Artifact add optimization on macOS and Windows

[Honny1]

This PR adds a new local artifact add API endpoint and enforces absolute path requirements for local file operations.

Fixes: https://issues.redhat.com/browse/RUN-3385
Fixes: #26321

Benchmark

• Command: podman artifact add quay.io/myartifact/benchmark:latest ./artifacts/random-file
• Artifacts Dir content:

$ du -a -h | sort -hr
5G	.
5.0G ./random-file

Benchmark Results:

Mac OS

• Number of runs: 10
• Machine:
  • Chip: Apple M3 Pro
  • RAM: 36 GB
  • SSD: 1 TB Apple SSD
• Podman machine configuration:
  • CPUs: 8
  • Memory: 8.1 GB
• report

Providers

applehv

• Before: 32.82 s
• After: 5.77 s

libkrun (krunkit 0.2.1)

• Before: 25.87 s
• After: 7.17 s

Windows

• Windows 10
• Number of runs: 10
• Machine:
  • CPU: Intel Core i7-8665U
  • RAM: 32 GB
  • SSD: 500 GB Samsung 970 Evo Plus
• Podman machine configuration:
  • CPUs: 8
  • Memory: 2 GB (WSL) | 8.2 GB (Hyper-v)
• report

Providers

WSL

• Memory: 2 GB
• Before: 35.25 s
• After: 78.31 s

Hyper-V

• Memory: 8.2 GB
• Before: 362.70 s
• After: 51.66 s

Checklist

Ensure you have completed the following checklist for your pull request to be reviewed:

• Certify you wrote the patch or otherwise have the right to pass it on as an open-source patch by signing all
  commits. (git commit -s). (If needed, use git commit -s --amend). The author email must match
  the sign-off email address. See CONTRIBUTING.md
  for more information.
• Referenced issues using Fixes: #00000 in commit message (if applicable)
• Tests have been added/updated (or no tests are needed)
• Documentation has been updated (or no documentation changes are needed)
• All commits pass make validatepr (format/lint checks)
• Release note entered in the section below (or None if no user-facing changes)

Does this PR introduce a user-facing change?

Added new local artifact add API endpoint (`libpod/local/artifacts/add`) for loading artifacts from local files
Image and artifact load endpoints now require absolute paths for local file operations to improve security and prevent path ambiguity

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Honny1

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [Honny1]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[TomSweeneyRedHat]

Quick breeze, it LGTM, and happy green test buttons to boot!

[baude]

really quick pass LGTM ... hopefully someone can walk through a little slower than today allowed.

[Honny1]

Based on benchmark results, I disabled this improvement for WSL. I rebenchmarked this improvement on Windows 11 and it didn't get better, but overall CPU usage is lower. Let me know if you think disabling this feature for WSL makes sense.

Benchmark report

PTAL: @Luap99 @baude @TomSweeneyRedHat @mheon

[Honny1]

Unrelated CI failure; fixed in #27562

[TomSweeneyRedHat]

LGTM
but I'd like a head nod or two from folks more familiar with macOS and Windows than I.

[Honny1]

PTAL @l0rd

[l0rd]

@Honny1 I have tested with hyper-v but I cannot see any difference in terms of perfs. I will look at it closer tomorrow.