Skip to content

InterpretedNamespace

Defined in: packages/runtime/src/platform/boot.ts:115

Fully-interpreted namespace ready to hand to createContainerKernel.

The shape of buildNamespace’s return value. Holds every piece of state a kernel needs to start — mounts, process table, log, overlay layers, merged env, catalog install hook, srv callbacks, device wiring, permissions, and a dispose() that tears down bridge proxies and the log on shutdown. Consumed by createContainerKernel and the internal buildInstance helper.

readonly bridgeProxies: object[]

Defined in: packages/runtime/src/platform/boot.ts:145

Bridge-proxy disconnect handles, populated for every bridge-kind mount. dispose() walks this list on shutdown.

disconnect(): void

void


readonly catalogInstall: ((name) => Promise<CatalogInstallResult | undefined>) | undefined

Defined in: packages/runtime/src/platform/boot.ts:132

Callback bound to the pkg bin’s .catalog() install path. undefined when the image has no catalog entries.


readonly containerManager: ContainerManager | undefined

Defined in: packages/runtime/src/platform/boot.ts:152

Container manager wired when devices.container is truthy; powers docker run-style bins and /dev/container.


readonly defaultEnv: Record<string, string>

Defined in: packages/runtime/src/platform/boot.ts:129

Merged environment — precedence DEFAULT_ENV (lowest), then ctx.env, then opts.specEnv (highest). Copied per-spawn.


readonly factotumGetAuthHeader: ((pid, domain) => string | null) | undefined

Defined in: packages/runtime/src/platform/boot.ts:159

Factotum credential-proxy lookup — populated when devices.factotum is truthy. Consulted by httpFS for authenticated registries.


readonly getServer: ((name) => Fileserver | undefined) | undefined

Defined in: packages/runtime/src/platform/boot.ts:139

/srv lookup callback. See postServer for gating.


readonly imageResolver: ImageResolver | undefined

Defined in: packages/runtime/src/platform/boot.ts:155

Image resolver for compose — populated when devices.container is truthy.


readonly kernelLog: KernelLog

Defined in: packages/runtime/src/platform/boot.ts:122

Kernel log (RFC 5424 ring buffer) exposed at /proc/log and by dmesg.


readonly mounts: Map<string, Fileserver | Fileserver[]>

Defined in: packages/runtime/src/platform/boot.ts:118

Mount table keyed by absolute path. Array values represent union binds (front-to-back search order).


readonly overlayRoot: Fileserver

Defined in: packages/runtime/src/platform/boot.ts:126

Composed overlay root (upper over ctx.rootFs) — mounted at /.


readonly permissions: object

Defined in: packages/runtime/src/platform/boot.ts:148

Kernel permission bag — passed through to createKernel({ permissions }).

mount: MountPolicy

spawn: boolean


readonly postServer: ((name, server) => void) | undefined

Defined in: packages/runtime/src/platform/boot.ts:137

/srv post callback. undefined when devices.srv is off or allow.srv is false.


readonly processTable: Map<Pid, Process>

Defined in: packages/runtime/src/platform/boot.ts:120

Shared process table — the same Map the kernel mutates at spawn/exit.


readonly registerExec: (binName, fn) => void

Defined in: packages/runtime/src/platform/boot.ts:134

Registers a new bin into the upper overlay. Skips reserved coreutils/builtin names.

string

BinFunction

void


readonly removeServer: ((name) => void) | undefined

Defined in: packages/runtime/src/platform/boot.ts:141

/srv removal callback. See postServer for gating.


readonly upperFs: MemoryFileserver

Defined in: packages/runtime/src/platform/boot.ts:124

Writable upper layer of the overlay root. Bins are registered here via setExec.

dispose(): void

Defined in: packages/runtime/src/platform/boot.ts:163

Aggregated cleanup. Call once on shutdown or on any start-failure path; idempotent is NOT guaranteed — call exactly once.

void