feat: backend executor implement

internal/backendexecutor/operations.go

@@ -23,6 +23,36 @@ type loadImageOperation struct {
 	platform       containerengine.Platform
 }
 
+type pullImageOperation struct {
+	engine         containerengine.Engine
+	imageReference string
+	expectedDigest string
+	platform       containerengine.Platform
+}
+
+func (o *pullImageOperation) Apply(ctx context.Context) error {
+	return o.engine.PullImage(ctx, o.imageReference)
+}
+
+func (o *pullImageOperation) Inspect(ctx context.Context) (transaction.Inspection, error) {
+	image, err := o.engine.InspectImage(ctx, o.imageReference)
+	if errors.Is(err, containerengine.ErrNotFound) {
+		return transaction.Inspection{Status: transaction.InspectionNotApplied}, nil
+	}
+	if err != nil {
+		return transaction.Inspection{}, err
+	}
+	matches, err := imageMatches(image, o.expectedDigest, o.platform)
+	if err != nil {
+		return transaction.Inspection{}, err
+	}
+	result := resultJSON(image)
+	if !matches {
+		return transaction.Inspection{Status: transaction.InspectionNotApplied, Result: result}, nil
+	}
+	return transaction.Inspection{Status: transaction.InspectionApplied, Result: result}, nil
+}
+
 func (o *loadImageOperation) Apply(ctx context.Context) error {
 	archive, err := os.Open(o.archivePath)
 	if err != nil {
@@ -62,6 +92,30 @@ type createContainerOperation struct {
 	spec          containerengine.ContainerSpec
 }
 
+type removeContainerOperation struct {
+	engine containerengine.Engine
+	name   string
+}
+
+func (o *removeContainerOperation) Apply(ctx context.Context) error {
+	err := o.engine.RemoveContainer(ctx, o.name, true)
+	if errors.Is(err, containerengine.ErrNotFound) {
+		return nil
+	}
+	return err
+}
+
+func (o *removeContainerOperation) Inspect(ctx context.Context) (transaction.Inspection, error) {
+	record, err := o.engine.InspectContainer(ctx, o.name)
+	if errors.Is(err, containerengine.ErrNotFound) {
+		return transaction.Inspection{Status: transaction.InspectionApplied}, nil
+	}
+	if err != nil {
+		return transaction.Inspection{}, err
+	}
+	return transaction.Inspection{Status: transaction.InspectionNotApplied, Result: containerResult(record)}, nil
+}
+
 func (o *createContainerOperation) Apply(ctx context.Context) error {
 	_, err := o.engine.CreateContainer(ctx, o.spec)
 	return err
@@ -168,7 +222,7 @@ func healthInspection(report healthcheck.ActuatorReport, ready bool, err error)
 }
 
 func containerMatches(record containerengine.Container, expectedImageID string, spec containerengine.ContainerSpec) bool {
-	if record.ImageID != expectedImageID || record.NetworkMode != spec.NetworkMode || record.RestartPolicy != spec.RestartPolicy {
+	if record.ImageID != expectedImageID || record.NetworkMode != spec.NetworkMode || record.RestartPolicy != spec.RestartPolicy || record.User != spec.User || record.StopTimeoutSeconds != spec.StopTimeoutSeconds {
 		return false
 	}
 	for _, expected := range spec.Environment {
@@ -195,6 +249,8 @@ func containerResult(record containerengine.Container) json.RawMessage {
 }
 
 var _ transaction.Operation = (*loadImageOperation)(nil)
+var _ transaction.Operation = (*pullImageOperation)(nil)
+var _ transaction.Operation = (*removeContainerOperation)(nil)
 var _ transaction.Operation = (*createContainerOperation)(nil)
 var _ transaction.Operation = (*startContainerOperation)(nil)
 var _ transaction.Operation = (*healthOperation)(nil)