fix(deps): Use cap_std_ext re-exports instead of ocidir

The cap-std-ext upgrade from 4.0.3 to 5.0.0 introduced a version
mismatch: ocidir v0.6.0 depends on cap-std-ext v4.0.7 (cap-std v3.4.5),
while the workspace now uses cap-std-ext v5.0.0 (cap-std v4.0.2).

Using ocidir::cap_std re-exports caused type mismatches when combined
with traits from the workspace's cap-std-ext. Fix by using
cap_std_ext::cap_std re-exports consistently.

Assisted-by: Claude Code (Opus 4.5)
Signed-off-by: Xiaofeng Wang <henrywangxf@me.com>

Author: henrywang

Cargo.lock

@@ -1,11 +1,11 @@
 use anyhow::{Context, Result};
 use camino::Utf8PathBuf;
+use cap_std_ext::cap_std::ambient_authority;
 use cap_std_ext::{cap_std::fs::Dir, dirext::CapStdExtDirExt};
 use composefs::fsverity::{FsVerityHashValue, Sha512HashValue};
 use composefs_boot::BootOps;
 use composefs_oci::image::create_filesystem;
 use fn_error_context::context;
-use ocidir::cap_std::ambient_authority;
 use ostree_ext::container::ManifestDiff;
 
 use crate::{

crates/lib/src/bootc_composefs/update.rs

@@ -148,8 +148,8 @@ pub async fn deploy(
         #[cfg(feature = "bootc")]
         if !options.skip_completion {
             use bootc_utils::CommandRunExt;
+            use cap_std_ext::cap_std::fs::Dir;
             use cap_std_ext::cmdext::CapStdExtCommandExt;
-            use ocidir::cap_std::fs::Dir;
 
             let sysroot_dir = &Dir::reopen_dir(&crate::sysroot::sysroot_fd(sysroot))?;
 

crates/ostree-ext/src/container/deploy.rs

@@ -8,19 +8,21 @@ use crate::objectsource::ContentID;
 use crate::tar as ostree_tar;
 use anyhow::{Context, Result, anyhow};
 use camino::{Utf8Path, Utf8PathBuf};
-use cap_std::fs::Dir;
 use cap_std_ext::cap_std;
+use cap_std_ext::cap_std::fs::Dir;
 use chrono::DateTime;
 use containers_image_proxy::oci_spec;
 use flate2::Compression;
 use fn_error_context::context;
 use gio::glib;
 use oci_spec::image as oci_image;
+use ocidir::cap_std::fs::Dir as OciCapDir;
 use ocidir::{Layer, OciDir};
 use ostree::gio;
 use std::borrow::Cow;
 use std::collections::{BTreeMap, HashMap};
 use std::num::NonZeroU32;
+use std::os::fd::AsFd;
 use tracing::instrument;
 
 /// The label which may be used in addition to the standard OCI label.
@@ -355,7 +357,7 @@ async fn build_impl(
         if !Utf8Path::new(path).exists() {
             std::fs::create_dir(path).with_context(|| format!("Creating {path}"))?;
         }
-        let ocidir = Dir::open_ambient_dir(path, cap_std::ambient_authority())
+        let ocidir = OciCapDir::open_ambient_dir(path, ocidir::cap_std::ambient_authority())
             .with_context(|| format!("Opening {path}"))?;
         let mut ocidir = OciDir::ensure(ocidir).context("Opening OCI")?;
         build_oci(repo, ostree_ref, &mut ocidir, tag, config, opts)?;
@@ -365,7 +367,7 @@ async fn build_impl(
             let vartmp = Dir::open_ambient_dir("/var/tmp", cap_std::ambient_authority())?;
             cap_std_ext::cap_tempfile::tempdir_in(&vartmp)?
         };
-        let mut ocidir = OciDir::ensure(tempdir.try_clone()?)?;
+        let mut ocidir = OciDir::ensure(OciCapDir::reopen_dir(&tempdir.as_fd())?)?;
 
         // Minor TODO: refactor to avoid clone
         let authfile = opts.authfile.clone();

crates/ostree-ext/src/container/encapsulate.rs

@@ -137,6 +137,8 @@ use camino::{Utf8Path, Utf8PathBuf};
 use canon_json::CanonJsonSerialize;
 use cap_std_ext::cap_std;
 use cap_std_ext::cap_std::fs::{Dir, MetadataExt};
+use ocidir::cap_std::fs::Dir as OciCapDir;
+use std::os::fd::AsFd;
 
 use cap_std_ext::dirext::CapStdExtDirExt;
 use containers_image_proxy::{ImageProxy, OpenedImage};
@@ -1652,7 +1654,7 @@ pub(crate) fn export_to_oci(
 
     let mut labels = HashMap::new();
 
-    let mut dest_oci = ocidir::OciDir::ensure(dest_oci.try_clone()?)?;
+    let mut dest_oci = ocidir::OciDir::ensure(OciCapDir::reopen_dir(&dest_oci.as_fd())?)?;
 
     let commit_chunk_ref = commit_layer
         .as_ref()

crates/ostree-ext/src/container/store.rs

@@ -3,9 +3,8 @@ use crate::container::{DIFFID_LABEL, skopeo};
 use crate::container::{Transport, store as container_store};
 use anyhow::{Context, Result, anyhow};
 use camino::Utf8Path;
-use cap_std::fs::Dir;
-use cap_std_ext::cap_std;
 use containers_image_proxy::oci_spec::image as oci_image;
+use ocidir::cap_std::fs::Dir;
 use std::io::{BufReader, BufWriter};
 
 /// Given an OSTree container image reference, update the detached metadata (e.g. GPG signature)
@@ -39,7 +38,7 @@ pub async fn update_detached_metadata(
     // Fork a thread to do the heavy lifting of filtering the tar stream, rewriting the manifest/config.
     crate::tokio_util::spawn_blocking_cancellable_flatten(move |cancellable| {
         // Open the temporary OCI directory.
-        let tempsrc = Dir::open_ambient_dir(tempsrc_ref_path, cap_std::ambient_authority())
+        let tempsrc = Dir::open_ambient_dir(tempsrc_ref_path, ocidir::cap_std::ambient_authority())
             .context("Opening src")?;
         let tempsrc = ocidir::OciDir::open(tempsrc)?;
 

crates/ostree-ext/src/container/update_detachedmeta.rs

@@ -5,7 +5,7 @@ use std::io::Read;
 use std::path::Path;
 
 use anyhow::Result;
-use ocidir::cap_std::fs::Dir;
+use cap_std_ext::cap_std::fs::Dir;
 use ostree::glib;
 
 use crate::keyfileext::KeyFileExt;

crates/ostree-ext/src/container_utils.rs

@@ -15,14 +15,15 @@ use bootc_utils::CommandRunExt;
 use camino::{Utf8Component, Utf8Path, Utf8PathBuf};
 use cap_std::fs::Dir;
 use cap_std_ext::cap_std;
+use cap_std_ext::cap_std::fs::{DirBuilder, DirBuilderExt as _};
 use cap_std_ext::prelude::CapStdExtCommandExt;
 use chrono::TimeZone;
 use containers_image_proxy::oci_spec::image as oci_image;
 use fn_error_context::context;
 use gvariant::aligned_bytes::TryAsAligned;
 use gvariant::{Marker, Structure};
 use io_lifetimes::AsFd;
-use ocidir::cap_std::fs::{DirBuilder, DirBuilderExt as _};
+use ocidir::cap_std::fs::Dir as OciCapDir;
 use ocidir::oci_spec::image::ImageConfigurationBuilder;
 use regex::Regex;
 use std::borrow::Cow;
@@ -977,7 +978,7 @@ impl NonOstreeFixture {
         // Create the src/ directory
         dir.create_dir_all(Self::SRCOCI)?;
         let src_oci = dir.open_dir(Self::SRCOCI)?;
-        let src_oci = ocidir::OciDir::ensure(src_oci)?;
+        let src_oci = ocidir::OciDir::ensure(OciCapDir::reopen_dir(&src_oci.as_fd())?)?;
 
         dir.create_dir("dest")?;
         let destrepo = ostree::Repo::create_at_dir(

crates/ostree-ext/src/fixture.rs

@@ -5,13 +5,12 @@ use std::path::Path;
 use crate::container_utils::{is_ostree_container, ostree_booted};
 use anyhow::{Context, Result, anyhow};
 use camino::Utf8Path;
-use cap_std::fs::Dir;
-use cap_std_ext::cap_std;
 use containers_image_proxy::oci_spec;
 use flate2::write::GzEncoder;
 use fn_error_context::context;
 use gio::prelude::*;
 use oci_spec::image as oci_image;
+use ocidir::cap_std::fs::Dir;
 use ocidir::{
     LayerWriter,
     oci_spec::image::{Arch, Platform},
@@ -67,7 +66,7 @@ where
     F: for<'a> FnOnce(&mut LayerWriter<'a, GzEncoder<ocidir::BlobWriter<'a>>>) -> Result<()>,
 {
     let src = src.as_ref();
-    let src = Dir::open_ambient_dir(src, cap_std::ambient_authority())?;
+    let src = Dir::open_ambient_dir(src, ocidir::cap_std::ambient_authority())?;
     let src = ocidir::OciDir::open(src)?;
 
     let idx = src.read_index()?;

crates/ostree-ext/src/integrationtest.rs

@@ -8,9 +8,9 @@ use std::str::FromStr;
 
 use anyhow::{Context, Result};
 use camino::Utf8Path;
+use cap_std_ext::cap_std::fs::Dir;
 use cap_std_ext::dirext::CapStdExtDirExt;
 use fn_error_context::context;
-use ocidir::cap_std::fs::Dir;
 use ostree::glib::object::Cast;
 use ostree::prelude::FileExt;
 use ostree::{gio, glib};