[1.5] libct/devices: deprecate in favour of moby/sys/devices

CHANGELOG.md

@@ -15,6 +15,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Deprecated ###
 - `EXTRA_BUILDTAGS` make variable is deprecated in favor of `RUNC_BUILDTAGS`
   and will be removed in runc 1.6. (#5171, #5198)
+- `libcontainer/devices` has been deprecated in favour of
+  `github.com/moby/sys/devices` (which is a carbon copy of the package). It
+  will be removed in runc 1.6.
 
 ## [1.5.0-rc.1] - 2026-03-12
 

go.mod

@@ -10,6 +10,7 @@ require (
 	github.com/docker/go-units v0.5.0
 	github.com/godbus/dbus/v5 v5.2.2
 	github.com/moby/sys/capability v0.4.0
+	github.com/moby/sys/devices v0.1.0
 	github.com/moby/sys/mountinfo v0.7.2
 	github.com/moby/sys/user v0.4.0
 	github.com/moby/sys/userns v0.1.0

go.sum

@@ -38,6 +38,8 @@ github.com/mdlayher/socket v0.4.1 h1:eM9y2/jlbs1M615oshPQOHZzj6R6wMT7bX5NPiQvn2U
 github.com/mdlayher/socket v0.4.1/go.mod h1:cAqeGjoufqdxWkD7DkpyS+wcefOtmu5OQ8KuoJGIReA=
 github.com/moby/sys/capability v0.4.0 h1:4D4mI6KlNtWMCM1Z/K0i7RV1FkX+DBDHKVJpCndZoHk=
 github.com/moby/sys/capability v0.4.0/go.mod h1:4g9IK291rVkms3LKCDOoYlnV8xKwoDTpIrNEE35Wq0I=
+github.com/moby/sys/devices v0.1.0 h1:uaMrDm1U3h0AwUDNWeT5lBV40v0eayt+VuukRbYn5K4=
+github.com/moby/sys/devices v0.1.0/go.mod h1:nIV6AO7t0DY2ObAm1GfL4AX9mBRqzxzHwGfvNCR9lfI=
 github.com/moby/sys/mountinfo v0.7.2 h1:1shs6aH5s4o5H2zQLn796ADW1wMrIwHsyJ2v9KouLrg=
 github.com/moby/sys/mountinfo v0.7.2/go.mod h1:1YOa8w8Ih7uW0wALDUgT1dTTSBrZ+HiBLGws92L2RU4=
 github.com/moby/sys/user v0.4.0 h1:jhcMKit7SA80hivmFJcbB1vqmw//wU61Zdui2eQXuMs=

libcontainer/devices/device_deprecated_unix.go

@@ -0,0 +1,47 @@
+//go:build !windows
+
+// Package devices provides some helper functions for constructing device
+// configurations for runc. These are exclusively used by higher-level runtimes
+// that need to configure runc's device list based on existing devices.
+//
+// Deprecated: Use github.com/moby/sys/devices instead. This package will be
+// removed in runc 1.6.
+package devices
+
+import (
+	"github.com/moby/sys/devices"
+	"github.com/opencontainers/cgroups/devices/config"
+)
+
+// ErrNotADevice denotes that a file is not a valid linux device.
+//
+// Deprecated: Use [devices.ErrNotADevice] instead. This package will be
+// removed in runc 1.6.
+var ErrNotADevice = devices.ErrNotADevice
+
+// DeviceFromPath takes the path to a device and its cgroup_permissions (which
+// cannot be easily queried) to look up the information about a linux device
+// and returns that information as a Device struct.
+//
+// Deprecated: Use [devices.DeviceFromPath] instead. This package will be
+// removed in runc 1.6.
+func DeviceFromPath(path, permissions string) (*config.Device, error) {
+	return devices.DeviceFromPath(path, permissions)
+}
+
+// HostDevices returns all devices that can be found under /dev directory.
+//
+// Deprecated: Use [devices.HostDevices] instead. This package will be
+// removed in runc 1.6.
+func HostDevices() ([]*config.Device, error) {
+	return devices.HostDevices()
+}
+
+// GetDevices recursively traverses a directory specified by path
+// and returns all devices found there.
+//
+// Deprecated: Use [devices.GetDevices] instead. This package will be
+// removed in runc 1.6.
+func GetDevices(path string) ([]*config.Device, error) {
+	return devices.GetDevices(path)
+}