[earakely-scale]

What

A bundle can carry an image as a docker save archive in its folder, which a run loads instead of building or pulling: image = { archive = "image.tar.gz", dockerfile = "Dockerfile", platform = "linux/amd64" } (the last two optional), or archive = in an image folder's artifact.toml. It's the first step toward a bundle that runs away from the store it came from.

• Storage: put_archive stores the archive as a tar.gz naming no image (RepoTags null, no index.json name annotations) under local/<slug>-<hash>:<archive sha256>. Writing it needs no Docker. When the image names a dockerfile, the folder is kept beside the archive as its build context.
• Folder listings: no listing of a folder holds an archive the folder names, neither a build context (a sibling image's included) nor a folder-written entity's files.
• Local Docker now loads tar.gz images. Each is untagged on its way to docker load, so no name it embeds replaces an image the machine holds, then tagged by the ID Docker reports.
• VMs tag a loaded image with its stored name when that name isn't there after the load.
• A sandbox that only pulls (modal containers) refuses it in the dry run, as it refuses any tar.gz under a bare tag.

Testing

• Unit: tests cover resolve, materialize and ledger reuse, untagging (legacy and OCI layouts), host loads, the VM load script and the dry run. tst/unit/bundle, artifact, providers and utils pass (3346).
• Real Docker 29 (the containerd image store, as on Modal VMs): the local provider and the VM load shell each load the archive's image under its stored name, and an image the machine already held under the archive's embedded tag keeps that tag.
• Not yet run on a Modal VM.

🤖 Generated with Claude Code

Confidence Score: 5/5

The PR appears safe to merge; the previous file-exclusion bug is fixed.

Summary

Adds images carried inside bundles as Docker archives, with storage, reuse checks, and loading on local Docker and VMs.

• Bundles can carry Docker images as saved archives.
• Local Docker and VM sandboxes load bundle image archives.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[Bundle archive] --> B[Remove embedded image names]
  B --> C[Store compressed archive]
  C --> D[Local Docker or VM loads image]
  D --> E[Assign stored image name]
  A --> F[Exclude archive from build context]

Loading

_{Reviews (3) · Last reviewed commit: "fix(bundle): an entry's archives are onl..." · Reviewed by Greptile}

[earakely-scale]

Closing: the bundle export now names each image by its delivery ECR digest, as Harbor does, so bundles don't carry archives. The branch is kept.