Function BootstrapContainer

dockerutil/container.go:102–132

BoostrapContainer runs a script inside the container as the provided user. If conf.Script is empty then it is a noop.

(ctx context.Context, client Client, conf BootstrapConfig)

// BoostrapContainer runs a script inside the container as the provided user.
// If conf.Script is empty then it is a noop.
func BootstrapContainer(ctx context.Context, client Client, conf BootstrapConfig) error {
	if conf.Script == "" {
		return nil
	}

	var err error
	for r, n := retry.New(time.Second, time.Second*2), 0; r.Wait(ctx) && n < 10; n++ {
		var out []byte
		out, err = ExecContainer(ctx, client, ExecConfig{
			ContainerID: conf.ContainerID,
			User:        conf.User,
			Cmd:         "/bin/sh",
			Args:        []string{"-s"},
			Stdin:       strings.NewReader(conf.Script),
			Env:         conf.Env,
			StdOutErr:   conf.StdOutErr,
			Detach:      conf.Detach,
		})
		if err != nil {
			err = xerrors.Errorf("boostrap container (%s): %w", out, err)
			continue
		}
		break
	}

	if err != nil {
		return xerrors.Errorf("timed out boostrapping container: %w", err)
	}

	return nil
}

// SetContainerQuota writes a quota to its correct location for the inner container.
// HACK: until https://github.com/nestybox/sysbox/issues/582 is resolved, we need to copy