studio/wfe - wfe - Gitea: Git with a cup of tea

studio/wfe

Fork 0

Commit Graph

Author	SHA1	Message	Date
Sienna Meridian Satterwhite	b02da21aac	feat(wfe-buildkit): rewrite to use buildkit-client gRPC instead of CLI Replaced buildctl CLI shell-out with direct gRPC communication via buildkit-client crate. Connects to buildkitd daemon over Unix socket or TCP with optional TLS. Implementation: - connect() with custom tonic UnixStream connector - execute_build() implementing the solve protocol directly against ControlClient (session setup, file sync, frontend attributes) - Extracts digest from containerimage.digest in solve response Added custom lima template (test/lima/wfe-test.yaml) that provides both buildkitd and containerd with host-forwarded Unix sockets for reproducible integration testing. E2E tests against real buildkitd daemon via WFE_BUILDKIT_ADDR env var. 54 tests total. 89% line coverage (cargo-llvm-cov with E2E).	2026-03-26 11:18:22 +00:00
Sienna Meridian Satterwhite	30b26ca5f0	feat(wfe-buildkit, wfe-containerd): add container executor crates Standalone workspace crates for BuildKit image building and containerd container execution. Config types, YAML schema integration, compiler dispatch, validation rules, and mock-based unit tests. Current implementation shells out to buildctl/nerdctl — will be replaced with proper gRPC clients (buildkit-client, containerd protos) in a follow-up. Config types, YAML integration, and test infrastructure are stable and reusable. wfe-buildkit: 60 tests, 97.9% library coverage wfe-containerd: 61 tests, 97.8% library coverage 447 total workspace tests.	2026-03-26 10:28:53 +00:00
Sienna Meridian Satterwhite	d4519e862f	feat(wfe-buildkit): add BuildKit image builder executor Standalone crate implementing StepBody for building container images via buildctl CLI. Supports Dockerfiles, multi-stage targets, tags, build args, cache import/export, push to registry. Security: TLS client certs for buildkitd connections, per-registry authentication for push operations. Testable without daemon via build_command() and parse_digest(). 20 tests, 85%+ coverage.	2026-03-26 10:00:42 +00:00

Author

SHA1

Message

Date

Sienna Meridian Satterwhite

b02da21aac

feat(wfe-buildkit): rewrite to use buildkit-client gRPC instead of CLI

Replaced buildctl CLI shell-out with direct gRPC communication via
buildkit-client crate. Connects to buildkitd daemon over Unix socket
or TCP with optional TLS.

Implementation:
- connect() with custom tonic UnixStream connector
- execute_build() implementing the solve protocol directly against
  ControlClient (session setup, file sync, frontend attributes)
- Extracts digest from containerimage.digest in solve response

Added custom lima template (test/lima/wfe-test.yaml) that provides
both buildkitd and containerd with host-forwarded Unix sockets for
reproducible integration testing.

E2E tests against real buildkitd daemon via WFE_BUILDKIT_ADDR env var.
54 tests total. 89% line coverage (cargo-llvm-cov with E2E).

2026-03-26 11:18:22 +00:00

Sienna Meridian Satterwhite

30b26ca5f0

feat(wfe-buildkit, wfe-containerd): add container executor crates

Standalone workspace crates for BuildKit image building and containerd
container execution. Config types, YAML schema integration, compiler
dispatch, validation rules, and mock-based unit tests.

Current implementation shells out to buildctl/nerdctl — will be
replaced with proper gRPC clients (buildkit-client, containerd protos)
in a follow-up. Config types, YAML integration, and test infrastructure
are stable and reusable.

wfe-buildkit: 60 tests, 97.9% library coverage
wfe-containerd: 61 tests, 97.8% library coverage
447 total workspace tests.

2026-03-26 10:28:53 +00:00

Sienna Meridian Satterwhite

d4519e862f

feat(wfe-buildkit): add BuildKit image builder executor

Standalone crate implementing StepBody for building container images
via buildctl CLI. Supports Dockerfiles, multi-stage targets, tags,
build args, cache import/export, push to registry.

Security: TLS client certs for buildkitd connections, per-registry
authentication for push operations.

Testable without daemon via build_command() and parse_digest().
20 tests, 85%+ coverage.

2026-03-26 10:00:42 +00:00

3 Commits