inspectInfo.HostConfig.CgroupParent;
+            this.pidMode = inspectInfo.HostConfig.PidMode;
+            const cpuSetString = inspectInfo.HostConfig.CpusetCpus ? inspectInfo.HostConfig.CpusetCpus : '';
+            const cpuSetArray = cpuSetString.split(',');
+            const cpuIndexesArray = cpuSetArray.map((cpuSetItem) => {
+                if (cpuSetItem.includes('-')) {
+                    const [min, max] = cpuSetItem.split('-');
+                    const cpuIndexes = [];
+                    if (!min || !max)
+                        return cpuIndexes;
+                    for (let i = parseInt(min); i <= parseInt(max); i++)
+                        cpuIndexes.push(i);
+                    return cpuIndexes;
+                }
+                else {
+                    return [parseInt(cpuSetItem)];
+                }
+            });
+            let cpuSet = [];
+            cpuIndexesArray.forEach((cpuIndexes) => {
+                cpuSet = [...cpuIndexes, ...cpuSet];
+            });
+            this.cpuSet = (0, utils_1.uniqueArray)(cpuSet).sort((a, b) => a - b).filter(value => typeof value === 'number' && !isNaN(value));
+            this.env = (0, ParseEnvToRecord_js_1.parseEnvToRecord)(inspectInfo.Config.Env);
+            this.capabilities = inspectInfo.HostConfig.CapAdd ? inspectInfo.HostConfig.CapAdd : [];
+        }
+        catch (e) {
+            if (!(0, utils_1.isAbortError)(e))
+                throw e;
+        }
+    }
+    /**
+     * The time of a date of the state: null for Docker's zero date (never)
+     * @param date
+     */
+    #time(date) {
+        if (!date || date.startsWith('0001-01-01'))
+            return null;
+        return new Time_1.Time(date);
+    }
+    /**
+     * Start the container, as `docker start`, then refresh its properties. A container already running is left as it is
+     * (as the Docker CLI does).
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When it fails to start (HTTP 500: a command not found, a port already used).
+     */
+    async start() {
+        try {
+            await this.getClient().startContainer(this.id, this.#abortController.signal);
+            await this.syncContainerInfo();
+        }
+        catch (e) {
+            if (!(0, utils_1.isAbortError)(e))
+                throw e;
+        }
+    }
+    /**
+     * Stop the container, as `docker stop`: send its stop signal, wait for it to exit, kill it after the timeout; then
+     * refresh its properties.
+     * @param options The signal sent (the container's stop signal, `SIGTERM` by default) and the timeout before the kill,
+     * in seconds (the container's, 10 by default). A container already stopped is left as it is (as the Docker CLI does).
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     */
+    async stop(options) {
+        if (!options)
+            return await this.stop({});
+        try {
+            await this.getClient().stopContainer(this.id, { signal: options.signal, t: options.timeout }, this.#abortController.signal);
+            await this.syncContainerInfo();
+        }
+        catch (e) {
+            if (!(0, utils_1.isAbortError)(e))
+                throw e;
+        }
+    }
+    /**
+     * Suspend the processes of the container, as `docker pause`, then refresh its properties.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When it is not running or already paused (HTTP 409).
+     */
+    async pause() {
+        await this.getClient().pauseContainer(this.id);
+        await this.syncContainerInfo();
+    }
+    /**
+     * Resume the processes of a paused container, as `docker unpause`, then refresh its properties.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When it is not paused (HTTP 409).
+     */
+    async unpause() {
+        await this.getClient().unpauseContainer(this.id);
+        await this.syncContainerInfo();
+    }
+    /**
+     * Restart the container, as `docker restart`: stop it as {@link DockerContainer.stop} does (when it runs), then start
+     * it; then refresh its properties.
+     * @param options The signal sent (the container's stop signal, `SIGTERM` by default) and the timeout before the kill,
+     * in seconds (the container's, 10 by default).
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When it fails to start (HTTP 500).
+     */
+    async restart(options) {
+        if (!options)
+            return await this.restart({});
+        try {
+            await this.getClient().restartContainer(this.id, { signal: options.signal, t: options.timeout }, this.#abortController.signal);
+            await this.syncContainerInfo();
+        }
+        catch (e) {
+            if (!(0, utils_1.isAbortError)(e))
+                throw e;
+        }
+    }
+    /**
+     * Remove the container, as `docker rm -v`: its anonymous volumes are removed with it. The object is not refreshed:
+     * its other operations then fail with {@link DockerContainerNotFoundException}.
+     * @param options `force` kills a running container first (`false` by default).
+     * @throws {DockerContainerNotFoundException} When the container was already removed.
+     * @throws {DockerRequestException} When it is running and `force` is not set (HTTP 409).
+     */
+    async remove(options) {
+        if (!options)
+            return await this.remove({});
+        await this.getClient().removeContainer(this.id, { force: !!options.force, v: true });
+    }
+    /**
+     * Change the settings of the container, keeping the others. The memory limit, the CPUs and the restart policy are
+     * changed live, as `docker update` does, and the name by renaming it, the container running on. The other
+     * settings (and removing the memory limit or the CPU set, which Docker cannot do live) recreate the container: a new
+     * one is created from the old one's whole configuration (its image, command, entrypoint, environment, mounts,
+     * networks and their static addresses, the addresses Docker assigned being assigned again), with the settings
+     * changed, under a temporary name. Once created (and, when the old one was running, the old one stopped and the new
+     * one started), the old one is removed without its volumes and the new one takes its name (and its anonymous
+     * volumes, mounted again). The object follows the new container: its `id` changes.
+     * @remarks The old container is kept when the creation or the start of the new one fails (invalid settings, the
+     * image removed, a network missing): the new one is removed, the old one started again when it was running, and the
+     * call rejects. Its files outside the volumes are not kept by a recreation (commit them first, see
+     * {@link DockerContainer.commit}). A container removed by Docker when it stops (`AutoRemove`) cannot be kept.
+     * @param options The settings changed: `memoryLimit`, `cpuSet` and `restartPolicy` live (the swap limit set to
+     * Docker's default with the memory), `name` by a renaming; `hostname`, `env` (replacing the container's variables;
+     * the image's are added again), `cmd`, `entrypoint`, `tty`, `privileged`, `ports`, `binds` (replacing the bind
+     * mounts, the volumes kept), `devices`, `networks` (replacing the networks), `capabilities`, `OOMKillDisable`,
+     * `cgroup`, `cgroupParent` and `pidMode` by a recreation. The settings absent are kept.
+     * @throws {InvalidMethodAcceptException} When the settings are invalid.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerImageNotFoundException} When the container must be recreated and its image no longer exists.
+     * @throws {DockerNetworkNotFoundException} When a network of the settings is not found.
+     * @throws {DockerRequestException} When the daemon refuses the changes: a limit refused (HTTP 400), the name
+     * already used (HTTP 409), the new container failing to start (HTTP 500).
+     */
+    async update(options) {
+        const changes = (0, utils_1.As)(Object.fromEntries(Object.entries(options).filter(([, value]) => value !== undefined)));
+        const inspectInfo = await this.getClient().inspectContainer(this.id);
+        const name = changes.name ?? inspectInfo.Name.substring(1);
+        //The resources Docker sets live (it cannot remove a limit live), and the restart policy
+        const resources = {};
+        let recreated = false;
+        for (const key of Object.keys(changes)) {
+            if (key === 'name')
+                continue;
+            //No limit to remove
+            if ((key === 'memoryLimit' && !changes.memoryLimit && !inspectInfo.HostConfig.Memory) || (key === 'cpuSet' && !changes.cpuSet.length && !inspectInfo.HostConfig.CpusetCpus))
+                continue;
+            if (key === 'memoryLimit' && changes.memoryLimit) {
+                resources.Memory = changes.memoryLimit;
+                //As much swap as memory, Docker's default, unless the swap is unlimited
+                if (inspectInfo.HostConfig.MemorySwap !== -1)
+                    resources.MemorySwap = changes.memoryLimit * 2;
+            }
+            else if (key === 'cpuSet' && changes.cpuSet.length) {
+                resources.CpusetCpus = changes.cpuSet.join(',');
+            }
+            else if (key === 'restartPolicy') {
+                resources.RestartPolicy = (0, EngineSettings_js_1.engineRestartPolicy)(changes.restartPolicy || 'no');
+            }
+            else {
+                recreated = true;
+            }
+        }
+        if (recreated) {
+            await this.#recreate(inspectInfo, changes, name);
+        }
+        else {
+            if (Object.keys(resources).length)
+                await this.getClient().updateContainer(this.id, resources);
+            if (name !== inspectInfo.Name.substring(1))
+                await this.getClient().renameContainer(this.id, name);
+        }
+        await this.syncContainerInfo();
+    }
+    /**
+     * Recreate the container from its configuration, with the settings changed: created under a temporary name, it
+     * replaces the old one once created
+     * @param inspectInfo The inspection of the container
+     * @param changes The settings changed
+     * @param name The name of the container
+     */
+    async #recreate(inspectInfo, changes, name) {
+        const config = { ...inspectInfo.Config };
+        const hostConfig = { ...inspectInfo.HostConfig };
+        //By its ID: the name it was created with may be another image's now
+        config.Image = inspectInfo.Image;
+        //The host name Docker gave (the short ID), or the one of the container whose network it shares, is not kept
+        if (config.Hostname === inspectInfo.Id.substring(0, 12) || /^container:/.test(hostConfig.NetworkMode ?? ''))
+            delete config.Hostname;
+        if (changes.hostname !== undefined)
+            config.Hostname = changes.hostname;
+        if (changes.tty !== undefined)
+            config.Tty = changes.tty;
+        if (changes.env)
+            config.Env = Object.keys(changes.env).map((envKey) => `${envKey}=${changes.env[envKey]}`);
+        if (changes.cmd)
+            config.Cmd = changes.cmd;
+        if (changes.entrypoint)
+            config.Entrypoint = changes.entrypoint;
+        if (changes.privileged !== undefined)
+            hostConfig.Privileged = changes.privileged;
+        if (changes.memoryLimit !== undefined) {
+            hostConfig.Memory = changes.memoryLimit;
+            //Docker's default swap, unless the swap is unlimited
+            if (hostConfig.MemorySwap !== -1)
+                hostConfig.MemorySwap = 0;
+        }
+        if (changes.cpuSet)
+            hostConfig.CpusetCpus = changes.cpuSet.join(',');
+        if (changes.restartPolicy !== undefined)
+            hostConfig.RestartPolicy = (0, EngineSettings_js_1.engineRestartPolicy)(changes.restartPolicy || 'no');
+        if (changes.OOMKillDisable !== undefined)
+            hostConfig.OomKillDisable = changes.OOMKillDisable;
+        if (changes.capabilities)
+            hostConfig.CapAdd = changes.capabilities;
+        if (changes.cgroup !== undefined)
+            hostConfig.Cgroup = changes.cgroup;
+        if (changes.cgroupParent !== undefined)
+            hostConfig.CgroupParent = changes.cgroupParent;
+        if (changes.pidMode !== undefined)
+            hostConfig.PidMode = changes.pidMode;
+        if (changes.devices)
+            hostConfig.Devices = (0, EngineSettings_js_1.engineDevices)(changes.devices);
+        if (changes.ports) {
+            hostConfig.PortBindings = (0, EngineSettings_js_1.enginePortBindings)(changes.ports);
+            config.ExposedPorts = { ...config.ExposedPorts, ...Object.fromEntries(Object.keys(hostConfig.PortBindings).map((port) => [port, {}])) };
+        }
+        else {
+            //Each host port once
+            hostConfig.PortBindings = Object.fromEntries(Object.entries(hostConfig.PortBindings ?? {}).map(([port, bindings]) => [
+                port,
+                bindings ? bindings.filter((binding, index) => bindings.findIndex((other) => other.HostIp === binding.HostIp && other.HostPort === binding.HostPort) === index) : null
+            ]));
+        }
+        if (changes.binds) {
+            //The bind mounts replaced (their source is a host path), the volumes kept
+            hostConfig.Binds = [...(hostConfig.Binds ?? []).filter((bind) => !/^(\/|[a-zA-Z]:\\)/.test(bind)), ...(0, EngineSettings_js_1.engineBinds)(changes.binds)];
+            hostConfig.Mounts = (hostConfig.Mounts ?? []).filter((mount) => mount.Type !== 'bind');
+        }
+        //The anonymous volumes mounted again by their names: the old container is removed without them
+        const mounted = [
+            ...(hostConfig.Binds ?? []).map((bind) => bind.split(':')[1]),
+            ...(hostConfig.Mounts ?? []).map((mount) => mount.Target)
+        ];
+        const anonymousVolumes = (inspectInfo.Mounts ?? []).filter((mount) => mount.Type === 'volume' && !mounted.includes(mount.Destination));
+        if (anonymousVolumes.length)
+            hostConfig.Mounts = [...(hostConfig.Mounts ?? []), ...anonymousVolumes.map((mount) => ({
+                    Type: 'volume',
+                    Source: mount.Name,
+                    Target: mount.Destination,
+                    ReadOnly: !mount.RW
+                }))];
+        let endpoints;
+        if (changes.networks) {
+            endpoints = (0, EngineSettings_js_1.engineEndpoints)(changes.networks);
+            if (changes.networks.length && !/^(host|none|container:)/.test(hostConfig.NetworkMode ?? ''))
+                hostConfig.NetworkMode = changes.networks[0].networkName;
+        }
+        else {
+            //The networks kept as configured: their static addresses only (IPAMConfig), the others assigned again
+            const networks = inspectInfo.NetworkSettings?.Networks ?? {};
+            endpoints = Object.fromEntries(Object.entries(networks).map(([networkName, endpoint]) => [networkName, {
+                    IPAMConfig: endpoint.IPAMConfig ?? undefined,
+                    Links: endpoint.Links ?? undefined,
+                    Aliases: endpoint.Aliases?.filter((alias) => alias !== inspectInfo.Id.substring(0, 12)) ?? undefined,
+                    DriverOpts: endpoint.DriverOpts ?? undefined,
+                    GwPriority: endpoint.GwPriority
+                }]));
+        }
+        //The platform of the image used: an image may have several
+        const platform = inspectInfo.ImageManifestDescriptor?.platform;
+        const created = await this.getClient().createContainer({
+            ...config,
+            HostConfig: hostConfig,
+            NetworkingConfig: { EndpointsConfig: endpoints }
+        }, {
+            name: `${name}-update-${(0, node_crypto_1.randomBytes)(4).toString('hex')}`,
+            platform: platform?.os && platform.architecture ? [platform.os, platform.architecture, platform.variant].filter(Boolean).join('/') : undefined
+        });
+        //Created: the old container is replaced once the new one runs (its ports and addresses freed by the old one), and
+        //is kept, started again, when the new one cannot start or the old one cannot be removed
+        const running = !!inspectInfo.State?.Running;
+        try {
+            if (running) {
+                await this.getClient().stopContainer(this.id);
+                await this.getClient().startContainer(created.Id);
+            }
+            await this.getClient().removeContainer(this.id, { force: true, v: false }).catch((error) => {
+                //Removed by itself once stopped (AutoRemove)
+                if (!(error instanceof DockerContainerNotFoundException_js_1.DockerContainerNotFoundException))
+                    throw error;
+            });
+        }
+        catch (e) {
+            await this.getClient().removeContainer(created.Id, { force: true, v: false }).catch(() => undefined);
+            if (running)
+                await this.getClient().startContainer(this.id).catch(() => undefined);
+            throw e;
+        }
+        this.id = created.Id;
+        await this.getClient().renameContainer(this.id, name);
+    }
+    /**
+     * Create an image from the container's current files, as `docker commit`.
+     * @param options The name of the image (`repoTag`, `repo:tag`; none by default) and whether the container is paused
+     * while it is committed (`pauseBeforeCommitting`, `true` by default).
+     * @returns The image created.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     */
+    async commit(options) {
+        if (!options)
+            return await this.commit({});
+        let repo = undefined;
+        let tag = undefined;
+        if (options.repoTag) {
+            const parseResult = (0, ParseRepositoryTag_js_1.parseRepositoryTag)(options.repoTag);
+            repo = parseResult.repo;
+            tag = parseResult.tag;
+        }
+        const commitResult = await this.getClient().commitContainer(this.id, {
+            repo: repo,
+            tag: tag,
+            pause: options.pauseBeforeCommitting !== undefined ? options.pauseBeforeCommitting : true
+        });
+        return await this.getDocker().getImage(commitResult.Id);
+    }
+    /**
+     * Start an interactive command with a TTY in the running container, as `docker exec -it`. The command runs until it
+     * exits (or its stream is closed): see {@link DockerContainerTTY}.
+     * @param options The command (`['/bin/sh']` by default; the program and its arguments, run as they are, or a command
+     * line, run by `/bin/sh -c`) and the initial console size.
+     * @returns The TTY, its command started.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When the container is not running (HTTP 409).
+     */
+    async createTTY(options) {
+        return await this.getObject(DockerContainerTTY_js_1.DockerContainerTTY, {
+            getClient: this.getClient,
+            containerId: this.id,
+            cmd: typeof options?.cmd === 'string' ? ['/bin/sh', '-c', options.cmd] : options?.cmd ?? ['/bin/sh'],
+            initialConsoleSize: options?.consoleSize
+        });
+    }
+    /**
+     * Read the logs of the container's main process, as `docker logs`: stdout and stderr in one stream, in their order
+     * (split from Docker's multiplexed format unless the container has a TTY).
+     * @remarks The logs are followed by default: the stream does not end while the container runs. Pass `follow: false`
+     * for the logs written so far.
+     * @param options `follow` (`true` by default), `since` and `until` (UNIX timestamps in seconds; `0`, no bound, by
+     * default), `timestamps` (`false` by default) and `tail` (a number of lines from the end; all by default).
+     * @returns The readable stream of the logs.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     */
+    async logs(options) {
+        if (!options)
+            return await this.logs({});
+        const logs = await this.getClient().containerLogs(this.id, {
+            follow: !!options.follow,
+            stdout: true,
+            stderr: true,
+            since: options.since,
+            until: options.until,
+            timestamps: options.timestamps,
+            tail: options.tail
+        });
+        //The logs of a container without TTY are multiplexed: their contents are given, in their order
+        if (this.tty)
+            return logs;
+        const decoder = new DockerStreams_js_1.DockerStreamDecoder();
+        logs.once('error', (error) => decoder.destroy(error));
+        return logs.pipe(decoder);
+    }
+    /**
+     * Read the resource usage of the container once, as `docker stats --no-stream`: CPU, memory, network, block I/O and
+     * processes, as the Engine API reports them.
+     * @returns The statistics.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     */
+    async stats() {
+        return await this.getClient().containerStats(this.id);
+    }
+    /**
+     * Run a command in the running container, as `docker exec` (no TTY, no stdin), and wait for it to exit. As the
+     * containerd component's, a command exiting with a non-zero code resolves too: check its `exitCode`.
+     * @param options The command: a program and its arguments (`['ls', '-l']`), run as they are, or a command line
+     * (`'ls /data | wc -l'`), run by `/bin/sh -c`.
+     * @returns The exit code of the command, its stdout and its stderr (a program not found: exit code `127` or `126`,
+     * the error in the output).
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When the container is not running or paused (HTTP 409).
+     */
+    async exec(options) {
+        const exec = await this.getClient().createExec(this.id, {
+            Cmd: typeof options.cmd === 'string' ? ['/bin/sh', '-c', options.cmd] : options.cmd,
+            AttachStdout: true,
+            AttachStderr: true
+        });
+        //Without TTY, the output is multiplexed: stdout and stderr apart
+        const duplex = await this.getClient().startExec(exec.Id, { Detach: false, Tty: false });
+        const { stdout, stderr } = await (0, DockerStreams_js_1.readMultiplexed)(duplex);
+        //The exit code is set once the process is reaped, which may follow the end of its output
+        let inspectInfo = await this.getClient().inspectExec(exec.Id);
+        for (let attempt = 0; (inspectInfo.Running || inspectInfo.ExitCode === null) && attempt < 200; attempt++) {
+            await (0, promises_1.setTimeout)(10);
+            inspectInfo = await this.getClient().inspectExec(exec.Id);
+        }
+        return { exitCode: inspectInfo.ExitCode ?? 0, stdout: stdout, stderr: stderr };
+    }
+    /**
+     * Send a signal to the container's main process, as `docker kill` (`SIGKILL` by default), then refresh its properties.
+     * @param options The signal sent: a name (`'SIGHUP'`) or a number (`1`); `SIGKILL` by default.
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When the container is not running (HTTP 409), or the signal is unknown.
+     */
+    async kill(options) {
+        if (!options)
+            return await this.kill({});
+        await this.getClient().killContainer(this.id, { signal: options.signal === undefined ? undefined : String(options.signal) });
+        await this.syncContainerInfo();
+    }
+    /**
+     * Copy a file or a directory out of the container as a tar archive, as `docker cp container:path -`. The container
+     * may be stopped.
+     * @param options The path in the container, and the `destination` of the archive: a file path (created or
+     * overwritten) or a writable stream (ended after the archive).
+     * @throws {DockerContainerNotFoundException} When the container was removed.
+     * @throws {DockerRequestException} When the path is not found in the container (HTTP 404).
+     * @throws {Error} The error of the destination.
+     */
+    async exportDirectory(options) {
+        const readableStream = await this.getClient().getArchive(this.id, { path: options.path });
+        const writableStream = typeof options.destination === 'string' ? (0, node_fs_1.createWriteStream)(options.destination) : options.destination;
+        await (0, promises_2.pipeline)(readableStream, writableStream);
+    }
+};
+exports.DockerContainer = DockerContainer;
+__decorate([
+    (0, di_1.Configurable)(core_1.DTO.Function()),
+    __metadata("design:type", Function)
+], DockerContainer.prototype, "getClient", void 0);
+__decorate([
+    (0, di_1.Configurable)(core_1.DTO.Function()),
+    __metadata("design:type", Function)
+], DockerContainer.prototype, "getDocker", void 0);
+__decorate([
+    (0, di_1.Configurable)(core_1.DTO.String()),
+    __metadata("design:type", String)
+], DockerContainer.prototype, "id", void 0);
+__decorate([
+    (0, dto_1.Accept)(ContainerStopOptions_js_1.ContainerStopOptions.optional()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerStopOptions_js_1.ContainerStopOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "stop", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerStopOptions_js_1.ContainerStopOptions.optional()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerStopOptions_js_1.ContainerStopOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "restart", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerRemoveOptions_js_1.ContainerRemoveOptions.optional()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerRemoveOptions_js_1.ContainerRemoveOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "remove", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerSettingOptions_js_1.ContainerSettingOptions.required()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerSettingOptions_js_1.ContainerSettingOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "update", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerCommitOptions_js_1.ContainerCommitOptions.optional().default({})),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerCommitOptions_js_1.ContainerCommitOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "commit", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerCreateTTYOptions_js_1.ContainerCreateTTYOptions.optional()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerCreateTTYOptions_js_1.ContainerCreateTTYOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "createTTY", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerLogsOptions_js_1.ContainerLogsOptions.optional()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerLogsOptions_js_1.ContainerLogsOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "logs", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerExecOptions_js_1.ContainerExecOptions.required()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerExecOptions_js_1.ContainerExecOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "exec", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerKillOptions_js_1.ContainerKillOptions.optional()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerKillOptions_js_1.ContainerKillOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "kill", null);
+__decorate([
+    (0, dto_1.Accept)(ContainerExportDirectoryOptions_js_1.ContainerExportDirectoryOptions.required()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ContainerExportDirectoryOptions_js_1.ContainerExportDirectoryOptions]),
+    __metadata("design:returntype", Promise)
+], DockerContainer.prototype, "exportDirectory", null);
+exports.DockerContainer = DockerContainer = __decorate([
+    (0, di_1.Transient)()
+], DockerContainer);