Method seal

atomic-repository/src/repository/sandbox.rs:330–358

Produce a single-layer (flattened) OCI image of the full merged state of `view`. Because a draft view sees its entire parent chain, the materialized content is the complete, self-contained rootfs — a deployable runtime. Provenance (view name and Merkle state) is recorded in the manifest annotations. Returns the manifest digest and file count.

(&self, opts: SealOptions)

    /// Provenance (view name and Merkle state) is recorded in the manifest
    /// annotations. Returns the manifest digest and file count.
    pub fn seal(&self, opts: SealOptions) -> Result<SealResult, RepositoryError> {
        let work_dir = tempfile::tempdir()?;
        let files = self.materialize_view_to(&opts.view, work_dir.path())?;
        let layer = oci::layer_from_dir(work_dir.path())?;

        let view_info = self.get_view_info(&opts.view)?;
        let mut annotations = BTreeMap::new();
        annotations.insert("org.atomic.view".to_string(), opts.view.clone());
        annotations.insert(
            "org.atomic.view-merkle".to_string(),
            view_info.state_base32(),
        );

        let config = OciImageConfig {
            architecture: oci::host_arch(),
            os: "linux".to_string(),
            env: opts.env.clone(),
            entrypoint: opts.entrypoint.clone(),
            annotations,
        };

        let manifest_digest = oci::write_image_layout(&opts.out, &[layer], &config)?;

        Ok(SealResult {
            manifest_digest,
            files,
            out: opts.out,
        })
    }
}

/// Clone a working tree from `src` to `dest`, one file at a time, reflinking