yaml: support overriding the location of nerdctl-full-X.Y.Z-linux-ARCH.tar.gz

e.g.,
```yaml
containerd:
  system: false
  user: true
  archives:
    - location: "~/Downloads/nerdctl-full-X.Y.Z-linux-amd64.tar.gz"
      arch: "x86_64"
      digest: "sha256:..."
```

Signed-off-by: Akihiro Suda <[email protected]>

Author: AkihiroSuda

pkg/cidata/cidata.go

@@ -17,24 +17,12 @@ import (
 	"github.com/lima-vm/lima/pkg/limayaml"
 	"github.com/lima-vm/lima/pkg/localpathutil"
 	"github.com/lima-vm/lima/pkg/osutil"
-	"github.com/lima-vm/lima/pkg/qemu/const"
+	qemu "github.com/lima-vm/lima/pkg/qemu/const"
 	"github.com/lima-vm/lima/pkg/sshutil"
 	"github.com/lima-vm/lima/pkg/store/filenames"
-	"github.com/opencontainers/go-digest"
 	"github.com/sirupsen/logrus"
 )
 
-const (
-	NerdctlVersion = "0.12.0"
-)
-
-var (
-	NerdctlFullDigests = map[limayaml.Arch]digest.Digest{
-		limayaml.X8664:   "sha256:7789800cfdd19fa9eccadb5e4a911e4ba759799ad9ec0b7929c983b9d149bc98",
-		limayaml.AARCH64: "sha256:ebb05e22ac6a3c25ac88ca4f747feed89bfae8e447a626d0fedf3b4f40ac3303",
-	}
-)
-
 func setupEnv(y *limayaml.LimaYAML) (map[string]string, error) {
 	// Start with the proxy variables from the system settings.
 	env, err := osutil.ProxySettings()
@@ -177,33 +165,32 @@ func GenerateISO9660(instDir, name string, y *limayaml.LimaYAML) error {
 	}
 
 	if args.Containerd.System || args.Containerd.User {
-		var nftgzBase string
-		switch y.Arch {
-		case limayaml.X8664:
-			nftgzBase = fmt.Sprintf("nerdctl-full-%s-linux-amd64.tar.gz", NerdctlVersion)
-		case limayaml.AARCH64:
-			nftgzBase = fmt.Sprintf("nerdctl-full-%s-linux-arm64.tar.gz", NerdctlVersion)
-		default:
-			return fmt.Errorf("unexpected arch %q", y.Arch)
+		var nftgz *limayaml.File
+		for i := range y.Containerd.Archives {
+			f := &y.Containerd.Archives[i]
+			if f.Arch != y.Arch {
+				continue
+			}
+			nftgz = f
+		}
+		if nftgz == nil {
+			return fmt.Errorf("no containerd archive was provided for arch %q", y.Arch)
 		}
 		td, err := ioutil.TempDir("", "lima-download-nerdctl")
 		if err != nil {
 			return err
 		}
 		defer os.RemoveAll(td)
-		nftgzLocal := filepath.Join(td, nftgzBase)
-		nftgzURL := fmt.Sprintf("https://github.com/containerd/nerdctl/releases/download/v%s/%s",
-			NerdctlVersion, nftgzBase)
-		nftgzDigest := NerdctlFullDigests[y.Arch]
-		logrus.Infof("Downloading %q (%s)", nftgzURL, nftgzDigest)
-		res, err := downloader.Download(nftgzLocal, nftgzURL, downloader.WithCache(), downloader.WithExpectedDigest(nftgzDigest))
+		nftgzLocal := filepath.Join(td, "nerdctl-full.tgz")
+		logrus.Infof("Downloading %q (%s)", nftgz.Location, nftgz.Digest)
+		res, err := downloader.Download(nftgzLocal, nftgz.Location, downloader.WithCache(), downloader.WithExpectedDigest(nftgz.Digest))
 		if err != nil {
-			return fmt.Errorf("failed to download %q: %w", nftgzURL, err)
+			return fmt.Errorf("failed to download %q: %w", nftgz.Location, err)
 		}
 		logrus.Debugf("res.ValidatedDigest=%v", res.ValidatedDigest)
 		switch res.Status {
 		case downloader.StatusDownloaded:
-			logrus.Infof("Downloaded %q", nftgzBase)
+			logrus.Infof("Downloaded %q", nftgz.Location)
 		case downloader.StatusUsedCache:
 			logrus.Infof("Using cache %q", res.CachePath)
 		default:

pkg/limayaml/default.yaml

@@ -70,6 +70,12 @@ containerd:
   # Enable user-scoped (aka rootless) containerd and its dependencies
   # Default: true
   user: true
+#  # Override containerd archive
+#  # Default: hard-coded URL with hard-coded digest
+#  archives:
+#    - location: "~/Downloads/nerdctl-full-X.Y.Z-linux-amd64.tar.gz"
+#      arch: "x86_64"
+#      digest: "sha256:..."
 
 # Provisioning scripts need to be idempotent because they might be called
 # multiple times, e.g. when the host VM is being restarted.

pkg/limayaml/defaults.go

@@ -11,6 +11,25 @@ import (
 	"github.com/lima-vm/lima/pkg/osutil"
 )
 
+func defaultContainerdArchives() []File {
+	const nerdctlVersion = "0.12.0"
+	location := func(goarch string) string {
+		return "https://github.com/containerd/nerdctl/releases/download/v" + nerdctlVersion + "/nerdctl-full-" + nerdctlVersion + "-linux-" + goarch + ".tar.gz"
+	}
+	return []File{
+		{
+			Location: location("amd64"),
+			Arch:     X8664,
+			Digest:   "sha256:7789800cfdd19fa9eccadb5e4a911e4ba759799ad9ec0b7929c983b9d149bc98",
+		},
+		{
+			Location: location("arm64"),
+			Arch:     AARCH64,
+			Digest:   "sha256:ebb05e22ac6a3c25ac88ca4f747feed89bfae8e447a626d0fedf3b4f40ac3303",
+		},
+	}
+}
+
 func MACAddress(uniqueID string) string {
 	sha := sha256.Sum256([]byte(osutil.MachineID() + uniqueID))
 	// "5" is the magic number in the Lima ecosystem.
@@ -59,6 +78,15 @@ func FillDefault(y *LimaYAML, filePath string) {
 	if y.Containerd.User == nil {
 		y.Containerd.User = &[]bool{true}[0]
 	}
+	if len(y.Containerd.Archives) == 0 {
+		y.Containerd.Archives = defaultContainerdArchives()
+	}
+	for i := range y.Containerd.Archives {
+		f := &y.Containerd.Archives[i]
+		if f.Arch == "" {
+			f.Arch = y.Arch
+		}
+	}
 	for i := range y.Probes {
 		probe := &y.Probes[i]
 		if probe.Mode == "" {
@@ -79,10 +107,10 @@ func FillDefault(y *LimaYAML, filePath string) {
 	if len(y.Network.VDEDeprecated) > 0 && len(y.Networks) == 0 {
 		for _, vde := range y.Network.VDEDeprecated {
 			network := Network{
-				Interface: vde.Name,
+				Interface:  vde.Name,
 				MACAddress: vde.MACAddress,
 				SwitchPort: vde.SwitchPort,
-				VNL: vde.VNL,
+				VNL:        vde.VNL,
 			}
 			y.Networks = append(y.Networks, network)
 		}

pkg/limayaml/limayaml.go

@@ -77,8 +77,9 @@ type Provision struct {
 }
 
 type Containerd struct {
-	System *bool `yaml:"system,omitempty"` // default: false
-	User   *bool `yaml:"user,omitempty"`   // default: true
+	System   *bool  `yaml:"system,omitempty"`   // default: false
+	User     *bool  `yaml:"user,omitempty"`     // default: true
+	Archives []File `yaml:"archives,omitempty"` // default: see defaultContainerdArchives
 }
 
 type ProbeMode = string

pkg/limayaml/validate.go

@@ -14,7 +14,7 @@ import (
 	"github.com/lima-vm/lima/pkg/localpathutil"
 	"github.com/lima-vm/lima/pkg/networks"
 	"github.com/lima-vm/lima/pkg/osutil"
-	"github.com/lima-vm/lima/pkg/qemu/const"
+	qemu "github.com/lima-vm/lima/pkg/qemu/const"
 	"github.com/sirupsen/logrus"
 )
 
@@ -109,6 +109,10 @@ func Validate(y LimaYAML, warn bool) error {
 				i, ProvisionModeSystem, ProvisionModeUser)
 		}
 	}
+	needsContainerdArchives := (y.Containerd.User != nil && *y.Containerd.User) || (y.Containerd.System != nil && *y.Containerd.System)
+	if needsContainerdArchives && len(y.Containerd.Archives) == 0 {
+		return fmt.Errorf("field `containerd.archives` must be provided")
+	}
 	for i, p := range y.Probes {
 		switch p.Mode {
 		case ProbeModeReadiness: