CI: add nerdctl

Signed-off-by: Akihiro Suda <[email protected]>

.github/workflows/main.yaml

@@ -12,7 +12,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        engine: [docker, podman]
+        engine: [docker, nerdctl, podman]
     env:
       CONTAINER_ENGINE: "${{ matrix.engine }}"
     steps:
@@ -37,6 +37,13 @@ jobs:
           sudo rm -rf /var/run/docker*
           dockerd-rootless-setuptool.sh install
           docker info
+      - name: Set up Rootless nerdctl
+        if: ${{ matrix.engine == 'nerdctl' }}
+        run: |
+          set -eux -o pipefail
+          sudo ./init-host/init-host.root.d/install-nerdctl.sh
+          ./init-host/init-host.rootless.sh
+          nerdctl info
       - name: Set up Rootless Podman
         if: ${{ matrix.engine == 'podman' }}
         run: |
@@ -69,6 +76,8 @@ jobs:
         include:
           - lxc-image: ubuntu:22.04
             engine: docker
+          - lxc-image: ubuntu:22.04
+            engine: nerdctl
           - lxc-image: images:fedora/39/cloud
             engine: podman
     env:

init-host/init-host.root.d/install-nerdctl.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+set -eux -o pipefail
+if [ "$(id -u)" != "0" ]; then
+	echo "Must run as the root"
+	exit 1
+fi
+
+VERSION="2.0.0-beta.4"
+SHASHA="dfc9b122fea81a661f33a4013662b5def8a98fce84c257b8ad60e4279d11183e"
+
+arch=""
+case "$(uname -m)" in
+"x86_64")
+	arch="amd64"
+	;;
+"aarch64")
+	arch="arm64"
+	;;
+*)
+	echo >&2 "Unsupported architecture"
+	exit 1
+	;;
+esac
+
+mkdir -p /root/nerdctl.tmp
+(
+	cd /root/nerdctl.tmp
+	curl -fSLO https://github.com/containerd/nerdctl/releases/download/v${VERSION}/nerdctl-full-${VERSION}-linux-${arch}.tar.gz
+	curl -fSLO https://github.com/containerd/nerdctl/releases/download/v${VERSION}/SHA256SUMS
+	[ "$(sha256sum SHA256SUMS | awk '{print $1}')" = "${SHASHA}" ]
+	sha256sum --check --ignore-missing SHA256SUMS
+	tar Cxzvvf /usr/local nerdctl-full-${VERSION}-linux-${arch}.tar.gz
+)
+rm -rf /root/nerdctl.tmp

init-host/init-host.root.sh

@@ -57,9 +57,9 @@ case "${CONTAINER_ENGINE}" in
 	fi
 	systemctl disable --now docker
 	;;
-"podman")
-	if ! command -v podman >/dev/null 2>&1; then
-		"${script_dir}"/init-host.root.d/install-podman.sh
+"podman" | "nerdctl")
+	if ! command -v "${CONTAINER_ENGINE}" >/dev/null 2>&1; then
+		"${script_dir}"/init-host.root.d/install-"${CONTAINER_ENGINE}".sh
 	fi
 	;;
 *)

init-host/init-host.rootless.sh

@@ -11,6 +11,11 @@ case "${CONTAINER_ENGINE}" in
 "docker")
 	dockerd-rootless-setuptool.sh install
 	;;
+"nerdctl")
+	containerd-rootless-setuptool.sh install
+	containerd-rootless-setuptool.sh install-buildkit-containerd
+	containerd-rootless-setuptool.sh install-bypass4netnsd
+	;;
 "podman")
 	systemctl --user enable --now podman-restart
 	;;