Taskfile.yaml

version: "3"

vars:
    GO_MODULES:
        sh: cat go.work | grep -oEh  '\t+(\./*[^[:space:]]*)' | tr -d '\t'
    GO_ROOT_PKG:
        sh: cat go.mod | grep -oE '^module[^\S]+' | cut -d' ' -f2
    GO_COMMAND: go
    SUPPORTED_ARCHS: [arm64]
    BUILD_OUT_DIR: gen/build
    TEST_BIN_DIR: ./gen/build/test-bin
    LINUX_RUNTIME_DIR: ./gen/build/linux-runtime
    NERDCTL_CMD: "{{.SUDO_CMD}} {{.TEST_BIN_DIR}}/nerdctl"
    # NERDCTL_CMD: 'docker'
    SUDO_CMD: "" # 'sudo -A -E'

    FORKS:
        map:
            cgroup-exporter:
                branch: main
                repo: "github.com/walteh/cgroup-exporter"
                upstream: "github.com/arianvp/cgroup-exporter"
                path: "../cgroup-exporter"

            cadvisor:
                branch: main
                repo: "github.com/walteh/cadvisor"
                upstream: "github.com/google/cadvisor"
                path: "../cadvisor"

            vz:
                branch: main
                repo: "github.com/Code-Hex/vz"
                upstream: "github.com/Code-Hex/vz"
                path: "../vz"

            ttrpc:
                branch: main
                repo: "github.com/walteh/ttrpc"
                upstream: "github.com/containerd/ttrpc"
                path: "../ttrpc"

            containerd:
                branch: main
                repo: "github.com/walteh/containerd"
                upstream: "github.com/containerd/containerd"
                path: "../containerd"

            nerdctl:
                branch: main
                repo: "github.com/walteh/nerdctl"
                upstream: "github.com/containerd/nerdctl"
                path: "../nerdctl"

            runc:
                branch: main
                repo: "github.com/walteh/runc"
                upstream: "github.com/opencontainers/runc"
                path: "../runc"

            gvisor-tap-vsock:
                branch: main
                repo: "github.com/walteh/gvisor-tap-vsock"
                upstream: "github.com/containers/gvisor-tap-vsock"
                path: "../gvisor-tap-vsock"

            buildkit:
                branch: master
                repo: "github.com/walteh/buildkit"
                upstream: "github.com/moby/buildkit"
                path: "../buildkit"

            console:
                branch: main
                repo: "github.com/walteh/console"
                upstream: "github.com/containerd/console"
                path: "../console"

            go-runc:
                branch: main
                repo: "github.com/walteh/go-runc"
                upstream: "github.com/containerd/go-runc"
                path: "../go-runc"

            go-errors:
                branch: main
                repo: "github.com/walteh/go-errors"
                upstream: "gitlab.com/tozd/go/errors"
                path: "../go-errors"

            fsutil:
                branch: master
                repo: "github.com/walteh/fsutil"
                upstream: "github.com/tonistiigi/fsutil"
                path: "../fsutil"

            task:
                branch: main
                repo: "github.com/walteh/task"
                upstream: "github.com/go-task/task"
                path: "../task"

            kubernetes:
                branch: main
                repo: "github.com/walteh/kubernetes"
                upstream: "k8s.io/kubernetes"
                path: "../kubernetes"

env:
    COMPOSE_BAKE: true
    CLICOLOR: 1
    GOPROXY: "https://proxy.golang.org"
    GOSUMDB: sum.golang.org
    GOPRIVATE: github.com/walteh
    CODE_EDITOR_FILE_REF_PREFIX: cursor://file/
    # OTEL_ENDPOINT_TO_SET_TCP: dns://localhost:4317
    OTEL_EXPORTER_OTLP_ENDPOINT:
        sh: mkdir -p /tmp/tcontainerd-fs-env && echo -n '{{.OTEL_ENDPOINT_TO_SET_TCP | default ""}}' | tee /tmp/tcontainerd-fs-env/OTEL_EXPORTER_OTLP_ENDPOINT
    OTEL_EXPORTER_OTLP_METRICS_ENDPOINT:
        sh: mkdir -p /tmp/tcontainerd-fs-env && echo -n '{{.OTEL_ENDPOINT_TO_SET_TCP | default ""}}' | tee /tmp/tcontainerd-fs-env/OTEL_EXPORTER_OTLP_METRICS_ENDPOINT
    OTEL_EXPORTER_OTLP_TRACES_ENDPOINT:
        sh: mkdir -p /tmp/tcontainerd-fs-env && echo -n '{{.OTEL_ENDPOINT_TO_SET_TCP | default ""}}' | tee /tmp/tcontainerd-fs-env/OTEL_EXPORTER_OTLP_TRACES_ENDPOINT
    OTEL_EXPORTER_OTLP_PROTOCOL:
        sh: mkdir -p /tmp/tcontainerd-fs-env && echo -n 'grpc' | tee /tmp/tcontainerd-fs-env/OTEL_EXPORTER_OTLP_PROTOCOL
    DOCKER_BUILDKIT: 1
    PAGER: less
    DEBUG_CONTAINERD_TEST: 0
    DEBUG_BUILDKITD: 0
    DEBUG_NERDCTL: 0
    DEBUG_CONTAINERD_SHIM_RUNM_V2_TEST:
        sh: mkdir -p /tmp/tcontainerd-fs-env && echo -n '0' | tee /tmp/tcontainerd-fs-env/DEBUG_CONTAINERD_SHIM_RUNM_V2_TEST

tasks:
    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region MISC
    #=================================================================================
    #=================================================================================
    #=================================================================================
    claude:
        desc: runs the claude agent
        vars:
            CLI_ARGS:
                sh: echo "{{.CLI_ARGS | default ""}}"

        cmds:
          - cmd: bunx --bun @anthropic-ai/claude-code@latest --ide {{.CLI_ARGS}}

    term:
        desc: opens a terminal in the project root
        platforms: [darwin]
        cmds:
          - cmd: open -a Terminal $(pwd)

    otel:tui:run:
        desc: runs the otel tui
        cmds:
          - cmd: otel-tui

    otel:grafana:run:
        desc: runs tempo
        dir: test/grafana
        cmds:
          - cmd: docker compose up -d --build --force-recreate --always-recreate-deps --remove-orphans --renew-anon-volumes
          - cmd: docker compose ps

    otel:grafana:stop:
        desc: stops the grafana
        dir: test/grafana
        cmds:
          - cmd: docker compose down

    zellij:
        desc: opens zellij
        platforms: [darwin]
        cmds:
          - cmd: zellij --config-dir .zellij

    #endregion

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region GO
    #=================================================================================
    #=================================================================================
    #=================================================================================

    go:tidy:
        run: once
        aliases: [go-mod-tidy]
        cmds:
          - cmd: go tool go-work-sync -quiet
            silent: true
          - for: {var: GO_MODULES}
            cmd: cd {{.ITEM}} && go mod tidy -e

    go:upgrade:
        aliases: [go-mod-upgrade]
        run: once
        cmds:
          - cmd: go tool go-mod-upgrade --force
          - task: go-mod-tidy

    go:update:
        aliases: [go-mod-update]
        requires: {vars: [CLI_ARGS]}
        run: once
        cmds:
          - task: go:tidy
          - for: {var: GO_MODULES}
            cmd: cd {{.ITEM}} && go get -u {{.CLI_ARGS}}
          - task: go:tidy

    go:lint:
        desc: runs the linters
        vars:
            GO_FILES:
                sh: find . -type f -name '*.go' -not -path '*/gen/*' -not -path '*/proto/*'
        cmds:
          - for: {var: GO_FILES}
            cmd: |-
                tmp=$(mktemp); cat {{.ITEM}} | go tool goshim retab > $tmp; mv $tmp {{.ITEM}}
          - cmd: go tool golangci-lint run --fix ./...

    go:test:
        desc: runs the tests
        vars:
            ARGS: '{{.CLI_ARGS | default "./..."}}'
        cmds:
          - cmd: go tool goshim test -function-coverage {{.ARGS}}

    #endregion

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region GENERATE
    #=================================================================================
    #=================================================================================
    #=================================================================================

    gen:all:
        desc: generates all
        cmds:
          - task: gen:options
          - task: gen:buf
          - task: gen:mockery

    gen:copygen:*:
        desc: generates copygen files
        cmds:
          - go tool copygen

    # gen:mainpkgcopy:
    #     desc: copies the mainpkg to the test/cmd/runc directory
    #     vars:
    #         GEN_DATA:
    #             sh: |-
    #                 go tool findcodetag --tag=//go:mainpkgcopy .
    #         GEN_SOURCE_FILES:
    #             sh: |-
    #                 grep -rl "//go:mainpkgcopy" --include="*.go" . || true
    #     cmds:
    #       - for: {var: GEN_DATA, split: "\n"}
    #         cmd: |-
    #             full_module={{splitList " " .ITEM | last}}
    #             module_base={{splitList " " .ITEM | last | splitList "/" | last}}
    #             source=$(go list -f '{{printf "{{.Dir}}"}}' $full_module)
    #             dest=./gen/mainpkgcopy/$full_module
    #             rsync -av --include='*.go' --exclude='*' $source/ $dest
    #             # for all files, rename 'package main' to 'package $module' and func main() to func Main()
    #             find $dest -type f -name '*.go'  -exec sed -i '' "s/package main/package ${module_base}_main/g" {} +
    #             find $dest -type f -name '*.go' -exec sed -i '' 's/func main()/func Main___main()/g' {} +
    #             echo '{"Replace":{}}' > $dest/overlay.json
    #             # for each file in the dest dir, add a mapping entry to the overlay.json file
    #             files=$(find $dest -type f -name '*.go')
    #             for file in $files; do
    #                 # add a mapping entry to the overlay.json file mapping to the old file
    #                 old_file=$source/$(basename $file)
    #                 new_file=$dest/$(basename $file)
    #                 # add Replace[old_file] = new_file mapping to the overlay.json file
    #                 jq ".Replace[\"$old_file\"] = \"$new_file\"" $dest/overlay.json > tmp.json && mv tmp.json $dest/overlay.json
    #             done

    gen:options:
        desc: generates options for structs with '//go:opts' comment
        vars:
            OPTION_GEN_DATA:
                sh: |-
                    go tool findcodetag --tag=//go:opts --type=struct .
            OPTION_GEN_SOURCE_FILES:
                sh: |-
                    grep -rl "//go:opts" --include="*.go" . || true
        generates:
          - "**/*_opts.gen.go"
        sources:
          - '{{.OPTION_GEN_SOURCE_FILES | join ","}}'
        cmds:
          - for: {var: OPTION_GEN_DATA, split: "\n"}
            cmd: |-
                set -e
                if [ -z "{{.OPTION_GEN_DATA}}" ]; then echo "no options to generate"; exit 0; fi
                STRUCT_NAME="{{ splitList " " .ITEM | last }}"
                if [[ ! "$STRUCT_NAME" == *"Opts" ]]; then
                  echo "Error: Struct '$STRUCT_NAME' must have 'Opts' suffix for options generation"
                  exit 1
                fi
                {{.GO_COMMAND}} tool github.com/kazhuravlev/options-gen/cmd/options-gen \
                  -out-filename={{splitList " " .ITEM | first}}/{{ splitList " " .ITEM | last | lower | trimSuffix "opts" }}_opts.gen.go \
                  -filename={{ splitList " " .ITEM | rest | first }} \
                  -from-struct={{ splitList " " .ITEM | last }} \
                  -out-setter-name={{ splitList " " .ITEM | last | trimSuffix "Opts" }}Opt \
                  -constructor=private \
                  -all-variadic \
                  -public-getters \
                  -pkg={{ splitList " " .ITEM | first | splitList "/" | last }}
          - for: {var: OPTION_GEN_DATA, split: "\n"}
            cmd: |-
                gofmt -w {{ splitList " " .ITEM | first }}/{{ splitList " " .ITEM | last | lower | trimSuffix "opts" }}_opts.gen.go

    gen:mockery:
        desc: generates mocks for interfaces with '//go:mock' comment
        vars:
            TMP_DIR:
                sh: mktemp -d
            MOCKERY_INTERFACE_DATA:
                sh: |-
                    go tool findcodetag . --tag=//go:mock --type=interface
            MOCKERY_SOURCE_FILES:
                sh: |-
                    grep -rl "//go:mock" --include="*.go" . || true
            ALL_MOCKERY_INTERFACE_DATA:
                sh: |-
                    echo "{{.MOCKERY_INTERFACE_DATA}}"
        sources:
          - '{{.MOCKERY_SOURCE_FILES | join ","}}'
          - .mockery.yaml
          - proto/**/*.pb.go
        generates:
          - ./gen/mocks/**/*_mock.gen.go
        cmds:
          - cmd: mkdir -p {{.TMP_DIR}}
          - defer: rm -rf {{.TMP_DIR}}
          - cmd: cp .mockery.yaml {{.TMP_DIR}}/.mockery.yaml

          - for: {var: "ALL_MOCKERY_INTERFACE_DATA", split: "\n", as: ITEM}
            cmd: |-
                set -e
                if [ -z "{{.ITEM}}" ]; then echo "no mockery to generate"; exit 0; fi
                yq -i ".packages.\"{{ .GO_ROOT_PKG }}/{{ splitList " " .ITEM | first }}\".interfaces.{{ splitList " " .ITEM | last }} = {}" {{.TMP_DIR}}/.mockery.yaml
          - cmd: cat {{.TMP_DIR}}/.mockery.yaml
          - cmd: |-
                {{.GO_COMMAND}} tool github.com/vektra/mockery/v3 --config={{.TMP_DIR}}/.mockery.yaml

    gen:buf:
        desc: generates protobuf files
        dir: proto
        sources:
          - "**/*.proto"
          - "buf.*"
          - "../tools/cmd/**/*.go"
        generates:
          - "**/*.pb.go"
        cmds:
          - |-
            {{.GO_COMMAND}} tool github.com/bufbuild/buf/cmd/buf generate

    #endregion

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region BUILD
    #=================================================================================
    #=================================================================================
    #=================================================================================

    build:go:run:overlaygen-main:
        internal: true
        desc: runs the overlaygen tool
        requires: {vars: [MAIN_DIR, TMP_DIR]}
        cmds:
          - cmd: go tool overlaygen --quiet --tmpdir {{.TMP_DIR}} main {{.MAIN_DIR}}
            silent: true

    build:go:*:*:*:
        label: "build:go:{{.NAME}}:{{.OS}}:{{.ARCH}}"
        requires: {vars: [MAIN_DIR]}
        desc: builds a binary
        vars:
            TMP_DIR_SH:
                sh: mktemp -d
            OS: "{{index .MATCH 1}}"
            ARCH: "{{index .MATCH 2}}"
            NAME: "{{index .MATCH 0}}"
            TMP_DIR: "{{.TMP_DIR_SH}}/{{.OS}}_{{.ARCH}}_{{.NAME}}"
            BIN_DIR: "{{.TEST_BIN_DIR}}"
            SYMLINK: '{{.SYMLINK | default ""}}'
            EXTLDFLAGS: '{{.STATIC | eq "1" | ternary "-static" ""}} {{.EXTLDFLAGS}}'
            TAGS: "{{.TAGS}}"
            CD_DIR: '{{.CD_DIR | default "."}}'
            LD_FLAGS: |-
                -extldflags={{.EXTLDFLAGS}} {{.DEBUG | eq "1" | ternary "-compressdwarf=false" "-s -w"}} {{.LD_FLAGS}}
            GC_FLAGS: '{{.DEBUG | eq "1" | ternary "all=-N -l" ""}}'
            OUT_DIR: '{{.BIN_DIR | default "./gen/build/{{.OS}}_{{.ARCH}}_binaries"}}'
            BUILDMODE: '{{.BUILDMODE | default "default"}}'
            CGO_ENABLED: '{{.CGO_ENABLED | default "0"}}'

            # Build flags with Go 1.25 improvements
            ASAN_FLAG: |-
                {{.ASAN | default .DEBUG | eq "1" | and (.CGO_ENABLED | eq "1") | and (.CC | eq "clang") | ternary "-asan" ""}}
            RACE_FLAG: |-
                {{.RACE | default .DEBUG | eq "1" | and (.ASAN | ne "1") | and (.CGO_ENABLED | eq "1") | and (.CC | eq "clang") | ternary "-race" ""}}

            BUILD_FLAGS: |-
                -mod=mod -overlay={{.TMP_DIR}}/overlay.json -tags="{{.TAGS}} overlaygen" -ldflags="{{.LD_FLAGS}}" -gcflags="{{.GC_FLAGS}}" {{.ASAN_FLAG}} {{.RACE_FLAG}} -o="{{.PWD}}/{{.OUT_DIR}}/{{.NAME}}"

        env:
            CC: '{{.CC | default "clang"}}'
            CGO_ENABLED: "{{.CGO_ENABLED}}"
            GOOS: "{{.OS}}"
            GOARCH: "{{.ARCH}}"
            CGO_LDFLAGS: '{{.CC | empty | ternary "-Wl,-no_warn_duplicate_libraries" ""}}' # https://stackoverflow.com/a/78585264/11025621
            # Go 1.25 environment variables
            GOEXPERIMENT: |-
                greenteagc,jsonv2
            GOWORK: "off"
            ASAN_OPTIONS: "{{.ASAN_OPTIONS}}"
        generates:
          - "{{.OUT_DIR}}/{{.NAME}}"
        cmds:
          - cmd: mkdir -p {{.TMP_DIR}}
            silent: true
          - task: build:go:run:overlaygen-main
            vars:
                MAIN_DIR: "{{.MAIN_DIR}}"
                TMP_DIR: "{{.TMP_DIR}}"
          - defer: rm -rf {{.TMP_DIR}}
            silent: true
          - cmd: echo "building {{.NAME}} {{.OS}} {{.ARCH}}..." 1>/dev/null
          - cmd: cd {{.CD_DIR}} && go build {{.BUILD_FLAGS}} {{.MAIN_DIR}}
            silent: true
          - cmd: if [ "{{.DEBUG}}" != "1" ]; then strip {{.OUT_DIR}}/{{.NAME}}; fi
            silent: true
          - cmd: |-
                if [ "{{.CODESIGN}}" = "1" ]; then cd ./tools && go tool codesign -target ../{{.OUT_DIR}}/{{.NAME}} -quiet -mode=sign --force --entitlement=com.apple.security.virtualization; fi
            silent: true
          - cmd: if [ "{{.SYMLINK}}" != "" ]; then ln -laf {{.OUT_DIR}}/{{.NAME}} {{.OUT_DIR}}/{{.SYMLINK}}; fi
            silent: true

    build:test:buildctl:
        desc: builds the buildctl test
        run: once
        sources:
          - ./test/cmd/buildctl/**
          - ../buildkit/**
          - pkg/**
        generates:
          - "{{.TEST_BIN_DIR}}/buildctl"
        cmds:
          - task: build:go:buildctl:darwin:arm64
            vars:
                DEBUG: "1"
                MAIN_DIR: "./test/cmd/buildctl"

    build:test:nerdctl:
        desc: builds the nerdctl test
        run: once
        sources:
          - ./test/cmd/nerdctl/**
          - ../nerdctl/**
          - pkg/**
        generates:
          - "{{.TEST_BIN_DIR}}/nerdctl"
        cmds:
          - task: build:go:nerdctl:darwin:arm64
            vars:
                DEBUG: "1"
                MAIN_DIR: "./test/cmd/nerdctl"

    build:test:buildkitd:
        desc: builds the buildkitd test binary
        run: once
        sources:
          - ./test/cmd/buildkitd/**
          - ../buildkit/**
          - pkg/**
        generates:
          - "{{.TEST_BIN_DIR}}/buildkitd"
        cmds:
          - task: build:go:buildkitd:darwin:arm64
            vars:
                DEBUG: "1"
                MAIN_DIR: "./test/cmd/buildkitd"

    build:test:containerd:
        desc: builds the containerd test
        run: once
        sources:
          - ./test/cmd/containerd/**/*.go
          - ./../containerd/**/*.go
          - ./pkg/**/*.go
        generates:
          - "{{.TEST_BIN_DIR}}/containerd-test"
        cmds:
          - task: build:go:containerd-test:darwin:arm64
            vars:
                DEBUG: "1"
                MAIN_DIR: "./test/cmd/containerd"

    build:test:containerd-shim-runm-v2:
        desc: builds the containerd shim
        run: once
        sources:
          - "./test/cmd/containerd-shim-runm-v2/**/*.go"
          - "../containerd/**/*.go"
          - "**/*.go"
        generates:
          - "{{.TEST_BIN_DIR}}/containerd-shim-runm-v2"
        cmds:
          - task: build:go:containerd-shim-runm-v2:darwin:arm64
            vars:
                DEBUG: "1"
                CGO_ENABLED: "1"
                MAIN_DIR: "./test/cmd/containerd-shim-runm-v2"
                CODESIGN: "1"

    build:containerd-shim-runm-v2:
        desc: builds the containerd shim
        run: once
        sources:
          - "./cmd/containerd-shim-runm-v2/**/*.go"
          - "../containerd/**/*.go"
          - "**/*.go"
        generates:
          - "{{.TEST_BIN_DIR}}/containerd-shim-runm-v2"
        cmds:
          - task: build:go:containerd-shim-runm-v2:darwin:arm64
            vars:
                DEBUG: "1"
                CGO_ENABLED: "1"
                MAIN_DIR: "./cmd/containerd-shim-runm-v2"
                CODESIGN: "1"

    build:test:runc:
        desc: builds the runc binary
        run: once
        sources:
          - "./test/cmd/runc/**/*.go"
          - "pkg/**/*.go"
          - "test/env/**/*.go"
          - "../runc/**/*.go"
        generates:
          - "{{.TEST_BIN_DIR}}/runc"
        vars:
            GIT_COMMIT:
                sh: git rev-parse HEAD
        cmds:
          - task: build:go:runc:linux:arm64
            vars:
                DEBUG: "1"
                STATIC: "1"
                LD_FLAGS: -X main.gitCommit={{.GIT_COMMIT}}
                TAGS: netgo osusergo
                CC: aarch64-linux-gnu-gcc
                CGO_ENABLED: 1
                MAIN_DIR: "./test/cmd/runc"

    build:runm-linux-init:
        desc: builds the runm-linux-init binary
        run: once
        sources:
          - "**/*.go"
          - "../containerd/**"
        generates:
          - "{{.TEST_BIN_DIR}}/runm-linux-init"
        cmds:
          - task: build:go:runm-linux-init:linux:arm64
            vars:
                DEBUG: "1"
                STATIC: "1"
                MAIN_DIR: "./cmd/runm-linux-init"

    build:runm-linux-host-fork-exec-proxy:
        desc: builds the runm-linux-host-fork-exec-proxy binary
        run: once
        sources:
          - "**/*.go"
        generates:
          - "{{.TEST_BIN_DIR}}/runm-linux-host-fork-exec-proxy"
        cmds:
          - task: build:go:runm-linux-host-fork-exec-proxy:linux:arm64
            vars:
                DEBUG: "1"
                STATIC: "1"
                MAIN_DIR: "./cmd/runm-linux-host-fork-exec-proxy"

    build:runm-linux-mounter:
        desc: builds the runm-linux-mounter binary
        run: once
        sources:
          - "**/*.go"
        generates:
          - "{{.TEST_BIN_DIR}}/runm-linux-mounter"
        cmds:
          - task: build:go:runm-linux-mounter:linux:arm64
            vars:
                DEBUG: "0"
                STATIC: "1"
                MAIN_DIR: "./cmd/runm-linux-mounter"

    # build:vmfuse-init:
    #     desc: builds the vmfuse-init binary (Linux guest)
    #     run: once
    #     sources:
    #       - "**/*.go"
    #       - "proto/vmfuse/**/*.proto"
    #     generates:
    #       - '{{.TEST_BIN_DIR}}/vmfuse-init'
    #     cmds:
    #       - task: build:go:vmfuse-init:linux:arm64
    #         vars:
    #             DEBUG: '1'
    #             STATIC: '1'
    #             BIN_DIR: '{{.TEST_BIN_DIR}}'
    #             CMD_DIR: './test/experiments/vmfuse/cmd'

    # build:vmfused:
    #     desc: builds the vmfused daemon (macOS host)
    #     run: once
    #     sources:
    #       - "**/*.go"
    #       - "proto/vmfuse/**/*.proto"
    #     generates:
    #       - '{{.TEST_BIN_DIR}}/vmfused'
    #     cmds:
    #       - task: build:go:vmfused:darwin:arm64
    #         vars:
    #             DEBUG: '1'
    #             CGO_ENABLED: '1'
    #             CODESIGN: '1'
    #             BIN_DIR: '{{.TEST_BIN_DIR}}'
    #             CMD_DIR: './test/experiments/vmfuse/cmd'

    # build:vmfusectl:
    #     desc: builds the vmfusectl CLI client (macOS host)
    #     run: once
    #     sources:
    #       - "**/*.go"
    #       - "proto/vmfuse/**/*.proto"
    #     generates:
    #       - '{{.TEST_BIN_DIR}}/vmfusectl'
    #     cmds:
    #       - task: build:go:vmfusectl:darwin:arm64
    #         vars:
    #             DEBUG: '1'
    #             BIN_DIR: '{{.TEST_BIN_DIR}}'
    #             CMD_DIR: './test/experiments/vmfuse/cmd'

    # build:cadvisor-test:
    #     desc: builds the cadvisor binary
    #     run: once
    #     sources:
    #       - "../cadvisor/**/*.go"
    #       - "pkg/**/*.go"
    #       - "test/integration/**/*.go"
    #       - "test/integration/cmd/cadvisor-test/**/*.go"
    #     generates:
    #       - '{{.TEST_BIN_DIR}}/cadvisor-test'
    #     vars:
    #         GIT_COMMIT:
    #             sh: git rev-parse HEAD
    #     cmds:
    #       - task: build:go:cadvisor-test:linux:arm64
    #         vars:
    #             DEBUG: '1'
    #             STATIC: '1'
    #             TAGS: netgo osusergo
    #             MAIN_DIR: './test/integration/cmd/cadvisor-test'

    # CC: aarch64-linux-gnu-gcc
    # CGO_ENABLED: 1

    build:busybox:
        desc: builds the busybox binary
        run: once
        sources:
          - ./linux/busybox/*
        generates:
          - "{{.TEST_BIN_DIR}}/busybox"
        cmds:
          - cmd: |-
                docker buildx build \
                    --platform=linux/arm64 \
                    --progress=plain \
                    --target=export \
                    --output=type=local,dest={{.TEST_BIN_DIR}} \
                    ./linux/busybox
            silent: true

    build:ganesha:
        desc: builds the ganesha binary and plugins
        run: once
        sources:
          - ./linux/extras/*
        generates:
          - "{{.TEST_BIN_DIR}}/ganesha/*"
        cmds:
          - cmd: |-
                docker buildx build \
                    --platform=linux/arm64 \
                    --progress=plain \
                    --file=linux/extras/Dockerfile.ganesha \
                    --target=ganesha-export \
                    --output=type=local,dest={{.TEST_BIN_DIR}} \
                    ./linux/extras
            silent: true

    build:runm-test-binaries:
        run: once
        deps:
          - build:test:containerd
          - build:test:nerdctl
          - build:test:runc
          - build:test:buildkitd
          - build:test:buildctl
          - build:test:containerd-shim-runm-v2
          - build:runm-linux-init
          - build:runm-linux-host-fork-exec-proxy
          - build:runm-linux-mounter
          - build:busybox
        desc: builds all test binaries

    # build:vmfuse-experiment:
    #     run: once
    #     deps:
    #       - build:vmfuse-init
    #       - build:vmfused
    #       - build:vmfusectl
    #       - build:ganesha
    #       - build:busybox
    #       - build:runm-linux-mounter
    #       - build:runm-linux-host-fork-exec-proxy

    #endregion

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region RUN
    #=================================================================================
    #=================================================================================
    #=================================================================================
    run:containerd-test:
        desc: runs the containerd server for testing
        deps:
          - linux:runtime:runm
          - build:runm-test-binaries

        env:
            SHIM_BINARY_PATH:
                sh: echo $(pwd)/{{.TEST_BIN_DIR}}/containerd-shim-runm-v2
            LINUX_RUNTIME_DIR:
                sh: echo $(pwd)/{{.LINUX_RUNTIME_DIR}}
        cmds:
          - task: dev:cleanup-running-shims
          - task: dev:cleanup-containerd-processes
          - cmd: |-
                {{.TEST_BIN_DIR}}/containerd-test

    run:buildkitd-test:
        desc: runs the buildkitd test
        deps:
          - linux:runtime:runm
          - build:runm-test-binaries
        cmds:
          - cmd: |-
                {{.SUDO_CMD}} {{.TEST_BIN_DIR}}/buildkitd-test

    run:containerd-test:pipe-to-file:
        desc: runs the containerd server for testing (pipe to file)
        deps:
          - linux:runtime:runm
          - build:runm-test-binaries
        env:
            SHIM_BINARY_PATH:
                sh: echo $(pwd)/{{.TEST_BIN_DIR}}/containerd-shim-runm-v2
            LINUX_RUNTIME_DIR:
                sh: echo $(pwd)/{{.LINUX_RUNTIME_DIR}}
        vars:
            FILE: '{{.CLI_ARGS | default "./.logs/containerd-test-pipe-to-file.log"}}'
        cmds:
          - task: dev:cleanup-running-shims
          - cmd: |-
                {{.SUDO_CMD}} {{.TEST_BIN_DIR}}/containerd-test | tee {{.FILE}}

    #endregion run

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region RUN:NERDCTL-TEST
    #=================================================================================

    run:nerdctl-test:rm-all-running-containers:
        desc: kills all running containers
        run: once
        cmds:
          - cmd: |-
                {{.NERDCTL_CMD}} ps -q | xargs -I {} {{.NERDCTL_CMD}} rm -f {}

    run:nerdctl-test:kill:
        desc: kills a running container
        deps: ["build:test:nerdctl", "build:test:containerd-shim-runm-v2"]
        requires: {vars: [CONTAINER_ID]}
        vars:
            CONTAINER_ID: '{{.CONTAINER_ID | default ""}}'
            PRETTY_FORMAT: '{{.STDOUT_FILE | empty | ternary " | bat --language=txt --file-name=nerdctl-kill-stdout" ""}}'
        cmds:
          - cmd: |-
                {{.NERDCTL_CMD}} kill {{.CONTAINER_ID}} {{.PRETTY_FORMAT}}

    run:nerdctl-test:run:
        desc: runs the nerdctl test
        deps: ["build:test:nerdctl", "build:test:containerd-shim-runm-v2"]
        vars:
            TIMEOUT: '{{.TIMEOUT | empty | ternary "" "timeout {{.TIMEOUT}}"}}'
            IMAGE: '{{.IMAGE | default "docker.io/library/alpine:latest"}}'
            ARGS: '{{.ARGS | default ""}}'
            FLAGS: '{{.FLAGS | default ""}}'
            STDOUT_FILE_PIPE: '{{.STDOUT_FILE | empty | ternary "" ">"}}'
            STATIC_FLAGS: "--platform=linux/arm64 --network=host --runtime=containerd.shim.runc.v2 --pull=missing"
        # env:
        # DEBUG_NERDCTL_TEST: '12348'
        cmds:
          - cmd: |-
                {{.TIMEOUT}} {{.NERDCTL_CMD}} run {{.STATIC_FLAGS}} {{.FLAGS}} {{.IMAGE}} {{.ARGS}} {{.STDOUT_FILE_PIPE}} {{.STDOUT_FILE}}

    run:nerdctl-test:exec:
        desc: executes a command in a running container
        deps: ["build:test:nerdctl", "build:test:containerd-shim-runm-v2"]
        requires: {vars: [CONTAINER_ID]}
        vars:
            TIMEOUT: '{{.TIMEOUT | default ""}}'
            TIMEOUT_CMD: '{{.TIMEOUT | empty | ternary "" "timeout"}}'
            CONTAINER_ID: '{{.CONTAINER_ID | default ""}}'
            COMMAND: '{{.COMMAND | default "sh"}}'
            FLAGS: '{{.FLAGS | default "-it"}}'
            PRETTY_FORMAT: |-
                {{.STDOUT_FILE | empty | ternary " | bat --language=txt --file-name=nerdctl-exec-stdout" ""}}

        # interactive: true
        cmds:
          - cmd: |-
                {{.TIMEOUT_CMD}} {{.TIMEOUT}} {{.NERDCTL_CMD}} exec {{.FLAGS}} {{.CONTAINER_ID}} sh -c '{{.COMMAND}}' {{.PRETTY_FORMAT}}

    run:nerdctl-test:stop:
        desc: stops a running container
        deps: ["build:test:nerdctl", "build:test:containerd-shim-runm-v2"]
        requires: {vars: [CONTAINER_ID]}
        vars:
            TIMEOUT: '{{.TIMEOUT | empty | ternary "" "timeout {{.TIMEOUT}}"}}'
            CONTAINER_ID: '{{.CONTAINER_ID | default ""}}'
        cmds:
          - cmd: |-
                {{.TIMEOUT}} {{.NERDCTL_CMD}} stop {{.FLAGS}} {{.CONTAINER_ID}}

    run:nerdctl-test:rm:
        desc: deletes a container
        deps: ["build:test:nerdctl"]
        requires: {vars: [CONTAINER_ID]}
        vars:
            CONTAINER_ID: '{{.CONTAINER_ID | default ""}}'
            FLAGS: '{{.FLAGS | default "-f"}}'
        cmds:
          - cmd: |-
                {{.NERDCTL_CMD}} rm {{.FLAGS}} {{.CONTAINER_ID}} | bat --language=txt --file-name=nerdctl-rm-stdout

    run:nerdctl-test:ps:
        desc: lists running containers
        deps: ["build:test:nerdctl"]
        vars:
            FLAGS: '{{.FLAGS | default ""}}'
            STDOUT_FILE: '{{.STDOUT_FILE | default ""}}'
            STDOUT_FILE_PIPE: '{{.STDOUT_FILE | empty | ternary "" ">"}}'
            PRETTY_FORMAT: '{{.STDOUT_FILE | empty | ternary " | bat --language=txt --file-name=nerdctl-ps-stdout" ""}}'
        cmds:
          - cmd: |-
                {{.NERDCTL_CMD}} ps {{.FLAGS}} {{.STDOUT_FILE_PIPE}} {{.STDOUT_FILE}} {{.PRETTY_FORMAT}}

    run:nerdctl-test:ps:ensure-container:
        desc: ensures a container is running
        deps: ["build:test:nerdctl"]
        vars:
            FLAGS: '{{.FLAGS | default ""}}'
            CONTAINER_ID: '{{.CONTAINER_ID | default ""}}'
            STATUS: '{{.STATUS | default "Up"}}'
        cmds:
          - cmd: |-
                {{.NERDCTL_CMD}} ps {{.FLAGS}} | grep $(echo {{.CONTAINER_ID}} | cut -c1-12)  | grep {{.STATUS}} > /dev/null || (echo "container not found in ps output" && exit 1)
            silent: true

    #endregion

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region LINUX:RUNTIME
    #=================================================================================

    linux:runtime:runm:
        desc: builds the linux runtime
        deps:
          - linux:runtime:kernel
          - linux:runtime:initramfs
          - linux:runtime:mbin.squashfs

    linux:runtime:vmfuse:
        desc: builds the linux runtime
        deps:
          - linux:runtime:kernel
          - linux:runtime:initramfs
          - linux:runtime:mbin-vmfuse.squashfs

    linux:runtime:mbin.squashfs:
        desc: builds the mbin squashfs
        deps: ["build:runm-test-binaries"]
        run: once
        sources:
          - "{{.TEST_BIN_DIR}}/runm-linux-init"
          - "{{.TEST_BIN_DIR}}/runm-linux-host-fork-exec-proxy"
          - "{{.TEST_BIN_DIR}}/runc"
        generates:
          - "{{.LINUX_RUNTIME_DIR}}/mbin.squashfs"
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-linux-runtime-mbin-XXXXXX
            FS:
                map:
                    runm-linux-init: "{{.TEST_BIN_DIR}}/runm-linux-init"
                    runm-linux-host-fork-exec-proxy: "{{.TEST_BIN_DIR}}/runm-linux-host-fork-exec-proxy"
                    runc: "{{.TEST_BIN_DIR}}/runc"
        cmds:
          - defer: rm -rf {{.TMP_DIR}}
            silent: true
          - cmd: mkdir -p {{.TMP_DIR}}/wrk {{.LINUX_RUNTIME_DIR}}
            silent: true
          - for: {var: FS}
            cmd: mkdir -p $(dirname {{.TMP_DIR}}/wrk/{{.KEY}}) && cp {{.ITEM}} {{.TMP_DIR}}/wrk/{{.KEY}}
            silent: true
          - cmd: cd {{.TMP_DIR}}/wrk && mksquashfs . ../mbin.squashfs -quiet
            silent: true
          - cmd: cp {{.TMP_DIR}}/mbin.squashfs {{.LINUX_RUNTIME_DIR}}/mbin.squashfs
            silent: true

    linux:runtime:mbin-vmfuse.squashfs:
        desc: builds the mbin squashfs
        deps: ["build:runm-test-binaries"]
        run: once
        sources:
          - "{{.TEST_BIN_DIR}}/vmfuse-init"
          - "{{.TEST_BIN_DIR}}/ganesha*"
        generates:
          - "{{.LINUX_RUNTIME_DIR}}/mbin-vmfuse.squashfs"
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-linux-runtime-mbin-vmfuse-XXXXXX
            FS:
                map:
                    vmfuse-init: "{{.TEST_BIN_DIR}}/vmfuse-init"
                    ganesha: "{{.TEST_BIN_DIR}}/ganesha"
                    ganesha-plugins.tar.gz: "{{.TEST_BIN_DIR}}/ganesha-plugins.tar.gz"
        cmds:
          - defer: rm -rf {{.TMP_DIR}}
            silent: true
          - cmd: mkdir -p {{.TMP_DIR}}/wrk {{.LINUX_RUNTIME_DIR}}
            silent: true
          - for: {var: FS}
            cmd: mkdir -p $(dirname {{.TMP_DIR}}/wrk/{{.KEY}}) && cp {{.ITEM}} {{.TMP_DIR}}/wrk/{{.KEY}}
            silent: true
          - cmd: cd {{.TMP_DIR}}/wrk && mksquashfs . ../mbin-vmfuse.squashfs -quiet
            silent: true
          - cmd: cp {{.TMP_DIR}}/mbin-vmfuse.squashfs {{.LINUX_RUNTIME_DIR}}/mbin-vmfuse.squashfs
            silent: true

    linux:runtime:initramfs:
        desc: builds the initramfs
        run: once
        deps: ["build:runm-test-binaries"]
        sources:
          - "{{.TEST_BIN_DIR}}/busybox"
          - "{{.TEST_BIN_DIR}}/runm-linux-mounter"
        generates:
          - "{{.LINUX_RUNTIME_DIR}}/initramfs.cpio.gz"
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-linux-runtime-initramfs-XXXXXX
            FS:
                map:
                    /bin/busybox: "{{.TEST_BIN_DIR}}/busybox"
                    /runm-linux-mounter: "{{.TEST_BIN_DIR}}/runm-linux-mounter"
            INIT_SYMLINK: "/runm-linux-mounter"
        cmds:
          - defer: "rm -rf {{.TMP_DIR}}"
            silent: true
          - cmd: mkdir -p {{.TMP_DIR}}/initramfs {{.LINUX_RUNTIME_DIR}}
            silent: true
          - for: {var: FS}
            cmd: mkdir -p $(dirname {{.TMP_DIR}}/initramfs/{{.KEY}}) && cp {{.ITEM}} {{.TMP_DIR}}/initramfs/{{.KEY}}
            silent: true
          - cmd: cd {{.TMP_DIR}}/initramfs && ln -sf {{.INIT_SYMLINK}} init
            silent: true
          - cmd: cd {{.TMP_DIR}} && tree -lahsRpDF --du initramfs
            silent: true
          - cmd: cd {{.TMP_DIR}}/initramfs && find . -print0 | cpio --null -o --format=newc > {{.TMP_DIR}}/initramfs.cpio
            silent: true
          - cmd: gzip -1 -q {{.TMP_DIR}}/initramfs.cpio
            silent: true
          - cmd: cp {{.TMP_DIR}}/initramfs.cpio.gz {{.LINUX_RUNTIME_DIR}}/initramfs.cpio.gz
            silent: true

    linux:runtime:kernel:
        desc: builds the kernel
        run: once
        sources:
          - ./linux/kernel/**
        generates:
          - "./{{.LINUX_RUNTIME_DIR}}/kernel"
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-linux-runtime-kernel-XXXXXX
        cmds:
          - defer: "rm -rf {{.TMP_DIR}}"
            silent: true
          - cmd: mkdir -p {{.TMP_DIR}}
            silent: true
          - cmd: mkdir -p {{.LINUX_RUNTIME_DIR}}
            silent: true
          - |-
            docker buildx build --platform=linux/arm64 --target=export --progress=plain --output=type=local,dest={{.TMP_DIR}} ./linux/kernel
          - cmd: mv -f {{.TMP_DIR}}/* {{.LINUX_RUNTIME_DIR}}
            silent: true

    #endregion linux:runtime

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region FORKS
    #=================================================================================

    fork:install:*:
        desc: installs a fork
        vars:
            NAME: "{{index .MATCH 0}}"
            ITEM_PATH: '{{get (index .FORKS .NAME) "path"}}'
            ITEM_REPO: '{{get (index .FORKS .NAME) "repo"}}'
        cmds:
          - cmd: git clone {{.ITEM_REPO}} {{.ITEM_PATH}}
          - cmd: cd {{.ITEM_PATH}} && git checkout {{.ITEM_BRANCH}}

    fork:install:all:
        desc: installs all forks
        cmds:
          - for: {var: FORKS}
            task: fork:install:{{.KEY}}
            vars:
                NAME: "{{.KEY}}"

    fork:sync:*:
        desc: syncs the forks
        label: "fork:sync:{{.NAME}}"
        vars:
            NAME: "{{index .MATCH 0}}"
            ITEM_PATH: '{{get (index .FORKS .NAME) "path"}}'
            ITEM_BRANCH: '{{get (index .FORKS .NAME) "branch"}}'
            ITEM_REPO: '{{get (index .FORKS .NAME) "repo"}}'
            ITEM_UPSTREAM: '{{get (index .FORKS .NAME) "upstream"}}'
        dir: "{{.ITEM_PATH}}"
        cmds:
          #   - cmd: cp -rf . /tmp/{{.NAME}}-backup
          # create the upstream remote if it doesn't exist
          - cmd: git remote remove upstream || true
          - cmd: git remote add upstream https://{{.ITEM_UPSTREAM}} || true
          - cmd: git fetch upstream
          - cmd: git checkout -b upstream-mirror || git checkout upstream-mirror
          - cmd: git reset --hard upstream/{{.ITEM_BRANCH}}
          - cmd: git push origin upstream-mirror --force
          - cmd: git checkout {{.ITEM_BRANCH}}
          - cmd: git checkout -b backup/$(date +%Y-%m-%d) || git checkout backup/$(date +%Y-%m-%d)
          - cmd: git reset --hard {{.ITEM_BRANCH}}
          - cmd: git push origin backup/$(date +%Y-%m-%d) --force
          - cmd: git checkout {{.ITEM_BRANCH}}
          - cmd: git rebase upstream/{{.ITEM_BRANCH}} || (echo "manual rebase required for {{.ITEM_REPO}}" && exit 1)
          - cmd: git push origin {{.ITEM_BRANCH}} --force

    # fork:sync:all:
    #     desc: syncs the forks
    #     cmds:
    #       # first loop thorugh all and if any are dirty throw an error
    #       - for: {var: FORKS}
    #         cmd: |-
    #             cd {{.DIR}} && git checkout {{.ITEM.branch}} && git status --porcelain | grep -q '^M' && echo "{{.DIR}} is dirty" && exit 1
    #       - for: {var: FORKS}
    #         task: fork:sync:{{.ITEM.repo}}
    #         vars:
    #             DIR: '{{.DIR}}'
    #             BRANCH: '{{.ITEM.branch}}'
    #             UPSTREAM: '{{.ITEM.upstream}}'

    #endregion fork:sync

    #=================================================================================
    #=================================================================================
    #=================================================================================
    #region DEV
    #=================================================================================

    dev:kill-process:*:
        label: "dev:kill-process:{{.NAME}}"
        # internal: true
        desc: kills a process
        vars:
            NAME: "{{index .MATCH 0}}"
        status:
          - ps aux | grep | grep -qv {{.NAME}}
        cmds:
          - defer: '{{if .EXIT_CODE}}echo "{{.TASK_NAME}} exited with code {{.EXIT_CODE}}!"{{end}}'
            silent: true
          - cmd: |-
                {{.SUDO_CMD}} pkill -f {{.NAME}} || true
            silent: true
          - cmd: |-
                {{.SUDO_CMD}} killall -9 {{.NAME}} || true
            silent: true

    dev:cleanup-running-shims:
        desc: kills all running containers
        run: once
        cmds:
          - task: dev:kill-process:containerd-shim-runm-v2-test
          - task: dev:kill-process:containerd-shim-runc-v2
          - task: dev:kill-process:nerdctl-test
          - task: dev:kill-process:nerdctl
          - task: dev:kill-process:containerd-shim-runm-v2
          - task: dev:kill-process:com.apple.Virtualization.VirtualMachine

    dev:cleanup-containerd-processes:
        desc: kills all running containers
        run: once
        cmds:
          - task: dev:kill-process:containerd-test
          - task: dev:kill-process:buildkitd-test
          - task: dev:kill-process:dlv
          - cmd: rm /tmp/tcontainerd-persistent/lock.pid || true

    dev:2025-06-18:01:
        desc: runs the shim for 2025-06-18 - bun version from entrypoint
        deps: ["linux:runtime:runm"]
        vars:
            TEST_SCENARIO_DIR:
                sh: realpath ./test/scenarios/2025-07-02
        cmds:
          - task: dev:cleanup-running-shims
          - task: run:nerdctl-test:run
            vars:
                FLAGS: "-rm"
                IMAGE: "docker.io/oven/bun:alpine"
                ARGS: |-
                    --version

    dev:2025-07-12:01:
        desc: runs the nerd fonts patcher
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        interactive: true
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-2025-07-12-XXXXXX
        cmds:
          - cmd: mkdir -p ./tmp/fonts-raw/origin ./tmp/fonts-patched
          - task: run:nerdctl-test:rm-all-running-containers
          - task: run:nerdctl-test:run
            vars:
                IMAGE: "docker.io/nerdfonts/patcher:latest"
                FLAGS: |-
                    --rm \
                    -v ./tmp/fonts-raw:/in \
                    -v ./tmp/fonts-patched:/out
                ARGS: |-
                    --progressbars \
                        --mono \
                        --adjust-line-height \
                    --fontawesome \
                    --fontawesomeext \
                    --fontlogos \
                    --octicons \
                    --codicons \
                    --powersymbols \
                    --pomicons \
                    --powerline \
                    --powerlineextra \
                    --material \
                    --weather

    dev:compare-nerdctl-docker:single:
        desc: compares the nerdctl and docker commands
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        requires: {vars: [CMD, VOLUME_FLAGS, IMAGE]}
        interactive: true
        vars:
            DOCKER_CMD: docker
            CUSTOM_ENTRYPOINT_FLAG: '{{.CUSTOM_ENTRYPOINT | empty | ternary "" "--entrypoint="}}'
            SH_MODE: '{{.CUSTOM_ENTRYPOINT | eq "/bin/sh" | ternary "1" "0"}}'
            COMMAND_TEMPLATE: |-
                run \
                    --platform=linux/arm64 \
                    --network=host \
                    --runtime=containerd.shim.runc.v2 \
                    --pull=missing \
                    {{.VOLUME_FLAGS}} --rm {{.CUSTOM_ENTRYPOINT_FLAG}}{{.CUSTOM_ENTRYPOINT}} \
                    {{.IMAGE}} \
                    {{.SH_MODE | eq "1" | ternary "-c" " "}} {{.CMD | quote}}
        cmds:
          - cmd: |-
                echo -e - "=================== docker vs nerdctl ==================="
                echo -e "image:      {{.IMAGE}}"
                echo -e "entrypoint: {{.CUSTOM_ENTRYPOINT | empty | ternary "default" .CUSTOM_ENTRYPOINT}}"
                echo -e "command:    {{.CMD}}"
                echo -e "------------------------ nerdctl ------------------------"
                {{.NERDCTL_CMD}} {{.COMMAND_TEMPLATE}} || echo "exit code: $?"
                echo -e "------------------------ docker -------------------------"
                {{.DOCKER_CMD}} {{.COMMAND_TEMPLATE}} || echo "exit code: $?"
                echo -e "========================================================="
                echo -e ""
            # silent: true

    dev:compare-nerdctl-docker:nerd-fonts-patcher:
        desc: runs the nerd fonts patcher
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            COMMANDS:
              - cmd: |-
                    python3 -c 'import math; print(math.sqrt(16))'
                entrypoint: /bin/sh
              - cmd: |-
                    echo 'import math; print("FontForge Python OK")' > /tmp/ff_test.py && parallel --verbose --jobs=0 'fontforge -script /tmp/ff_test.py' ::: 1 2 3 4 5 6 7 8 9 10
                entrypoint: /bin/sh
              - cmd: |-
                    fontforge -script /nerd/font-patcher -out /out  --progressbars --mono --adjust-line-height --fontawesome --fontawesomeext --fontlogos --octicons --codicons --powersymbols --pomicons --powerline --powerlineextra --material  --weather /in/TX-02-Variable.otf
                entrypoint: /bin/sh
              - cmd: |-
                    --progressbars --mono --adjust-line-height --fontawesome --fontawesomeext --fontlogos --octicons --codicons --powersymbols --pomicons --powerline --powerlineextra --material  --weather

        cmds:
          - for: {var: COMMANDS}
            task: dev:compare-nerdctl-docker
            vars:
                CMD: "{{.ITEM.cmd}}"
                CUSTOM_ENTRYPOINT: "{{.ITEM.entrypoint}}"
                VOLUME_FLAGS: -v ./tmp/fonts-raw:/in -v ./tmp/fonts-patched:/out
                IMAGE: docker.io/nerdfonts/patcher:latest

                # Check Python path and modules

    dev:pty-resize-test:
        desc: Test PTY resize functionality using custom PTY environment
        aliases: [pty-resize-test]
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]

        vars:
            CONTAINER_ID: '{{.CONTAINER_ID | default ""}}'
            FLAGS: '{{.FLAGS | default "-it"}}'
            TIMEOUT: '{{.TIMEOUT | default ""}}'
            TIMEOUT_CMD: '{{.TIMEOUT | empty | ternary "" "timeout"}}'
            SEQUENCE: '{{.SEQUENCE | default "22x55@0s,81x230@2s,100x300@2s,120x400@2s,82x290@2s"}}'

            COMMAND_TO_RUN:
                sh: |-
                    go tool pty-resize-test {{.SEQUENCE}} -generate-shell-script
            BASE_CMD: |-
                {{.TIMEOUT_CMD}} {{.TIMEOUT}} {{.TEST_BIN_DIR}}/nerdctl exec {{.FLAGS}} {{.CONTAINER_ID}} sh -c '{{.COMMAND_TO_RUN}}'
            PTY_RESIZE_TEST_CMD: |-
                go tool pty-resize-test {{.SEQUENCE}} {{.BASE_CMD}}

        cmds:
          - task: run:nerdctl-test:rm-all-running-containers
          - cmd: >-
                {{.SUDO_CMD}} {{.PTY_RESIZE_TEST_CMD}}

    dev:2025-07-02:01:
        desc: runs the shim for 2025-07-02 - complex TypeScript compilation and execution
        deps: ["linux:runtime:runm"]
        vars:
            TEST_SCENARIO_DIR:
                sh: realpath ./test/scenarios/2025-07-02
        cmds:
          - task: dev:cleanup-running-shims
          - task: run:nerdctl-test:run
            vars:
                IMAGE: "docker.io/oven/bun:alpine"
                FLAGS: "--rm --workdir=/app --mount=type=bind,src={{.TEST_SCENARIO_DIR}},dst=/app,ro=true"
                ARGS: |-
                    sh -c "cat '/proc/self/mountinfo' && echo '📦 Installing dependencies...' && \
                    bun install --verbose && echo '🧪 Running tests...' && \
                    bun test && echo '🔨 Building project...' && \
                    bun run build && echo '🏃 Running compiled app...' && \
                    bun run start"

    dev:2025-07-05:01:
        desc: runs the shim for 2025-07-05 - detached mode
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        # interactive: true
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-2025-07-05-XXXXXX
        cmds:
          - defer: "rm -rf {{.TMP_DIR}}"
            silent: true
          - task: run:nerdctl-test:rm-all-running-containers
          - task: run:nerdctl-test:run
            vars:
                FLAGS: "-d"
                IMAGE: "docker.io/library/alpine:latest"
                STDOUT_FILE: "{{.TMP_DIR}}/stdout.txt"
                ARGS: |-
                    sh -c 'echo "Container PID 1: $$"; ps aux; sleep 300'
          - cmd: bat {{.TMP_DIR}}/stdout.txt
            silent: true
          - task: run:nerdctl-test:ps
          - task: run:nerdctl-test:ps:ensure-container
            vars:
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt
                STATUS: "Up"
          - task: dev:pty-resize-test
            vars:
                COMMAND: 'echo "hello world! this is a test"'
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt
                FLAGS: "--tty"
          - task: run:nerdctl-test:exec
            vars:
                COMMAND: 'echo "hello world! this is a test"'
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt
                FLAGS: "--tty"

          - task: run:nerdctl-test:rm
            vars:
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt

          - task: run:nerdctl-test:ps

    dev:2025-07-17:01:
        desc: runs the shim for 2025-07-17 - runm-linux-mounter
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            TEST_SCENARIO_DIR:
                sh: realpath ./test/scenarios/2025-07-17
            TMP_DIR:
                sh: mktemp -d
        cmds:
          - defer: rm -rf {{.TMP_DIR}}
          - cmd: mkdir -p {{.TMP_DIR}}
          - cmd: mkdir -p {{.TMP_DIR}}/forks
          - for: {var: FORKS}
            cmd: rsync -a --exclude='vendor/' --exclude='tmp/' --exclude='.git/' {{.ITEM.path}} {{.TMP_DIR}}/forks/
          - task: run:nerdctl-test:rm-all-running-containers
          - cmd: |-
                {{.NERDCTL_CMD}} build \
                    --platform=linux/arm64 \
                    --progress=plain \
                    --build-context=runm=. \
                    --build-context=go-path=$(go env GOPATH) \
                    --build-context=forks={{.TMP_DIR}}/forks \
                    --target=runm-linux-mounter-builder \
                    --output=type=local,dest={{.TEST_BIN_DIR}} \
                    {{.TEST_SCENARIO_DIR}}

    dev:2025-07-20:01:
        desc: runs the shim for 2025-07-20
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            TEST_SCENARIO_DIR:
                sh: realpath ./test/scenarios/2025-07-20
            TMP_DIR:
                sh: mktemp -d
        cmds:
          - defer: rm -rf {{.TMP_DIR}}
          - task: run:nerdctl-test:rm-all-running-containers
          - cmd: |-
                {{.NERDCTL_CMD}} build \
                    --platform=linux/arm64 \
                    --progress=plain \
                    --build-context=data={{.TEST_SCENARIO_DIR}}/data \
                    --target=export \
                    --output=type=local,dest={{.TEST_BIN_DIR}}/buildtest \
                    {{.TEST_SCENARIO_DIR}}

    dev:vmfuse:2025-07-23:01:
        desc: vmfuse POC end-to-end test - mount directory via Linux VM and NFS
        deps: ["linux:runtime:vmfuse", "build:vmfuse-experiment-binaries"]
        interactive: true
        vars:
            TMP_DIR:
                sh: mktemp -d
            TEST_DIR:
                sh: echo "{{.TMP_DIR}}/test-source"
            MOUNT_TARGET:
                sh: echo "{{.TMP_DIR}}/test-mount"
            VMFUSED_SOCK:
                sh: echo "{{.TMP_DIR}}/vmfused.sock"
        env:
            LINUX_RUNTIME_BUILD_DIR:
                sh: realpath '{{.LINUX_RUNTIME_DIR}}'
            VMFUSED_ADDRESS: "unix://{{.VMFUSED_SOCK}}"
            VMFUSED_BIN:
                sh: realpath '{{.TEST_BIN_DIR}}/vmfused'
            VMFUSECTL_BIN:
                sh: realpath '{{.TEST_BIN_DIR}}/vmfusectl'
        cmds:
          - cmd: |-
                go run ./test/experiments/vmfuse/cmd/vmfuse_t1

    dev:2025-07-26:01:
        desc: runs the shim for 2025-07-26 - detached mode
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-XXXXXX
        cmds:
          - defer: "rm -rf {{.TMP_DIR}}"
            silent: true
          - task: run:nerdctl-test:rm-all-running-containers
          - task: run:nerdctl-test:run
            vars:
                FLAGS: "-d"
                IMAGE: "docker.io/library/alpine:latest"
                STDOUT_FILE: "{{.TMP_DIR}}/stdout.txt"
                ARGS: |-
                    sh -c 'echo "Container PID 1: $$"; ps aux; sleep 300'
          - cmd: bat {{.TMP_DIR}}/stdout.txt
            silent: true
          - task: run:nerdctl-test:ps
          - task: run:nerdctl-test:ps:ensure-container
            vars:
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt
                STATUS: "Up"
          - task: run:nerdctl-test:exec
            vars:
                COMMAND: 'echo "dev:2025-07-26:01 - about to sleep (os:$(uname -o))" && sleep 1 && echo "dev:2025-07-26:01
                    - sleep finished (os:$(uname -o))"'
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt
                FLAGS: "--tty"
          - task: run:nerdctl-test:exec
            vars:
                COMMAND: 'echo "dev:2025-07-26:01 - about to not sleep (os:$(uname -o))"'
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt
                FLAGS: "--tty"

          - task: run:nerdctl-test:rm
            vars:
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/stdout.txt

          - task: run:nerdctl-test:ps

    dev:2025-07-31:01:
        desc: simulates server + topz pattern from book - server running with topz container for inspection
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-XXXXXX
        cmds:
          - defer: "rm -rf {{.TMP_DIR}}"
            silent: true
          - task: run:nerdctl-test:rm-all-running-containers
          # Step 1: Run server container in detached mode (simulating my-app-image)
          - task: run:nerdctl-test:run
            vars:
                FLAGS: "-d"
                IMAGE: "docker.io/library/nginx:alpine"
                STDOUT_FILE: "{{.TMP_DIR}}/server-container-id.txt"
                ARGS: ""
          - cmd: echo "Server container started with ID:"
          - cmd: bat {{.TMP_DIR}}/server-container-id.txt
            silent: true
          - task: run:nerdctl-test:ps
          - task: run:nerdctl-test:ps:ensure-container
            vars:
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/server-container-id.txt
                STATUS: "Up"
          # Step 2: Run topz container sharing PID namespace and exposing port 8080
          - task: run:nerdctl-test:run
            vars:
                FLAGS: "--tty -d -p 19999:19999"
                IMAGE: "netdata/netdata"
                STDOUT_FILE: "{{.TMP_DIR}}/topz-container-id.txt"
                EXTRA_FLAGS:
                    sh: echo "--pid=container:$(cat {{.TMP_DIR}}/server-container-id.txt)"
                ARGS: ""

          - cmd: echo "Topz container started with ID:"
          - cmd: bat {{.TMP_DIR}}/topz-container-id.txt
            silent: true
          - task: run:nerdctl-test:ps
          - task: run:nerdctl-test:ps:ensure-container
            vars:
                CONTAINER_ID:
                    sh: cat {{.TMP_DIR}}/topz-container-id.txt
                STATUS: "Up"
          - cmd: echo "Both containers are running. You can now:"
          - cmd: echo "  - Access topz at http://localhost:8080"
          - cmd: echo "  - Inspect containers with 'task run:nerdctl-test:ps'"
          - cmd: echo "  - Server container ID:" && cat {{.TMP_DIR}}/server-container-id.txt
          - cmd: echo "  - Topz container ID:" && cat {{.TMP_DIR}}/topz-container-id.txt
          - cmd: 'echo "  - Remove with: task run:nerdctl-test:rm CONTAINER_ID=$(cat {{.TMP_DIR}}/server-container-id.txt)"'
          - cmd: echo "Press Ctrl+C to stop this task (containers will remain running)"
          - cmd: sleep 3600 # Hold for inspection (1 hour)

    dev:2025-08-18:01:
        desc: runs nginx web service from compose-test using nerdctl run
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            COMPOSE_DIR:
                sh: realpath ./test/scenarios/compose-test
        cmds:
          - task: run:nerdctl-test:rm-all-running-containers
          - task: run:nerdctl-test:run
            vars:
                FLAGS: |-
                    --rm \
                    -p 8080:80 \
                    -v {{.COMPOSE_DIR}}/html:/usr/share/nginx/html:ro \
                    -e NGINX_HOST=localhost \
                    -e NGINX_PORT=80 \
                    --network=host
                IMAGE: "nginx:alpine"
                ARGS: ""

    dev:2025-08-18:02:
        desc: runs postgres database service from compose-test using nerdctl run
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            TMP_DIR:
                sh: mktemp -d -t runm-postgres-XXXXXX
        cmds:
          - defer: "rm -rf {{.TMP_DIR}}"
            silent: true
          - task: run:nerdctl-test:rm-all-running-containers
          - task: run:nerdctl-test:run
            vars:
                FLAGS: |-
                    --rm \
                    -p 5432:5432 \
                    -v {{.TMP_DIR}}:/var/lib/postgresql \
                    --user=0:0 \
                    -e POSTGRES_DB=testdb \
                    -e POSTGRES_USER=testuser \
                    -e POSTGRES_PASSWORD=testpass \
                    --network=host
                IMAGE: "postgres:alpine"
                ARGS: ""

    dev:compose-test:
        desc: Test Docker Compose functionality with nerdctl
        deps: ["linux:runtime:runm", "build:runm-test-binaries"]
        vars:
            COMPOSE_DIR:
                sh: realpath ./test/scenarios/compose-test
            TMP_DIR:
                sh: mktemp -d -t runm-compose-test-XXXXXX
            NERDCTL_FULL_PATH:
                sh: realpath {{.TEST_BIN_DIR}}/nerdctl
        cmds:
          - defer: "rm -rf {{.TMP_DIR}}"
            silent: true
          - task: run:nerdctl-test:rm-all-running-containers
          - cmd: echo "Testing Docker Compose with runm..."
          - cmd: 'echo "Compose directory: {{.COMPOSE_DIR}}"'
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose version
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose config
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose up -d
          - cmd: sleep 10 # Give services time to start
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose ps
          - cmd: echo "=== Container Status Check ==="
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose exec web ps aux || echo "Cannot exec into web container"
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose exec api ps aux || echo "Cannot exec into api container"
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose exec db ps aux || echo "Cannot exec into db container"
          - cmd: echo "=== Container Logs ==="
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose logs
          - cmd: echo "=== Testing inter-service communication ==="
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose exec web curl -v --max-time 5 http://localhost:80 ||
                echo "Web server test failed"
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose exec api curl -v --max-time 5 http://localhost:3000
                || echo "API server test failed"
            #   - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose exec db redis-cli --pass testpass ping || echo "Redis test failed"
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose exec web curl -v --max-time 5 http://api:3000 || echo
                "Web->API communication test failed"
          - cmd: echo "Cleaning up compose services..."
          - cmd: cd {{.COMPOSE_DIR}} && {{.NERDCTL_FULL_PATH}} compose down -v

    #endregion dev

    end-of-file:
        internal: true
        desc: end of file
        cmds:
          - cmd: echo "end of file"