kernel variant

Author: bleggett

protect/control/v1/control.proto

@@ -641,7 +641,13 @@ message SnoopControlPacket {
 // for moving tags) instead of resolving from the local cache.
 // Set `want_metadata` to receive the OCI manifest/config in the final reply.
 message PullImageRequest {
-  string image = 1;
+  // The image to pull, given either as a literal OCI reference or as a named
+  // kernel variant OCI alias the daemon resolves from its `[zone.kernel-variants]`
+  // mapping in daemon.toml.
+  oneof source {
+    string image = 1;
+    string kernel_variant = 7;
+  }
   OciImageFormat format = 2;
   bool overwrite_cache = 3;
   bool update = 4;