cleanup

Author: yash-mandaviya

Sources/ContainerCommands/Container/ContainerCopy.swift

@@ -63,13 +63,6 @@ extension Application {
             let dstRef = try Self.parsePathRef(destination)
 
             switch (srcRef, dstRef) {
-            // `-` is an uncompressed tar stream on stdin/stdout, matching
-            // `docker cp` and `podman cp`. The descriptor is handed to the
-            // runtime and forwarded to the guest unmodified: nothing is staged
-            // on the host, so host permission rules and path length limits do
-            // not apply, and the ownership and mode recorded in the tar headers
-            // are what land in the container. Neither case prints, so stdout
-            // carries only archive bytes.
             case (.container(let id, let path), .local("-")):
                 try await client.copyOut(id: id, source: path, archive: FileHandle.standardOutput)
             case (.local("-"), .container(let id, let path)):

Sources/Services/ContainerAPIService/Server/Containers/ContainersHarness.swift

@@ -311,9 +311,6 @@ public struct ContainersHarness: Sendable {
         }
         let createParents = message.bool(key: .createParents)
 
-        // fileHandle(key:) hands back a duplicate this process owns, so close it
-        // however the copy ends. The container lookups underneath can throw
-        // before the descriptor is ever forwarded.
         if let archive = message.fileHandle(key: .archiveFd) {
             defer { try? archive.close() }
             try await service.copyIn(id: id, archive: archive, destination: destinationPath, createParents: createParents)

Sources/Services/RuntimeLinux/Server/RuntimeService.swift

@@ -706,9 +706,6 @@ public actor RuntimeService {
             }
             let createParents = message.bool(key: RuntimeKeys.createParents.rawValue)
 
-            // A tar stream fd replaces the host source path: the bytes go
-            // straight to the guest, which extracts them honoring the ownership
-            // and mode in the tar headers.
             if let archive = message.fileHandle(key: RuntimeKeys.archiveFd.rawValue) {
                 defer { try? archive.close() }
                 let ctr = try getContainer()
@@ -766,8 +763,6 @@ public actor RuntimeService {
                     message: "no source path supplied for copyOut"
                 )
             }
-            // A tar stream fd replaces the host destination path: the guest
-            // archives the source and the bytes are written straight out.
             if let archive = message.fileHandle(key: RuntimeKeys.archiveFd.rawValue) {
                 defer { try? archive.close() }
                 let ctr = try getContainer()

Tests/IntegrationTests/Containers/TestCLICopyCommand.swift

@@ -197,7 +197,6 @@ struct TestCLICopyCommand {
                 let result = try f.run(["copy", "\(name):/tmp/tarout.txt", "-"])
                 try result.check("stdout tar stream copy failed")
 
-                // Plain tar, not gzip: docker emits an uncompressed stream.
                 #expect(result.outputData.prefix(2) != Data([0x1f, 0x8b]), "stdout stream is gzip compressed")
 
                 let entries = try readTarStream(result.outputData)