fix: add containers response in network inspect

Signed-off-by: Arjun Raja Yogidas <arjunry@amazon.com>

Author: coderbirju

go.mod

@@ -206,3 +206,5 @@ replace cyphar.com/go-pathrs => github.com/cyphar/libpathrs/go-pathrs v0.2.1
 
 // Pin docker cli version to v28.5.2+incompatible until we migrate to moby/moby/v2
 replace github.com/docker/cli => github.com/docker/cli v28.5.2+incompatible
+
+replace github.com/containerd/nerdctl/v2 => github.com/coderbirju/nerdctl/v2 v2.3.1

go.sum

@@ -33,6 +33,8 @@ github.com/cilium/ebpf v0.20.0 h1:atwWj9d3NffHyPZzVlx3hmw1on5CLe9eljR8VuHTwhM=
 github.com/cilium/ebpf v0.20.0/go.mod h1:pzLjFymM+uZPLk/IXZUL63xdx5VXEo+enTzxkZXdycw=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
+github.com/coderbirju/nerdctl/v2 v2.3.1 h1:26poRroA+iGMjHbviqcWSk36LrPN0GYklVkEXCG7GJY=
+github.com/coderbirju/nerdctl/v2 v2.3.1/go.mod h1:Ogh1WVvN6G5GhFgGZxDeGtV0XKi1RiN44aNbJDHia4M=
 github.com/compose-spec/compose-go/v2 v2.10.0 h1:K2C5LQ3KXvkYpy5N/SG6kIYB90iiAirA9btoTh/gB0Y=
 github.com/compose-spec/compose-go/v2 v2.10.0/go.mod h1:Ohac1SzhO/4fXXrzWIztIVB6ckmKBv1Nt5Z5mGVESUg=
 github.com/containerd/accelerated-container-image v1.3.0 h1:sFbTgSuMboeKHa9f7MY11hWF1XxVWjFoiTsXYtOtvdU=
@@ -63,8 +65,6 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
 github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo=
 github.com/containerd/nerdctl/mod/tigron v0.0.0-20250720235051-d775a8c42fbb h1:qzxCinSHfPvhBoiMGCDl00KxQpnvFPzfW4JpYZfJ7mo=
 github.com/containerd/nerdctl/mod/tigron v0.0.0-20250720235051-d775a8c42fbb/go.mod h1:gmUZh2wUVxr/msGogKUi6v9eJbP5ASO4fVYEPzHH4iI=
-github.com/containerd/nerdctl/v2 v2.2.1 h1:eXBu4HddMEXtLmZsJncfvOiJ6a8DemOzWhOxypNIEG0=
-github.com/containerd/nerdctl/v2 v2.2.1/go.mod h1:Ogh1WVvN6G5GhFgGZxDeGtV0XKi1RiN44aNbJDHia4M=
 github.com/containerd/nydus-snapshotter v0.15.10 h1:hphjuKOqSHLGznNJiAvmsOWkdu4qFXjf4DzGrWSuIsM=
 github.com/containerd/nydus-snapshotter v0.15.10/go.mod h1:EWRd/QJ0b6UKHAqYgiV5gHlqLC2qq5cQiSlXEdVovrA=
 github.com/containerd/platforms v1.0.0-rc.2 h1:0SPgaNZPVWGEi4grZdV8VRYQn78y+nm6acgLGv/QzE4=

internal/backend/containerd.go

@@ -33,6 +33,7 @@ type ContainerdClient interface {
 	GetClient() *containerd.Client
 	GetContainerStatus(ctx context.Context, c containerd.Container) containerd.ProcessStatus
 	SearchContainer(ctx context.Context, searchText string) (containers []containerd.Container, err error)
+	GetContainers(ctx context.Context, filters ...string) (containers []containerd.Container, err error)
 	GetImage(ctx context.Context, ref string) (containerd.Image, error)
 	SearchImage(ctx context.Context, searchText string) ([]images.Image, error)
 	ParsePlatform(platform string) (ocispec.Platform, error)
@@ -110,6 +111,12 @@ func (w *ContainerdClientWrapper) SearchContainer(ctx context.Context, searchTex
 	return containers, err
 }
 
+// GetContainers returns the list of containers that match the given filters.
+func (w *ContainerdClientWrapper) GetContainers(ctx context.Context, filters ...string) (containers []containerd.Container, err error) {
+	containers, err = w.client.Containers(ctx, filters...)
+	return containers, err
+}
+
 // GetImage returns an image with given reference.
 func (w *ContainerdClientWrapper) GetImage(ctx context.Context, ref string) (containerd.Image, error) {
 	return w.client.GetImage(ctx, ref)

internal/backend/network.go

@@ -6,10 +6,14 @@ package backend
 import (
 	"context"
 	"encoding/json"
+	"fmt"
 
+	containerd "github.com/containerd/containerd/v2/client"
 	"github.com/containerd/nerdctl/v2/pkg/api/types"
+	"github.com/containerd/nerdctl/v2/pkg/containerinspector"
 	"github.com/containerd/nerdctl/v2/pkg/inspecttypes/dockercompat"
 	"github.com/containerd/nerdctl/v2/pkg/inspecttypes/native"
+	"github.com/containerd/nerdctl/v2/pkg/labels"
 	"github.com/containerd/nerdctl/v2/pkg/netutil"
 	"github.com/containernetworking/cni/libcni"
 	cnitypes "github.com/containernetworking/cni/pkg/types"
@@ -54,11 +58,18 @@ func (w *NerdctlWrapper) RemoveNetwork(networkConfig *netutil.NetworkConfig) err
 }
 
 func (w *NerdctlWrapper) InspectNetwork(ctx context.Context, networkConfig *netutil.NetworkConfig) (*dockercompat.Network, error) {
+	// Get containers associated with this network
+	containers, err := getContainersFromNetConfig(ctx, networkConfig, w.clientWrapper)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get containers for network: %w", err)
+	}
+
 	network := &native.Network{
 		CNI:           json.RawMessage(networkConfig.Bytes),
 		NerdctlID:     networkConfig.NerdctlID,
 		NerdctlLabels: networkConfig.NerdctlLabels,
 		File:          networkConfig.File,
+		Containers:    containers,
 	}
 	return dockercompat.NetworkFromNative(network)
 }
@@ -74,3 +85,27 @@ func (w *NerdctlWrapper) NetconfPath() string {
 func (w *NerdctlWrapper) Namespace() string {
 	return w.netClient.Namespace
 }
+
+// getContainersFromNetConfig returns containers associated with the given network
+func getContainersFromNetConfig(ctx context.Context, networkConfig *netutil.NetworkConfig, client ContainerdClient) ([]*native.Container, error) {
+	filters := []string{fmt.Sprintf(`labels.%q~="\\\"%s\\\""`, labels.Networks, networkConfig.Name)}
+	filteredContainers, err := client.GetContainers(ctx, filters...)
+	if err != nil {
+		return nil, err
+	}
+
+	var containers []*native.Container
+	for _, container := range filteredContainers {
+		nativeContainer, err := containerinspector.Inspect(ctx, container)
+		if err != nil {
+			continue
+		}
+		if nativeContainer.Process == nil || nativeContainer.Process.Status.Status != containerd.Running {
+			continue
+		}
+
+		containers = append(containers, nativeContainer)
+	}
+
+	return containers, nil
+}