[Bug]: `system kernel set` doesn't follow symlinks within the tarball

### I have done the following

- [x] I have searched the existing issues
- [x] If possible, I've reproduced the issue using the 'main' branch of this project

### Steps to reproduce

1. `curl -O 'https://github.com/kata-containers/kata-containers/releases/download/3.19.1/kata-static-3.19.1-arm64.tar.xz`
2. ``container system kernel set --tar `pwd`/kata-static-3.19.1-arm64.tar.xz --binary opt/kata/share/kata-containers/vmlinux.container``
    * _note: inside kata-static-3.19.1-arm64.tar.xz, vmlinux.container is a symlink to vmlinux-6.12.36-160._
3. `container run <...>`
4. `container system kernel set --recommended`
5. `container run <...>`

### Current behavior

* Step 2: the requested kernel image is extracted and activated (as expected)
* Step 3: `container run <...>` fails with the following error:
    ```
    Error: unknown: "Error Domain=VZErrorDomain Code=1 "The virtual machine failed to start." UserInfo={NSLocalizedFailure=Internal Virtualization error., NSLocalizedFailureReason=The virtual machine failed to start.}"
    ```
* Step 4: `container system kernel set --recommended` fails with the following error:
    ```
    Installing the recommended kernel from https://github.com/kata-containers/kata-containers/releases/download/3.17.0/kata-static-3.17.0-arm64.tar.xz...
    Error: unknown: "Error Domain=NSCocoaErrorDomain Code=516 "“vmlinux-6.12.28-153” couldn’t be copied to “kernels” because an item with the same name already exists." UserInfo={NSSourceFilePathErrorKey=/var/folders/gt/ptf_r7hs7y3gw1mzqczbx78w0000gn/T/80190809-A9EC-4F5E-BC71-A639505C33BD/vmlinux-6.12.28-153, NSUserStringVariant=(
        Copy
    ), NSDestinationFilePath=/Users/bennett/Library/Application Support/com.apple.container/kernels/vmlinux-6.12.28-153, NSFilePath=/var/folders/gt/ptf_r7hs7y3gw1mzqczbx78w0000gn/T/80190809-A9EC-4F5E-BC71-A639505C33BD/vmlinux-6.12.28-153, NSURL=file:///var/folders/gt/ptf_r7hs7y3gw1mzqczbx78w0000gn/T/80190809-A9EC-4F5E-BC71-A639505C33BD/vmlinux-6.12.28-153, NSUnderlyingError=0xc06810c00 {Error Domain=NSPOSIXErrorDomain Code=17 "File exists"}}"
    ```
* Step 5: `container run <...>` fails with the same error as step 3

### Expected behavior

* Step 2: the requested kernel image is extracted and activated
* Step 3: `container run <...>` launches the requested container using the requested kernel
* Step 4: the default recommended kernel is downloaded, extracted and activated
* Step 5: `container run <...>` launches the requested container using the default recommended kernel

### Environment

```markdown
- OS: macOS 26.0 Beta (25A5327h) (beta 5)
- Xcode: Version 26.0 beta 4 (17A5285i)
- Container: container CLI version 0.3.0 (build: release, commit: 3fcf647)
```

Edit: reproduced using `container CLI version 0.3.0-13-g6242706 (build: debug, commit: 6242706)`&mdash;logs below

### Relevant log output

```shell
Warning! Running debug build. Performance may be degraded.
Filtering the log data using "subsystem ==[cd] "com.apple.container""
Timestamp                       Thread     Type        Activity             PID    TTL
2025-08-09 16:41:41.334064+0800 0x6f0799   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: list()
2025-08-09 16:41:41.340589+0800 0x6f0799   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: getImageSnapshot(description:platform:) - description: ImageDescription(reference: "ghcr.io/apple/containerization/vminit:0.5.0", descriptor: ContainerizationOCI.Descriptor(mediaType: "application/vnd.oci.image.index.v1+json", digest: "sha256:9a07572f190f0914df47ac8718d91b3d77065fa0dfbb29da16036f07029bba31", size: 306, urls: nil, annotations: nil, platform: nil)), platform: Platform(osVersion: nil, osFeatures: nil, variant: Optional("v8"), _rawOS: "linux", _rawArch: "arm64")
2025-08-09 16:41:41.344433+0800 0x6f0796   Info        0x0                  5772   0    container-apiserver: [com.apple.container:APIServer] KernelService: getDefaultKernel(platform:) - platform: SystemPlatform(os: Containerization.SystemPlatform.OS.linux, architecture: Containerization.SystemPlatform.Architecture.arm64)
2025-08-09 16:42:22.971951+0800 0x6f1076   Info        0x0                  5772   0    container-apiserver: [com.apple.container:APIServer] KernelService: installKernelFrom(tar:kernelFilePath:platform:progressUpdate:) - tar: /Users/bennett/src/tmp/kata-static-3.19.1-arm64.tar.xz, kernelFilePath: opt/kata/share/kata-containers/vmlinux.container, platform: SystemPlatform(os: Containerization.SystemPlatform.OS.linux, architecture: Containerization.SystemPlatform.Architecture.arm64)
2025-08-09 16:42:28.790013+0800 0x6f1076   Info        0x0                  5772   0    container-apiserver: [com.apple.container:APIServer] KernelService: installKernel(kernelFile:platform:) - kernelFile: file:///var/folders/gt/ptf_r7hs7y3gw1mzqczbx78w0000gn/T/5F89118C-81AE-4D07-A498-72D893452549/vmlinux.container, platform: SystemPlatform(os: Containerization.SystemPlatform.OS.linux, architecture: Containerization.SystemPlatform.Architecture.arm64)
2025-08-09 16:42:28.791398+0800 0x6f1076   Info        0x0                  5772   0    container-apiserver: [com.apple.container:APIServer] KernelService: setDefaultKernel(name:platform:) - name: vmlinux.container, platform: SystemPlatform(os: Containerization.SystemPlatform.OS.linux, architecture: Containerization.SystemPlatform.Architecture.arm64)
2025-08-09 16:43:24.434987+0800 0x6f1c21   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: list()
2025-08-09 16:43:24.445534+0800 0x6f0798   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: getImageSnapshot(description:platform:) - description: ImageDescription(reference: "docker.io/library/ubuntu:focal", descriptor: ContainerizationOCI.Descriptor(mediaType: "application/vnd.oci.image.index.v1+json", digest: "sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214", size: 6688, urls: nil, annotations: nil, platform: nil)), platform: Platform(osVersion: nil, osFeatures: nil, variant: nil, _rawOS: "linux", _rawArch: "arm64")
2025-08-09 16:43:24.448105+0800 0x6f1c1e   Info        0x0                  5772   0    container-apiserver: [com.apple.container:APIServer] KernelService: getDefaultKernel(platform:) - platform: SystemPlatform(os: Containerization.SystemPlatform.OS.linux, architecture: Containerization.SystemPlatform.Architecture.arm64)
2025-08-09 16:43:24.448642+0800 0x6f1c21   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: list()
2025-08-09 16:43:24.451471+0800 0x6f1c22   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: getImageSnapshot(description:platform:) - description: ImageDescription(reference: "ghcr.io/apple/containerization/vminit:0.5.0", descriptor: ContainerizationOCI.Descriptor(mediaType: "application/vnd.oci.image.index.v1+json", digest: "sha256:9a07572f190f0914df47ac8718d91b3d77065fa0dfbb29da16036f07029bba31", size: 306, urls: nil, annotations: nil, platform: nil)), platform: Platform(osVersion: nil, osFeatures: nil, variant: Optional("v8"), _rawOS: "linux", _rawArch: "arm64")
2025-08-09 16:43:24.454123+0800 0x6f1c1e   Info        0x0                  5772   0    container-apiserver: [com.apple.container:APIServer] network service: list
2025-08-09 16:43:24.460424+0800 0x6f1c21   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: list()
2025-08-09 16:43:24.469334+0800 0x6f1c21   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: getImageSnapshot(description:platform:) - description: ImageDescription(reference: "ghcr.io/apple/containerization/vminit:0.5.0", descriptor: ContainerizationOCI.Descriptor(mediaType: "application/vnd.oci.image.index.v1+json", digest: "sha256:9a07572f190f0914df47ac8718d91b3d77065fa0dfbb29da16036f07029bba31", size: 306, urls: nil, annotations: nil, platform: nil)), platform: Platform(osVersion: nil, osFeatures: nil, variant: nil, _rawOS: "linux", _rawArch: "arm64")
2025-08-09 16:43:24.473137+0800 0x6f0798   Info        0x0                  5808   0    container-core-images: [com.apple.container:ImagesHelper] ImagesService: getImageSnapshot(description:platform:) - description: ImageDescription(reference: "docker.io/library/ubuntu:focal", descriptor: ContainerizationOCI.Descriptor(mediaType: "application/vnd.oci.image.index.v1+json", digest: "sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214", size: 6688, urls: nil, annotations: nil, platform: nil)), platform: Platform(osVersion: nil, osFeatures: nil, variant: nil, _rawOS: "linux", _rawArch: "arm64")
2025-08-09 16:43:24.475790+0800 0x6f1075   Info        0x0                  5772   0    container-apiserver: [com.apple.container:APIServer] Registering plugin [id=com.apple.container.container-runtime-linux.c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.542101+0800 0x6f1c35   Info        0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] starting container-runtime-linux [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.543607+0800 0x6f1c35   Info        0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] configuring XPC server [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.543780+0800 0x6f1c35   Info        0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] starting XPC server [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.544087+0800 0x6f1c35   Info        0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] `bootstrap` xpc handler [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.554623+0800 0x6f0018   Info        0x0                  5807   0    container-network-vmnet: [com.apple.container:NetworkVmnetHelper] allocated attachment [gateway=192.168.64.1] [address=192.168.64.2/24] [hostname=c3fc4f65-ee10-450a-8f24-2f463e0394c3.] [id=default]
2025-08-09 16:43:24.556242+0800 0x6f1c43   Info        0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] creating NATNetworkInterface with network reference [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.683060+0800 0x6f1c44   Info        0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] closing forwarders [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.683099+0800 0x6f1c44   Info        0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] closed forwarders [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.683673+0800 0x6f1c43   Error       0x0                  7755   0    container-runtime-linux: [com.apple.container:RuntimeLinuxHelper] handler for com.apple.container.sandbox/bootstrap threw error Error Domain=VZErrorDomain Code=1 "The virtual machine failed to start." UserInfo={NSLocalizedFailure=Internal Virtualization error., NSLocalizedFailureReason=The virtual machine failed to start.} [uuid=c3fc4f65-ee10-450a-8f24-2f463e0394c3]
2025-08-09 16:43:24.683388+0800 0x6f1c45   Info        0x0                  5807   0    container-network-vmnet: [com.apple.container:NetworkVmnetHelper] released attachments [id=default] [hostname=c3fc4f65-ee10-450a-8f24-2f463e0394c3.]
```

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct


### Notes

* Contents of `~/Library/Application Support/com.apple.container/kernels/`:
    ```
    lrwxr-xr-x   1 bennett  staff        88  9 Aug 15:05 default.kernel-arm64 -> /Users/bennett/Library/Application Support/com.apple.container/kernels/vmlinux.container
    -rw-r--r--   1 bennett  staff  14750208  4 Aug 08:38 vmlinux-6.12.28-153
    -rw-r--r--   1 bennett  staff         0  9 Aug 15:05 vmlinux.container
    ```
    <img width="1715" height="101" alt="Image" src="https://github.com/user-attachments/assets/846c3dfd-56b7-4a4e-b366-c337bd469367" />
* after manually deleting and recreating the default.kernel-arm64 symlink, `container run <...>` works as expected
* it works as expected when binaryPath is a regular file instead of a symlink, eg:
    ```bash
    container system kernel set --tar `pwd`/kata-static-3.19.1-arm64.tar.xz --binary opt/kata/share/kata-containers/vmlinux-6.12.36-160
    ```

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Bug]: `system kernel set` doesn't follow symlinks within the tarball #475

I have done the following

Steps to reproduce

Current behavior

Expected behavior

Environment

Relevant log output

Code of Conduct

Notes

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[Bug]: system kernel set doesn't follow symlinks within the tarball #475

Description

I have done the following

Steps to reproduce

Current behavior

Expected behavior

Environment

Relevant log output

Code of Conduct

Notes

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

[Bug]: `system kernel set` doesn't follow symlinks within the tarball #475