Detect containerd image store for multi-arch builds and add Podman manifest support

[Copilot]

Multi-arch container builds require containerd image store (Docker) or manifest support (Podman). Without detection, builds silently fail or produce incorrect results when users request multiple platforms.

Changes

New API

• Added Task<bool> SupportsMultiArchAsync() to IContainerRuntime

Docker detection

• Executes docker info --format json and parses for containerd image store configuration
• Checks DriverStatus for "Image store": "containerd" or Driver == "containerd"
• Logs warning with enablement instructions when not configured

Podman multi-arch

• Detects support via podman manifest --help
• Creates manifest for multi-platform builds: podman manifest create <name>
• Passes --manifest <name> to build command
• Cleans up manifest after build

Build orchestration

• ResourceContainerImageBuilder checks runtime support before multi-platform builds
• Falls back to linux/amd64 when multi-arch unavailable
• Logs actionable warnings with configuration guidance

Example warning output

warn: Multi-platform build requested but Docker does not support multi-arch builds.
      Defaulting to linux/amd64 platform. Enable containerd image store in Docker Desktop
      settings under 'Features in development' > 'Use containerd for pulling and storing images'.
      See https://docs.docker.com/engine/storage/containerd/

Fixes #12133

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• centralus.data.mcr.microsoft.com
  • Triggering command: dotnet publish /home/REDACTED/work/aspire/aspire/tests/testproject/TestProject.ServiceA/TestProject.ServiceA.csproj --configuration Release /t:PublishContainer /p:ContainerRepository=servicea (dns block)
  • Triggering command: dotnet publish /home/REDACTED/work/aspire/aspire/tests/testproject/TestProject.ServiceA/TestProject.ServiceA.csproj --configuration Release /t:PublishContainer /p:ContainerRepository=servicea /p:ContainerArchiveOutputPath=/tmp/test-output /p:ContainerImageFormat=OCI /p:ContainerRuntimeIdentifier=linux-x64 (dns block)
  • Triggering command: buildkitd --allow-insecure-entitlement=network.host (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Detect if containerd image store is used for multi-arch builds</issue_title>
<issue_description>Multi-arch builds with Docker require that containerd is configured as the image store. We should detect if this is configured and warn the user if it is not.

• We can detect if containerd is enabled by running docker info --format json and checking the driver-type property.
• Users can enable containerd via the desktop app. There is a way to automate this by editing config and we might be able to provide an aspire do prepare-docker command to help get this config in place.
• We should warn the user if the container runtime is not configured for multi-arch builds and commence using LinuxAmd64 as the default.
• There should be a new API on IContainerRuntime that is CheckIfSupportsMultiArch to detect this.
• Update the code for PodmanContainerRuntime to support calling podman manifest create {imagename} and passing the manifest to the podman build command.</issue_description>

Comments on the Issue (you are @copilot in this section)

@davidfowl We also need to handle this for podman. The IContainerRuntime implementation should expose an API that the IResourceContainerImageBuilder can use to default the type platforms we support.

• Fixes Detect if containerd image store is used for multi-arch builds #12595

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[davidfowl]

This will be the 13.1 fix, for 13, we'll do #12596

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.sh | bash -s -- 12597

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.ps1) } 12597"