Skip to content

containerd-v4-egress

Repo box/cachyos

The containerd v4 config egress-validation subject (opencharly/charly#929). Installs containerd + crictl + crun + krun and ships the scratch fixture project whose config: step carries the CONTAINERD.md section 3.1 version-4 config with validate: containerd_config. The bed check-containerd-v4-egress-vm generates the fixture through the REAL verb:egress validator, installs the exact bytes the validator accepted, and asserts the running daemon serves the crun/krun runtime handlers and the overlayfs snapshotter. A plugin-egress without the v4 arm fails the generate with a version conflict, so the bed is red without the schema.

Installed on every distro:

  • containerd
  • crictl
  • crun
  • krun

This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.

Intent Step
run ship the scratch fixture project’s project root into the guest home
run ship the scratch fixture box that composes the egress-validation candy
run ship the scratch fixture candy carrying the canonical v4 config and its egress validation
check the scratch fixture project is shipped into the guest home with its egress-validation candy