CompileRegexpsForPinnedImages compiles regular expressions for the given list of pinned images.

CopyDetachable is similar to io.Copy but support a detach key sequence to break out.

CRCreateRootFsDiffTar goes through the 'changes' and can create two files: * metadata.RootFsDiffTar will contain all new and changed files * metadata.DeletedFilesFile will contain a list of deleted files With these two files it is possible to restore the container file system to the same state it was during checkpointing.

DetectUID detects UID from the OwnerUID field of `busctl --user status` if running in userNS.

DetectUserDbusSessionBusAddress returns $DBUS_SESSION_BUS_ADDRESS if set.

EnsureSaneLogPath is a hack to fix https://issues.k8s.io/44043 which causes logPath to be a broken symlink to some magical Docker path.

FilterPinnedImage checks if the given image needs to be pinned and excluded from kubelet's image GC.

GenerateID generates a random unique id.

GeneratePasswd generates a container specific passwd file, iff uid is not defined in the containers /etc/passwd.

GetImageService returns an ImageServer that uses the passed-in store, and which will prepend the passed-in DefaultTransport value to an image name if a name that's passed to its PullImage() method can't be resolved to an image in the store and can't be resolved to a source on its own.

GetUser takes a containermount path and user name or ID and returns a matching User structure from /etc/passwd.

GetUserInfo returns UID, GID and additional groups for specified user by looking them up in /etc/passwd and /etc/group.

HandleResizing spawns a goroutine that processes the resize channel, calling resizeFunc for each TerminalSize received from the channel.

Int32Ptr is a utility function to assign to integer pointer variables.

NewDbusConnManager initializes systemd dbus connection manager.

ParseRegistryImageReferenceFromOutOfProcessData constructs a RegistryImageReference from a string.

ParseStorageImageIDFromOutOfProcessData constructs a StorageImageID from a string.

RegistryImageReferenceFromRaw is an internal constructor of a RegistryImageReference.

WARN: currently we are using buildah CLI for commits to images, there are various bugs in older versions of buildah, it is imperative we use the latest buildah binary (v1.37.3) which we explicitly checkout and build in the cedana dockerfile.

RunUnderSystemdScope adds the specified pid to a systemd scope.

StatusToExitCode converts wait status code to an exit code.

Sync ensures a path is synced to disk.

Syncfs ensures the file system at path is synced to disk.

SyncParent ensures a path's parent directory is synced to disk.

WriteGoroutineStacksToFile write goroutine stacks to the specified file.

container archive.

CRIU Images.

pod archive.

containerd only.

ImageBeingPulled map[string]bool to keep track of the images haven't done pulling.

CgroupPullConfiguration WARNING: All of imageLookupService must be JSON-representable because it is included in pullImageArgs.

DetachError is special error which returned in case of container detach.

subset of copy.Options that is supported by reexec.

ImageResult wraps a subset of information about an image: its ID, its names, and the size, if known, or nil if it isn't.

RegistryImageReference is a name of a specific image location on a registry.

StorageImageID is a stable identifier for a (deduplicated) image in a local storage.

ImageServer wraps up various CRI-related activities into a reusable implementation.

StorageTransport is a level of indirection to allow mocking istorage.ResolveReference.