@opencode-cloud/core 0.1.3 → 1.0.3

package/src/docker/container.rs

@@ -0,0 +1,317 @@
+//! Docker container lifecycle management
+//!
+//! This module provides functions to create, start, stop, and remove
+//! Docker containers for the opencode-cloud service.
+
+use super::dockerfile::{IMAGE_NAME_GHCR, IMAGE_TAG_DEFAULT};
+use super::volume::{
+    MOUNT_CONFIG, MOUNT_PROJECTS, MOUNT_SESSION, VOLUME_CONFIG, VOLUME_PROJECTS, VOLUME_SESSION,
+};
+use super::{DockerClient, DockerError};
+use bollard::container::{
+    Config, CreateContainerOptions, RemoveContainerOptions, StartContainerOptions,
+    StopContainerOptions,
+};
+use bollard::service::{HostConfig, Mount, MountTypeEnum, PortBinding, PortMap};
+use std::collections::HashMap;
+use tracing::debug;
+
+/// Default container name
+pub const CONTAINER_NAME: &str = "opencode-cloud";
+
+/// Default port for opencode web UI
+pub const OPENCODE_WEB_PORT: u16 = 3000;
+
+/// Create the opencode container with volume mounts
+///
+/// Does not start the container - use start_container after creation.
+/// Returns the container ID on success.
+///
+/// # Arguments
+/// * `client` - Docker client
+/// * `name` - Container name (defaults to CONTAINER_NAME)
+/// * `image` - Image to use (defaults to IMAGE_NAME_GHCR:IMAGE_TAG_DEFAULT)
+/// * `opencode_web_port` - Port to bind on host for opencode web UI (defaults to OPENCODE_WEB_PORT)
+/// * `env_vars` - Additional environment variables (optional)
+pub async fn create_container(
+    client: &DockerClient,
+    name: Option<&str>,
+    image: Option<&str>,
+    opencode_web_port: Option<u16>,
+    env_vars: Option<Vec<String>>,
+) -> Result<String, DockerError> {
+    let container_name = name.unwrap_or(CONTAINER_NAME);
+    let default_image = format!("{IMAGE_NAME_GHCR}:{IMAGE_TAG_DEFAULT}");
+    let image_name = image.unwrap_or(&default_image);
+    let port = opencode_web_port.unwrap_or(OPENCODE_WEB_PORT);
+
+    debug!(
+        "Creating container {} from image {} with port {}",
+        container_name, image_name, port
+    );
+
+    // Check if container already exists
+    if container_exists(client, container_name).await? {
+        return Err(DockerError::Container(format!(
+            "Container '{}' already exists. Remove it first with 'occ stop --remove' or use a different name.",
+            container_name
+        )));
+    }
+
+    // Check if image exists
+    let image_parts: Vec<&str> = image_name.split(':').collect();
+    let (image_repo, image_tag) = if image_parts.len() == 2 {
+        (image_parts[0], image_parts[1])
+    } else {
+        (image_name, "latest")
+    };
+
+    if !super::image::image_exists(client, image_repo, image_tag).await? {
+        return Err(DockerError::Container(format!(
+            "Image '{}' not found. Run 'occ pull' first to download the image.",
+            image_name
+        )));
+    }
+
+    // Create volume mounts
+    let mounts = vec![
+        Mount {
+            target: Some(MOUNT_SESSION.to_string()),
+            source: Some(VOLUME_SESSION.to_string()),
+            typ: Some(MountTypeEnum::VOLUME),
+            read_only: Some(false),
+            ..Default::default()
+        },
+        Mount {
+            target: Some(MOUNT_PROJECTS.to_string()),
+            source: Some(VOLUME_PROJECTS.to_string()),
+            typ: Some(MountTypeEnum::VOLUME),
+            read_only: Some(false),
+            ..Default::default()
+        },
+        Mount {
+            target: Some(MOUNT_CONFIG.to_string()),
+            source: Some(VOLUME_CONFIG.to_string()),
+            typ: Some(MountTypeEnum::VOLUME),
+            read_only: Some(false),
+            ..Default::default()
+        },
+    ];
+
+    // Create port bindings (localhost only for security)
+    let mut port_bindings: PortMap = HashMap::new();
+    port_bindings.insert(
+        "3000/tcp".to_string(),
+        Some(vec![PortBinding {
+            host_ip: Some("127.0.0.1".to_string()),
+            host_port: Some(port.to_string()),
+        }]),
+    );
+
+    // Create exposed ports map
+    let mut exposed_ports = HashMap::new();
+    exposed_ports.insert("3000/tcp".to_string(), HashMap::new());
+
+    // Create host config
+    let host_config = HostConfig {
+        mounts: Some(mounts),
+        port_bindings: Some(port_bindings),
+        auto_remove: Some(false),
+        ..Default::default()
+    };
+
+    // Create container config
+    let config = Config {
+        image: Some(image_name.to_string()),
+        hostname: Some(CONTAINER_NAME.to_string()),
+        working_dir: Some("/workspace".to_string()),
+        exposed_ports: Some(exposed_ports),
+        env: env_vars,
+        host_config: Some(host_config),
+        ..Default::default()
+    };
+
+    // Create container
+    let options = CreateContainerOptions {
+        name: container_name,
+        platform: None,
+    };
+
+    let response = client
+        .inner()
+        .create_container(Some(options), config)
+        .await
+        .map_err(|e| {
+            let msg = e.to_string();
+            if msg.contains("port is already allocated") || msg.contains("address already in use") {
+                DockerError::Container(format!(
+                    "Port {} is already in use. Stop the service using that port or use a different port with --port.",
+                    port
+                ))
+            } else {
+                DockerError::Container(format!("Failed to create container: {}", e))
+            }
+        })?;
+
+    debug!("Container created with ID: {}", response.id);
+    Ok(response.id)
+}
+
+/// Start an existing container
+pub async fn start_container(client: &DockerClient, name: &str) -> Result<(), DockerError> {
+    debug!("Starting container: {}", name);
+
+    client
+        .inner()
+        .start_container(name, None::<StartContainerOptions<String>>)
+        .await
+        .map_err(|e| {
+            DockerError::Container(format!("Failed to start container {}: {}", name, e))
+        })?;
+
+    debug!("Container {} started", name);
+    Ok(())
+}
+
+/// Stop a running container with graceful shutdown
+///
+/// # Arguments
+/// * `client` - Docker client
+/// * `name` - Container name
+/// * `timeout_secs` - Seconds to wait before force kill (default: 10)
+pub async fn stop_container(
+    client: &DockerClient,
+    name: &str,
+    timeout_secs: Option<i64>,
+) -> Result<(), DockerError> {
+    let timeout = timeout_secs.unwrap_or(10);
+    debug!("Stopping container {} with {}s timeout", name, timeout);
+
+    let options = StopContainerOptions { t: timeout };
+
+    client
+        .inner()
+        .stop_container(name, Some(options))
+        .await
+        .map_err(|e| {
+            let msg = e.to_string();
+            // "container already stopped" is not an error
+            if msg.contains("is not running") || msg.contains("304") {
+                debug!("Container {} was already stopped", name);
+                return DockerError::Container(format!("Container '{}' is not running", name));
+            }
+            DockerError::Container(format!("Failed to stop container {}: {}", name, e))
+        })?;
+
+    debug!("Container {} stopped", name);
+    Ok(())
+}
+
+/// Remove a container
+///
+/// # Arguments
+/// * `client` - Docker client
+/// * `name` - Container name
+/// * `force` - Remove even if running
+pub async fn remove_container(
+    client: &DockerClient,
+    name: &str,
+    force: bool,
+) -> Result<(), DockerError> {
+    debug!("Removing container {} (force={})", name, force);
+
+    let options = RemoveContainerOptions {
+        force,
+        v: false, // Don't remove volumes
+        link: false,
+    };
+
+    client
+        .inner()
+        .remove_container(name, Some(options))
+        .await
+        .map_err(|e| {
+            DockerError::Container(format!("Failed to remove container {}: {}", name, e))
+        })?;
+
+    debug!("Container {} removed", name);
+    Ok(())
+}
+
+/// Check if container exists
+pub async fn container_exists(client: &DockerClient, name: &str) -> Result<bool, DockerError> {
+    debug!("Checking if container exists: {}", name);
+
+    match client.inner().inspect_container(name, None).await {
+        Ok(_) => Ok(true),
+        Err(bollard::errors::Error::DockerResponseServerError {
+            status_code: 404, ..
+        }) => Ok(false),
+        Err(e) => Err(DockerError::Container(format!(
+            "Failed to inspect container {}: {}",
+            name, e
+        ))),
+    }
+}
+
+/// Check if container is running
+pub async fn container_is_running(client: &DockerClient, name: &str) -> Result<bool, DockerError> {
+    debug!("Checking if container is running: {}", name);
+
+    match client.inner().inspect_container(name, None).await {
+        Ok(info) => {
+            let running = info.state.and_then(|s| s.running).unwrap_or(false);
+            Ok(running)
+        }
+        Err(bollard::errors::Error::DockerResponseServerError {
+            status_code: 404, ..
+        }) => Ok(false),
+        Err(e) => Err(DockerError::Container(format!(
+            "Failed to inspect container {}: {}",
+            name, e
+        ))),
+    }
+}
+
+/// Get container state (running, stopped, etc.)
+pub async fn container_state(client: &DockerClient, name: &str) -> Result<String, DockerError> {
+    debug!("Getting container state: {}", name);
+
+    match client.inner().inspect_container(name, None).await {
+        Ok(info) => {
+            let state = info
+                .state
+                .and_then(|s| s.status)
+                .map(|s| s.to_string())
+                .unwrap_or_else(|| "unknown".to_string());
+            Ok(state)
+        }
+        Err(bollard::errors::Error::DockerResponseServerError {
+            status_code: 404, ..
+        }) => Err(DockerError::Container(format!(
+            "Container '{}' not found",
+            name
+        ))),
+        Err(e) => Err(DockerError::Container(format!(
+            "Failed to inspect container {}: {}",
+            name, e
+        ))),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn container_constants_are_correct() {
+        assert_eq!(CONTAINER_NAME, "opencode-cloud");
+        assert_eq!(OPENCODE_WEB_PORT, 3000);
+    }
+
+    #[test]
+    fn default_image_format() {
+        let expected = format!("{IMAGE_NAME_GHCR}:{IMAGE_TAG_DEFAULT}");
+        assert_eq!(expected, "ghcr.io/prizz/opencode-cloud:latest");
+    }
+}

package/src/docker/dockerfile.rs

@@ -0,0 +1,41 @@
+//! Embedded Dockerfile content
+//!
+//! This module contains the Dockerfile for building the opencode-cloud container image,
+//! embedded at compile time for distribution with the CLI.
+
+/// The Dockerfile for building the opencode-cloud container image
+pub const DOCKERFILE: &str = include_str!("Dockerfile");
+
+// =============================================================================
+// Docker Image Naming
+// =============================================================================
+//
+// Docker images follow the naming convention: [registry/]namespace/image[:tag]
+//
+// - Registry: The server hosting the image (e.g., ghcr.io, gcr.io, docker.io)
+//   When omitted, Docker Hub (docker.io) is assumed.
+// - Namespace: Usually the username or organization (e.g., prizz)
+// - Image: The image name (e.g., opencode-cloud)
+// - Tag: Version identifier (e.g., latest, v1.0.0). Defaults to "latest" if omitted.
+//
+// Examples:
+//   ghcr.io/prizz/opencode-cloud:latest  - GitHub Container Registry
+//   prizz/opencode-cloud:latest          - Docker Hub (registry omitted)
+//   gcr.io/my-project/myapp:v1.0         - Google Container Registry
+//
+// We use GHCR as the primary registry since it integrates well with GitHub
+// Actions for CI/CD publishing.
+// =============================================================================
+
+/// Docker image name for GitHub Container Registry (primary registry)
+///
+/// Format: `ghcr.io/{github-username}/{image-name}`
+pub const IMAGE_NAME_GHCR: &str = "ghcr.io/prizz/opencode-cloud";
+
+/// Docker image name for Docker Hub (fallback registry)
+///
+/// Format: `{dockerhub-username}/{image-name}` (registry prefix omitted for Docker Hub)
+pub const IMAGE_NAME_DOCKERHUB: &str = "prizz/opencode-cloud";
+
+/// Default image tag
+pub const IMAGE_TAG_DEFAULT: &str = "latest";

package/src/docker/error.rs

@@ -0,0 +1,79 @@
+//! Docker-specific error types
+//!
+//! This module defines errors that can occur during Docker operations,
+//! providing clear, actionable messages for common issues.
+
+use thiserror::Error;
+
+/// Errors that can occur during Docker operations
+#[derive(Error, Debug)]
+pub enum DockerError {
+    /// Failed to connect to the Docker daemon
+    #[error("Docker connection failed: {0}")]
+    Connection(String),
+
+    /// Docker daemon is not running
+    #[error("Docker daemon not running. Start Docker Desktop or the Docker service.")]
+    NotRunning,
+
+    /// Permission denied accessing Docker socket
+    #[error(
+        "Permission denied accessing Docker socket. You may need to add your user to the 'docker' group."
+    )]
+    PermissionDenied,
+
+    /// Failed to build Docker image
+    #[error("Docker build failed: {0}")]
+    Build(String),
+
+    /// Failed to pull Docker image
+    #[error("Docker pull failed: {0}")]
+    Pull(String),
+
+    /// Container operation failed
+    #[error("Container operation failed: {0}")]
+    Container(String),
+
+    /// Volume operation failed
+    #[error("Volume operation failed: {0}")]
+    Volume(String),
+
+    /// Operation timed out
+    #[error("Docker operation timed out")]
+    Timeout,
+}
+
+impl From<bollard::errors::Error> for DockerError {
+    fn from(err: bollard::errors::Error) -> Self {
+        let msg = err.to_string();
+
+        // Detect common error patterns and provide better messages
+        if msg.contains("Cannot connect to the Docker daemon")
+            || msg.contains("connection refused")
+            || msg.contains("No such file or directory")
+        {
+            DockerError::NotRunning
+        } else if msg.contains("permission denied") || msg.contains("Permission denied") {
+            DockerError::PermissionDenied
+        } else {
+            DockerError::Connection(msg)
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn docker_error_displays_correctly() {
+        let err = DockerError::NotRunning;
+        assert!(err.to_string().contains("Docker daemon not running"));
+
+        let err = DockerError::PermissionDenied;
+        assert!(err.to_string().contains("Permission denied"));
+
+        let err = DockerError::Build("layer failed".to_string());
+        assert!(err.to_string().contains("layer failed"));
+    }
+}