Feature/nydus demo

[prabhu]

Nydus enhances the current OCI image specification by improving container launch speed, image space and network bandwidth efficiency, and data integrity. cdxgen container images are available in nydus format with the -nydus suffix.

Follow the commands used in the below workflow to test this image.

https://github.com/CycloneDX/cdxgen/blob/feature/nydus-demo/.github/workflows/nydus-demo.yml

With my tests, nydus was always 30 seconds to a minute faster than equivalent container-based invocation during cold tests. The difference became much higher when new versions of the image were published, with nydus only pulling the changed blobs instead of the entire image again.

Below is an example where only 6.9 MB of data was downloaded when specifying the image name as ghcr.io/cyclonedx/cdxgen:feature-nydus-demo-nydus since that is the only difference compared to master. In contrast, docker or podman would have downloaded the entire 4GB image!

 /mnt/work/HooliCorp/vuln-spring  master *1 !7 ?7  sudo nerdctl --snapshotter nydus run --rm -it -e "CDXGEN_DEBUG_MODE=debug" -e JAVA_TOOL_OPTIONS -v $HOME/.m2:$HOME/.m2 -v $(pwd):/app ghcr.io/cyclonedx/cdxgen:feature-nydus-demo-nydus -r --profile research -t java /app -o /app/bom.json
[sudo] password for root: 
ghcr.io/cyclonedx/cdxgen:feature-nydus-demo-nydus:                                resolved       |++++++++++++++++++++++++++++++++++++++| 
manifest-sha256:008e8b27bd903fc690cfd89c35a84bb192f7b78492843756d575c7b141068404: done           |++++++++++++++++++++++++++++++++++++++| 
config-sha256:8e339a6db5dbc9c8bfe7118062d56b96a5c5410e5c677a2df786cc1d7457ccc7:   done           |++++++++++++++++++++++++++++++++++++++| 
layer-sha256:09434820e6d107614eb0208ab99c638c67e6b28fa6fa0099ec8f0de7ea5177d8:    done           |++++++++++++++++++++++++++++++++++++++| 
elapsed: 13.9s                                                                    total:  6.9 Mi (509.8 KiB/s)

cc: @heubeck in case you would like to test the nydus image.