Function runComponentInDocker

packages/component-sdk/src/runner.ts:93–204

* Execute a component in a Docker container * - Starts container with specified image and command * - Mounts a temp directory for structured output at /shipsec-output * - Components should write results to /shipsec-output/result.json * - Stdout/stderr are used purely for logging/progress * - Au

(
  runner: DockerRunnerConfig,
  params: I,
  context: ExecutionContext,
)

 * - Automatically cleans up container and temp directory on exit
 */
async function runComponentInDocker<I, O>(
  runner: DockerRunnerConfig,
  params: I,
  context: ExecutionContext,
): Promise<O> {
  const { image, command, entrypoint, env = {}, network = 'none', platform, containerName, volumes, timeoutSeconds = 300, detached } = runner;

  context.logger.info(`[Docker] Running ${image} with command: ${formatArgs(command)}`);
  context.emitProgress(`Starting Docker container: ${image}`);

  // Create temp directory for output and input
  const outputDir = await mkdtemp(join(tmpdir(), 'shipsec-run-'));
  const hostOutputPath = join(outputDir, OUTPUT_FILENAME);
  const hostInputPath = join(outputDir, 'input.json');

  try {
    // Write inputs to file instead of passing via env or stdin
    await writeFile(hostInputPath, JSON.stringify(params));

    const dockerArgs = [
      'run',
      '--rm',
      '-i',
      '--network', network,
      '--label', `shipsec.runId=${context.runId}`,
      '--label', `shipsec.nodeRef=${context.componentRef}`,
      // Mount the directory containing both input and output
      '-v', `${outputDir}:${CONTAINER_OUTPUT_PATH}`,
    ];

    if (containerName) {
      dockerArgs.push('--name', containerName);
    }

    if (platform && platform.trim().length > 0) {
      dockerArgs.push('--platform', platform);
    }

    if (Array.isArray(volumes)) {
      for (const vol of volumes) {
        if (!vol || !vol.source || !vol.target) continue;
        const mode = vol.readOnly ? ':ro' : '';
        dockerArgs.push('-v', `${vol.source}:${vol.target}${mode}`);
      }
    }

    if (runner.ports) {
      for (const [hostPort, containerPort] of Object.entries(runner.ports)) {
        dockerArgs.push('-p', `${hostPort}:${containerPort}`);
      }
    }

    for (const [key, value] of Object.entries(env)) {
      dockerArgs.push('-e', `${key}=${value}`);
    }

    // Tell the container where to read input and write output
    dockerArgs.push('-e', `SHIPSEC_INPUT_PATH=${CONTAINER_OUTPUT_PATH}/input.json`);