cmd/create, cmd/run: Warning message when using non-Toolbx image

Prompt users if they want to continue creating or running a Toolbox
container with an image that is not Toolbox-verified. Verified images
are guaranteed to work with Toolbx because they were previously
tested. Such an image contains at least one of these labels (see
https://containertoolbx.org/doc/):

  - com.github.containers.toolbox="true"
  - com.github.debarshiray.toolbox="true"

#1622

Author: DaliborKr

src/cmd/create.go

@@ -241,6 +241,17 @@ func createContainer(container, image, release, authFile string, showCommandToEn
 		}
 	}
 
+	if !rootFlags.assumeYes {
+		if isToolboxImage, err := podman.IsToolboxImage(imageFull); err != nil {
+			return fmt.Errorf("failed to verify image compatibility: %w", err)
+		} else if !isToolboxImage {
+			prompt := fmt.Sprintf("Image '%s' is not a Toolbx image and may not work properly (see https://containertoolbx.org/doc/). Continue anyway? [y/N]:", imageFull)
+			if !askForConfirmation(prompt) {
+				return nil
+			}
+		}
+	}
+
 	var toolbxDelayEntryPointEnv []string
 
 	if toolbxDelayEntryPoint, ok := os.LookupEnv("TOOLBX_DELAY_ENTRY_POINT"); ok {

src/cmd/run.go

@@ -183,6 +183,8 @@ func runCommand(container string,
 		}
 	}
 
+	checkImageCompatibility := true
+
 	logrus.Debugf("Checking if container %s exists", container)
 
 	if _, err := podman.ContainerExists(container); err != nil {
@@ -225,6 +227,10 @@ func runCommand(container string,
 			if err := createContainer(container, image, release, "", false); err != nil {
 				return err
 			}
+
+			// set to false -> check was already made when creating container during toolbx enter
+			checkImageCompatibility = false
+
 		} else if containersCount == 1 && defaultContainer {
 			fmt.Fprintf(os.Stderr, "Error: container %s not found\n", container)
 
@@ -249,6 +255,19 @@ func runCommand(container string,
 		return fmt.Errorf("failed to inspect container %s", container)
 	}
 
+	if checkImageCompatibility && !rootFlags.assumeYes {
+		imageFull := containerObj.Image()
+
+		if isToolboxImage, err := podman.IsToolboxImage(imageFull); err != nil {
+			logrus.Debugf("Failed to verify image '%s' compatibility for container '%s': %s", imageFull, container, err)
+		} else if !isToolboxImage {
+			prompt := fmt.Sprintf("Container '%s' uses a non-Toolbx image '%s' and may not work properly (see https://containertoolbx.org/doc/). Continue anyway? [y/N]:", container, imageFull)
+			if !askForConfirmation(prompt) {
+				return nil
+			}
+		}
+	}
+
 	entryPoint := containerObj.EntryPoint()
 	entryPointPID := containerObj.EntryPointPID()
 	logrus.Debugf("Entry point of container %s is %s (PID=%d)", container, entryPoint, entryPointPID)