Skip to content

feat(protos): Import a pre-packed image directly into the cache (containerd shim) #59

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
azenla merged 1 commit into from
Sep 25, 2026
Merged

feat(protos): Import a pre-packed image directly into the cache (containerd shim) #59

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 30 additions & 0 deletions protect/control/v1/control.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ service ControlService {

rpc PullImage(PullImageRequest) returns (stream PullImageReply);
rpc ImportImage(stream ImportImageRequest) returns (stream ImportImageReply);
rpc ImportPackedImage(stream ImportPackedImageRequest) returns (ImportPackedImageReply);
rpc RemoveImage(RemoveImageRequest) returns (RemoveImageReply);
rpc ListImages(ListImagesRequest) returns (stream ListImagesReply);
rpc ListKernelVariants(ListKernelVariantsRequest) returns (ListKernelVariantsReply);
Expand Down Expand Up @@ -715,6 +716,35 @@ message ImportImageReply {
OciImageMetadata metadata = 4;
}

// Client stream message for `ImportPackedImage`: stores an image the caller has already
// packed into `format` directly in the local image cache, skipping the unpack and repack
// that `ImportImage` performs. The daemon trusts the caller to have built the artifact
// from the image `manifest` and `config` describe; it validates their shape and that
// `digest` is the digest of `manifest`, but never the artifact's contents.
//
// The first message must carry `image`, `digest`, `format`, `manifest` and `config`. The
// artifact follows as a sequence of `chunk`s with `last_chunk` set on the final one (a
// tar archive for `OCI_IMAGE_FORMAT_DIRECTORY`). `local_path` replaces the `chunk` stream
// for a caller that shares a filesystem with the daemon: it names the artifact, which must
// be staged under the daemon's temporary directory and which the daemon moves into the
// cache, in a single request. When the image is already cached and `overwrite_cache` is
// unset, the artifact is left untouched.
message ImportPackedImageRequest {
string image = 1;
string digest = 2;
OciImageFormat format = 3;
bytes manifest = 4;
bytes config = 5;
bytes chunk = 6;
bool last_chunk = 7;
string local_path = 8;
bool overwrite_cache = 9;
}

message ImportPackedImageReply {
OciImageSpec spec = 1;
}

// Removes the image identified by `digest` and `format` from the local image cache.
message RemoveImageRequest {
string digest = 1;
Expand Down
Loading