@@ -104,7 +104,7 @@ func (b *Backend) PruneCache(ctx context.Context, opts types.BuildCachePruneOpti

 	if err != nil {

 		return nil, errors.Wrap(err, "failed to prune build cache")

 	}

-	b.eventsService.Log("prune", events.BuilderEventType, events.Actor{

+	b.eventsService.Log(events.ActionPrune, events.BuilderEventType, events.Actor{

 		Attributes: map[string]string{

 			"reclaimed": strconv.FormatInt(buildCacheSize, 10),

 		},

@@ -18,6 +18,86 @@ const (

 	VolumeEventType    Type = "volume"    // VolumeEventType is the event type that volumes generate.

 )

+// Action is used for event-actions.

+type Action string

+

+const (

+	ActionCreate       Action = "create"

+	ActionStart        Action = "start"

+	ActionRestart      Action = "restart"

+	ActionStop         Action = "stop"

+	ActionCheckpoint   Action = "checkpoint"

+	ActionPause        Action = "pause"

+	ActionUnPause      Action = "unpause"

+	ActionAttach       Action = "attach"

+	ActionDetach       Action = "detach"

+	ActionResize       Action = "resize"

+	ActionUpdate       Action = "update"

+	ActionRename       Action = "rename"

+	ActionKill         Action = "kill"

+	ActionDie          Action = "die"

+	ActionOOM          Action = "oom"

+	ActionDestroy      Action = "destroy"

+	ActionRemove       Action = "remove"

+	ActionCommit       Action = "commit"

+	ActionTop          Action = "top"

+	ActionCopy         Action = "copy"

+	ActionArchivePath  Action = "archive-path"

+	ActionExtractToDir Action = "extract-to-dir"

+	ActionExport       Action = "export"

+	ActionImport       Action = "import"

+	ActionSave         Action = "save"

+	ActionLoad         Action = "load"

+	ActionTag          Action = "tag"

+	ActionUnTag        Action = "untag"

+	ActionPush         Action = "push"

+	ActionPull         Action = "pull"

+	ActionPrune        Action = "prune"

+	ActionDelete       Action = "delete"

+	ActionEnable       Action = "enable"

+	ActionDisable      Action = "disable"

+	ActionConnect      Action = "connect"

+	ActionDisconnect   Action = "disconnect"

+	ActionReload       Action = "reload"

+	ActionMount        Action = "mount"

+	ActionUnmount      Action = "unmount"

+

+	// ActionExecCreate is the prefix used for exec_create events. These

+	// event-actions are commonly followed by a colon and space (": "),

+	// and the command that's defined for the exec, for example:

+	//

+	//	exec_create: /bin/sh -c 'echo hello'

+	//

+	// This is far from ideal; it's a compromise to allow filtering and

+	// to preserve backward-compatibility.

+	ActionExecCreate Action = "exec_create"

+	// ActionExecStart is the prefix used for exec_create events. These

+	// event-actions are commonly followed by a colon and space (": "),

+	// and the command that's defined for the exec, for example:

+	//

+	//	exec_start: /bin/sh -c 'echo hello'

+	//

+	// This is far from ideal; it's a compromise to allow filtering and

+	// to preserve backward-compatibility.

+	ActionExecStart  Action = "exec_start"

+	ActionExecDie    Action = "exec_die"

+	ActionExecDetach Action = "exec_detach"

+

+	// ActionHealthStatus is the prefix to use for health_status events.

+	//

+	// Health-status events can either have a pre-defined status, in which

+	// case the "health_status" action is followed by a colon, or can be

+	// "free-form", in which case they're followed by the output of the

+	// health-check output.

+	//

+	// This is far form ideal, and a compromise to allow filtering, and

+	// to preserve backward-compatibility.

+	ActionHealthStatus          Action = "health_status"

+	ActionHealthStatusRunning   Action = "health_status: running"

+	ActionHealthStatusHealthy   Action = "health_status: healthy"

+	ActionHealthStatusUnhealthy Action = "health_status: unhealthy"

+)

+

 // Actor describes something that generates events,

 // like a container, or a network, or a volume.

 // It has a defined name and a set of attributes.

@@ -37,7 +117,7 @@ type Message struct {

 	From   string `json:"from,omitempty"`   // Deprecated: use Actor.Attributes["image"] instead.

 	Type   Type

-	Action string

+	Action Action

 	Actor  Actor

 	// Engine events are local scope. Cluster events are swarm scope.

 	Scope string `json:"scope,omitempty"`

@@ -90,17 +90,17 @@ func TestEvents(t *testing.T) {

 				{

 					Type:   events.BuilderEventType,

 					Actor:  events.Actor{ID: "1"},

-					Action: "create",

+					Action: events.ActionCreate,

 				},

 				{

 					Type:   events.BuilderEventType,

 					Actor:  events.Actor{ID: "1"},

-					Action: "die",

+					Action: events.ActionDie,

 				},

 				{

 					Type:   events.BuilderEventType,

 					Actor:  events.Actor{ID: "1"},

-					Action: "create",

+					Action: events.ActionCreate,

 				},

 			},

 			expectedEvents: map[string]bool{

@@ -17,6 +17,7 @@ import (

 	"github.com/containerd/containerd/cio"

 	"github.com/containerd/containerd/log"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	mounttypes "github.com/docker/docker/api/types/mount"

 	swarmtypes "github.com/docker/docker/api/types/swarm"

 	"github.com/docker/docker/container/stream"

@@ -488,26 +489,24 @@ func (container *Container) AddMountPointWithVolume(destination string, vol volu

 }

 // UnmountVolumes unmounts all volumes

-func (container *Container) UnmountVolumes(volumeEventLog func(name, action string, attributes map[string]string)) error {

-	var errors []string

+func (container *Container) UnmountVolumes(volumeEventLog func(name string, action events.Action, attributes map[string]string)) error {

+	var errs []string

 	for _, volumeMount := range container.MountPoints {

 		if volumeMount.Volume == nil {

 			continue

 		}

 		if err := volumeMount.Cleanup(); err != nil {

-			errors = append(errors, err.Error())

+			errs = append(errs, err.Error())

 			continue

 		}

-

-		attributes := map[string]string{

+		volumeEventLog(volumeMount.Volume.Name(), events.ActionUnmount, map[string]string{

 			"driver":    volumeMount.Volume.DriverName(),

 			"container": container.ID,

-		}

-		volumeEventLog(volumeMount.Volume.Name(), "unmount", attributes)

+		})

 	}

-	if len(errors) > 0 {

-		return fmt.Errorf("error while unmounting volumes for container %s: %s", container.ID, strings.Join(errors, "; "))

+	if len(errs) > 0 {

+		return fmt.Errorf("error while unmounting volumes for container %s: %s", container.ID, strings.Join(errs, "; "))

 	}

 	return nil

 }

@@ -12,6 +12,7 @@ import (

 	"github.com/containerd/continuity/fs"

 	"github.com/docker/docker/api/types"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	mounttypes "github.com/docker/docker/api/types/mount"

 	swarmtypes "github.com/docker/docker/api/types/swarm"

 	"github.com/docker/docker/pkg/stringid"

@@ -365,7 +366,7 @@ func (container *Container) UpdateContainer(hostConfig *containertypes.HostConfi

 // DetachAndUnmount uses a detached mount on all mount destinations, then

 // unmounts each volume normally.

 // This is used from daemon/archive for `docker cp`

-func (container *Container) DetachAndUnmount(volumeEventLog func(name, action string, attributes map[string]string)) error {

+func (container *Container) DetachAndUnmount(volumeEventLog func(name string, action events.Action, attributes map[string]string)) error {

 	ctx := context.TODO()

 	networkMounts := container.NetworkMounts()

@@ -7,6 +7,7 @@ import (

 	"github.com/docker/docker/api/types"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	swarmtypes "github.com/docker/docker/api/types/swarm"

 	"github.com/docker/docker/pkg/system"

 )

@@ -126,7 +127,7 @@ func (container *Container) ConfigMounts() []Mount {

 // DetachAndUnmount unmounts all volumes.

 // On Windows it only delegates to `UnmountVolumes` since there is nothing to

 // force unmount.

-func (container *Container) DetachAndUnmount(volumeEventLog func(name, action string, attributes map[string]string)) error {

+func (container *Container) DetachAndUnmount(volumeEventLog func(name string, action events.Action, attributes map[string]string)) error {

 	return container.UnmountVolumes(volumeEventLog)

 }

@@ -9,6 +9,7 @@ import (

 	"path/filepath"

 	"github.com/docker/docker/api/types"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/errdefs"

 	"github.com/docker/docker/pkg/archive"

@@ -85,7 +86,7 @@ func (daemon *Daemon) containerArchivePath(container *container.Container, path

 		return err

 	})

-	daemon.LogContainerEvent(container, "archive-path")

+	daemon.LogContainerEvent(container, events.ActionArchivePath)

 	return content, stat, nil

 }

@@ -155,7 +156,7 @@ func (daemon *Daemon) containerExtractToDir(container *container.Container, path

 		return err

 	}

-	daemon.LogContainerEvent(container, "extract-to-dir")

+	daemon.LogContainerEvent(container, events.ActionExtractToDir)

 	return nil

 }

@@ -205,7 +206,7 @@ func (daemon *Daemon) containerCopy(container *container.Container, resource str

 		container.Unlock()

 		return err

 	})

-	daemon.LogContainerEvent(container, "copy")

+	daemon.LogContainerEvent(container, events.ActionCopy)

 	return reader, nil

 }

@@ -9,6 +9,7 @@ import (

 	"github.com/docker/docker/api/types"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/errdefs"

 	"github.com/docker/docker/pkg/archive"

@@ -136,7 +137,7 @@ func (daemon *Daemon) containerArchivePath(container *container.Container, path

 		return err

 	})

-	daemon.LogContainerEvent(container, "archive-path")

+	daemon.LogContainerEvent(container, events.ActionArchivePath)

 	return content, stat, nil

 }

@@ -254,7 +255,7 @@ func (daemon *Daemon) containerExtractToDir(container *container.Container, path

 		return err

 	}

-	daemon.LogContainerEvent(container, "extract-to-dir")

+	daemon.LogContainerEvent(container, events.ActionExtractToDir)

 	return nil

 }

@@ -328,7 +329,7 @@ func (daemon *Daemon) containerCopy(container *container.Container, resource str

 		container.Unlock()

 		return err

 	})

-	daemon.LogContainerEvent(container, "copy")

+	daemon.LogContainerEvent(container, events.ActionCopy)

 	return reader, nil

 }

@@ -7,6 +7,7 @@ import (

 	"github.com/containerd/containerd/log"

 	"github.com/docker/docker/api/types/backend"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/container/stream"

 	"github.com/docker/docker/daemon/logger"

@@ -146,7 +147,7 @@ func (daemon *Daemon) containerAttach(c *container.Container, cfg *stream.Attach

 		}

 	}

-	daemon.LogContainerEvent(c, "attach")

+	daemon.LogContainerEvent(c, events.ActionAttach)

 	if !doStream {

 		return nil

@@ -179,7 +180,7 @@ func (daemon *Daemon) containerAttach(c *container.Container, cfg *stream.Attach

 	if err != nil {

 		var ierr term.EscapeError

 		if errors.Is(err, context.Canceled) || errors.As(err, &ierr) {

-			daemon.LogContainerEvent(c, "detach")

+			daemon.LogContainerEvent(c, events.ActionDetach)

 		} else {

 			log.G(ctx).Errorf("attach failed with error: %v", err)

 		}

@@ -7,6 +7,7 @@ import (

 	"path/filepath"

 	"github.com/docker/docker/api/types/checkpoint"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/daemon/names"

 )

@@ -79,7 +80,7 @@ func (daemon *Daemon) CheckpointCreate(name string, config checkpoint.CreateOpti

 		return fmt.Errorf("Cannot checkpoint container %s: %s", name, err)

 	}

-	daemon.LogContainerEvent(container, "checkpoint")

+	daemon.LogContainerEvent(container, events.ActionCheckpoint)

 	return nil

 }

@@ -254,7 +254,7 @@ func (r *controller) Start(ctx context.Context) error {

 			}

 			switch event.Action {

-			case "die": // exit on terminal events

+			case events.ActionDie: // exit on terminal events

 				ctnr, err := r.adapter.inspect(ctx)

 				if err != nil {

 					return errors.Wrap(err, "die event received")

@@ -263,18 +263,18 @@ func (r *controller) Start(ctx context.Context) error {

 				}

 				return nil

-			case "destroy":

+			case events.ActionDestroy:

 				// If we get here, something has gone wrong but we want to exit

 				// and report anyways.

 				return ErrContainerDestroyed

-			case "health_status: unhealthy":

+			case events.ActionHealthStatusUnhealthy:

 				// in this case, we stop the container and report unhealthy status

 				if err := r.Shutdown(ctx); err != nil {

 					return errors.Wrap(err, "unhealthy container shutdown failed")

 				}

 				// set health check error, and wait for container to fully exit ("die" event)

 				healthErr = ErrContainerUnhealthy

-			case "health_status: healthy":

+			case events.ActionHealthStatusHealthy:

 				if err := r.adapter.activateServiceBinding(); err != nil {

 					log.G(ctx).WithError(err).Errorf("failed to activate service binding for container %s after healthy event", r.adapter.container.name())

 					return err

@@ -716,7 +716,7 @@ func (r *controller) checkHealth(ctx context.Context) error {

 			}

 			switch event.Action {

-			case "health_status: unhealthy":

+			case events.ActionHealthStatusUnhealthy:

 				return ErrContainerUnhealthy

 			}

 		}

@@ -8,6 +8,7 @@ import (

 	"time"

 	containertypes "github.com/docker/docker/api/types/container"

+	eventtypes "github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/daemon"

 	"github.com/docker/docker/daemon/events"

@@ -71,7 +72,7 @@ func TestHealthStates(t *testing.T) {

 	// send an event and expect to get expectedErr

 	// if expectedErr is nil, shouldn't get any error

-	logAndExpect := func(msg string, expectedErr error) {

+	logAndExpect := func(msg eventtypes.Action, expectedErr error) {

 		daemon.LogContainerEvent(c, msg)

 		timer := time.NewTimer(1 * time.Second)

@@ -90,10 +91,10 @@ func TestHealthStates(t *testing.T) {

 	}

 	// events that are ignored by checkHealth

-	logAndExpect("health_status: running", nil)

-	logAndExpect("health_status: healthy", nil)

-	logAndExpect("die", nil)

+	logAndExpect(eventtypes.ActionHealthStatusRunning, nil)

+	logAndExpect(eventtypes.ActionHealthStatusHealthy, nil)

+	logAndExpect(eventtypes.ActionDie, nil)

 	// unhealthy event will be caught by checkHealth

-	logAndExpect("health_status: unhealthy", ErrContainerUnhealthy)

+	logAndExpect(eventtypes.ActionHealthStatusUnhealthy, ErrContainerUnhealthy)

 }

@@ -10,6 +10,7 @@ import (

 	"github.com/docker/distribution/reference"

 	"github.com/docker/docker/api/types/backend"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/builder/dockerfile"

 	"github.com/docker/docker/errdefs"

 	"github.com/pkg/errors"

@@ -180,7 +181,7 @@ func (daemon *Daemon) CreateImageFromContainer(ctx context.Context, name string,

 		}

 		imageRef = reference.FamiliarString(c.Tag)

 	}

-	daemon.LogContainerEventWithAttributes(container, "commit", map[string]string{

+	daemon.LogContainerEventWithAttributes(container, events.ActionCommit, map[string]string{

 		"comment":  c.Comment,

 		"imageID":  id.String(),

 		"imageRef": imageRef,

@@ -12,6 +12,7 @@ import (

 	"github.com/containerd/containerd/log"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	networktypes "github.com/docker/docker/api/types/network"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/daemon/config"

@@ -772,7 +773,7 @@ func (daemon *Daemon) connectToNetwork(cfg *config.Config, container *container.

 	container.NetworkSettings.Ports = getPortMapInfo(sb)

-	daemon.LogNetworkEventWithAttributes(n, "connect", map[string]string{"container": container.ID})

+	daemon.LogNetworkEventWithAttributes(n, events.ActionConnect, map[string]string{"container": container.ID})

 	networkActions.WithValues("connect").UpdateSince(start)

 	return nil

 }

@@ -880,7 +881,7 @@ func (daemon *Daemon) tryDetachContainerFromClusterNetwork(network *libnetwork.N

 			}

 		}

 	}

-	daemon.LogNetworkEventWithAttributes(network, "disconnect", map[string]string{

+	daemon.LogNetworkEventWithAttributes(network, events.ActionDisconnect, map[string]string{

 		"container": container.ID,

 	})

 }

@@ -1051,7 +1052,7 @@ func (daemon *Daemon) DisconnectFromNetwork(container *container.Container, netw

 	}

 	if n != nil {

-		daemon.LogNetworkEventWithAttributes(n, "disconnect", map[string]string{

+		daemon.LogNetworkEventWithAttributes(n, events.ActionDisconnect, map[string]string{

 			"container": container.ID,

 		})

 	}

@@ -10,6 +10,7 @@ import (

 	"github.com/containerd/containerd/log"

 	"github.com/docker/distribution/reference"

 	"github.com/docker/docker/api/types"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/image"

 	"github.com/docker/docker/pkg/stringid"

@@ -76,7 +77,7 @@ func (i *ImageService) ImageDelete(ctx context.Context, imageRef string, force,

 		if err != nil {

 			return nil, err

 		}

-		i.LogImageEvent(imgID.String(), imgID.String(), "untag")

+		i.LogImageEvent(imgID.String(), imgID.String(), events.ActionUnTag)

 		records := []types.ImageDeleteResponseItem{{Untagged: reference.FamiliarString(reference.TagNameOnly(parsedRef))}}

 		return records, nil

 	}

@@ -107,7 +108,7 @@ func (i *ImageService) ImageDelete(ctx context.Context, imageRef string, force,

 			return nil, err

 		}

-		i.LogImageEvent(imgID.String(), imgID.String(), "untag")

+		i.LogImageEvent(imgID.String(), imgID.String(), events.ActionUnTag)

 		records := []types.ImageDeleteResponseItem{{Untagged: reference.FamiliarString(reference.TagNameOnly(parsedRef))}}

 		return records, nil

 	}

@@ -159,7 +160,7 @@ func (i *ImageService) deleteAll(ctx context.Context, img images.Image, force, p

 			return records, err

 		}

 	}

-	i.LogImageEvent(imgID, imgID, "delete")

+	i.LogImageEvent(imgID, imgID, events.ActionDelete)

 	records = append(records, types.ImageDeleteResponseItem{Deleted: imgID})

 	for _, parent := range parents {

@@ -172,7 +173,7 @@ func (i *ImageService) deleteAll(ctx context.Context, img images.Image, force, p

 			break

 		}

 		parentID := parent.img.Target.Digest.String()

-		i.LogImageEvent(parentID, parentID, "delete")

+		i.LogImageEvent(parentID, parentID, events.ActionDelete)

 		records = append(records, types.ImageDeleteResponseItem{Deleted: parentID})

 	}

@@ -259,7 +260,7 @@ func (i *ImageService) imageDeleteHelper(ctx context.Context, img images.Image,

 		return err

 	}

-	i.LogImageEvent(imgID.String(), imgID.String(), "untag")

+	i.LogImageEvent(imgID.String(), imgID.String(), events.ActionUnTag)

 	*records = append(*records, types.ImageDeleteResponseItem{Untagged: reference.FamiliarString(untaggedRef)})

 	return nil

@@ -8,7 +8,7 @@ import (

 )

 // LogImageEvent generates an event related to an image with only the default attributes.

-func (i *ImageService) LogImageEvent(imageID, refName, action string) {

+func (i *ImageService) LogImageEvent(imageID, refName string, action events.Action) {

 	ctx := context.TODO()

 	attributes := map[string]string{}

@@ -14,6 +14,7 @@ import (

 	"github.com/containerd/containerd/log"

 	cplatforms "github.com/containerd/containerd/platforms"

 	"github.com/docker/distribution/reference"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/errdefs"

 	"github.com/docker/docker/pkg/platforms"

@@ -216,7 +217,7 @@ func (i *ImageService) LoadImage(ctx context.Context, inTar io.ReadCloser, outSt

 		}

 		fmt.Fprintf(progress, "%s: %s\n", loadedMsg, name)

-		i.LogImageEvent(img.Target.Digest.String(), img.Target.Digest.String(), "load")

+		i.LogImageEvent(img.Target.Digest.String(), img.Target.Digest.String(), events.ActionLoad)

 	}

 	return nil

@@ -16,6 +16,7 @@ import (

 	"github.com/containerd/containerd/platforms"

 	"github.com/docker/distribution/reference"

 	"github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/builder/dockerfile"

 	"github.com/docker/docker/errdefs"

 	"github.com/docker/docker/image"

@@ -146,7 +147,7 @@ func (i *ImageService) ImportImage(ctx context.Context, ref reference.Named, pla

 	if err != nil {

 		logger.WithError(err).Debug("failed to unpack image")

 	} else {

-		i.LogImageEvent(id.String(), id.String(), "import")

+		i.LogImageEvent(id.String(), id.String(), events.ActionImport)

 	}

 	return id, err

@@ -7,6 +7,7 @@ import (

 	containerdimages "github.com/containerd/containerd/images"

 	"github.com/containerd/containerd/log"

 	"github.com/docker/distribution/reference"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/errdefs"

 	"github.com/docker/docker/image"

 	"github.com/pkg/errors"

@@ -39,7 +40,7 @@ func (i *ImageService) TagImage(ctx context.Context, imageID image.ID, newTag re

 		// Check if image we would replace already resolves to the same target.

 		// No need to do anything.

 		if replacedImg.Target.Digest == target.Digest {

-			i.LogImageEvent(imageID.String(), reference.FamiliarString(newTag), "tag")

+			i.LogImageEvent(imageID.String(), reference.FamiliarString(newTag), events.ActionTag)

 			return nil

 		}

@@ -60,7 +61,7 @@ func (i *ImageService) TagImage(ctx context.Context, imageID image.ID, newTag re

 	})

 	logger.Info("image created")

-	defer i.LogImageEvent(imageID.String(), reference.FamiliarString(newTag), "tag")

+	defer i.LogImageEvent(imageID.String(), reference.FamiliarString(newTag), events.ActionTag)

 	// The tag succeeded, check if the source image is dangling

 	sourceDanglingImg, err := is.Get(context.Background(), danglingImageName(target.Digest))

@@ -13,6 +13,7 @@ import (

 	"github.com/containerd/containerd/platforms"

 	"github.com/docker/docker/api/types"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	imagetypes "github.com/docker/docker/api/types/image"

 	networktypes "github.com/docker/docker/api/types/network"

 	"github.com/docker/docker/container"

@@ -235,7 +236,7 @@ func (daemon *Daemon) create(ctx context.Context, daemonCfg *config.Config, opts

 		return nil, err

 	}

 	stateCtr.set(ctr.ID, "stopped")

-	daemon.LogContainerEvent(ctr, "create")

+	daemon.LogContainerEvent(ctr, events.ActionCreate)

 	return ctr, nil

 }

@@ -13,6 +13,7 @@ import (

 	"github.com/containerd/containerd/log"

 	"github.com/docker/docker/api/types"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/daemon/config"

 	"github.com/docker/docker/errdefs"

@@ -182,6 +183,6 @@ func (daemon *Daemon) cleanupContainer(container *container.Container, config ty

 	container.SetRemoved()

 	stateCtr.del(container.ID)

-	daemon.LogContainerEvent(container, "destroy")

+	daemon.LogContainerEvent(container, events.ActionDestroy)

 	return nil

 }

@@ -17,12 +17,12 @@ import (

 )

 // LogContainerEvent generates an event related to a container with only the default attributes.

-func (daemon *Daemon) LogContainerEvent(container *container.Container, action string) {

+func (daemon *Daemon) LogContainerEvent(container *container.Container, action events.Action) {

 	daemon.LogContainerEventWithAttributes(container, action, map[string]string{})

 }

 // LogContainerEventWithAttributes generates an event related to a container with specific given attributes.

-func (daemon *Daemon) LogContainerEventWithAttributes(container *container.Container, action string, attributes map[string]string) {

+func (daemon *Daemon) LogContainerEventWithAttributes(container *container.Container, action events.Action, attributes map[string]string) {

 	copyAttributes(attributes, container.Config.Labels)

 	if container.Config.Image != "" {

 		attributes["image"] = container.Config.Image

@@ -35,7 +35,7 @@ func (daemon *Daemon) LogContainerEventWithAttributes(container *container.Conta

 }

 // LogPluginEvent generates an event related to a plugin with only the default attributes.

-func (daemon *Daemon) LogPluginEvent(pluginID, refName, action string) {

+func (daemon *Daemon) LogPluginEvent(pluginID, refName string, action events.Action) {

 	daemon.EventsService.Log(action, events.PluginEventType, events.Actor{

 		ID:         pluginID,

 		Attributes: map[string]string{"name": refName},

@@ -43,7 +43,7 @@ func (daemon *Daemon) LogPluginEvent(pluginID, refName, action string) {

 }

 // LogVolumeEvent generates an event related to a volume.

-func (daemon *Daemon) LogVolumeEvent(volumeID, action string, attributes map[string]string) {

+func (daemon *Daemon) LogVolumeEvent(volumeID string, action events.Action, attributes map[string]string) {

 	daemon.EventsService.Log(action, events.VolumeEventType, events.Actor{

 		ID:         volumeID,

 		Attributes: attributes,

@@ -51,12 +51,12 @@ func (daemon *Daemon) LogVolumeEvent(volumeID, action string, attributes map[str

 }

 // LogNetworkEvent generates an event related to a network with only the default attributes.

-func (daemon *Daemon) LogNetworkEvent(nw *libnetwork.Network, action string) {

+func (daemon *Daemon) LogNetworkEvent(nw *libnetwork.Network, action events.Action) {

 	daemon.LogNetworkEventWithAttributes(nw, action, map[string]string{})

 }

 // LogNetworkEventWithAttributes generates an event related to a network with specific given attributes.

-func (daemon *Daemon) LogNetworkEventWithAttributes(nw *libnetwork.Network, action string, attributes map[string]string) {

+func (daemon *Daemon) LogNetworkEventWithAttributes(nw *libnetwork.Network, action events.Action, attributes map[string]string) {

 	attributes["name"] = nw.Name()

 	attributes["type"] = nw.Type()

 	daemon.EventsService.Log(action, events.NetworkEventType, events.Actor{

@@ -66,7 +66,7 @@ func (daemon *Daemon) LogNetworkEventWithAttributes(nw *libnetwork.Network, acti

 }

 // LogDaemonEventWithAttributes generates an event related to the daemon itself with specific given attributes.

-func (daemon *Daemon) LogDaemonEventWithAttributes(action string, attributes map[string]string) {

+func (daemon *Daemon) LogDaemonEventWithAttributes(action events.Action, attributes map[string]string) {

 	if daemon.EventsService != nil {

 		if name := hostName(); name != "" {

 			attributes["name"] = name

@@ -248,10 +248,10 @@ func (daemon *Daemon) logServiceEvent(action swarmapi.WatchActionKind, service *

 	daemon.logClusterEvent(action, service.ID, events.ServiceEventType, eventTime, attributes)

 }

-var clusterEventAction = map[swarmapi.WatchActionKind]string{

-	swarmapi.WatchActionKindCreate: "create",

-	swarmapi.WatchActionKindUpdate: "update",

-	swarmapi.WatchActionKindRemove: "remove",

+var clusterEventAction = map[swarmapi.WatchActionKind]events.Action{

+	swarmapi.WatchActionKindCreate: events.ActionCreate,

+	swarmapi.WatchActionKindUpdate: events.ActionUpdate,

+	swarmapi.WatchActionKindRemove: events.ActionRemove,

 }

 func (daemon *Daemon) logClusterEvent(action swarmapi.WatchActionKind, id string, eventType events.Type, eventTime time.Time, attributes map[string]string) {

@@ -79,7 +79,7 @@ func (e *Events) Evict(l chan interface{}) {

 }

 // Log creates a local scope message and publishes it

-func (e *Events) Log(action string, eventType eventtypes.Type, actor eventtypes.Actor) {

+func (e *Events) Log(action eventtypes.Action, eventType eventtypes.Type, actor eventtypes.Actor) {

 	now := time.Now().UTC()

 	jm := eventtypes.Message{

 		Action:   action,

@@ -94,11 +94,11 @@ func (e *Events) Log(action string, eventType eventtypes.Type, actor eventtypes.

 	switch eventType {

 	case eventtypes.ContainerEventType:

 		jm.ID = actor.ID

-		jm.Status = action

+		jm.Status = string(action)

 		jm.From = actor.Attributes["image"]

 	case eventtypes.ImageEventType:

 		jm.ID = actor.ID

-		jm.Status = action

+		jm.Status = string(action)

 	}

 	e.PublishMessage(jm)

@@ -20,7 +20,7 @@ import (

 // TODO remove this once we removed the deprecated `ID`, `Status`, and `From` fields.

 func validateLegacyFields(t *testing.T, msg events.Message) {

 	t.Helper()

-	assert.Check(t, is.Equal(msg.Status, msg.Action), "Legacy Status field does not match Action")

+	assert.Check(t, is.Equal(msg.Status, string(msg.Action)), "Legacy Status field does not match Action")

 	assert.Check(t, is.Equal(msg.ID, msg.Actor.ID), "Legacy ID field does not match Actor.ID")

 	assert.Check(t, is.Equal(msg.From, msg.Actor.Attributes["image"]), "Legacy From field does not match Actor.Attributes.image")

 }

@@ -45,7 +45,7 @@ func TestEventsLog(t *testing.T) {

 		jmsg, ok := msg.(events.Message)

 		assert.Assert(t, ok, "unexpected type: %T", msg)

 		validateLegacyFields(t, jmsg)

-		assert.Check(t, is.Equal(jmsg.Action, "test"))

+		assert.Check(t, is.Equal(jmsg.Action, events.Action("test")))

 		assert.Check(t, is.Equal(jmsg.Actor.ID, "cont"))

 		assert.Check(t, is.Equal(jmsg.Actor.Attributes["image"], "image"))

 	case <-time.After(1 * time.Second):

@@ -58,7 +58,7 @@ func TestEventsLog(t *testing.T) {

 		jmsg, ok := msg.(events.Message)

 		assert.Assert(t, ok, "unexpected type: %T", msg)

 		validateLegacyFields(t, jmsg)

-		assert.Check(t, is.Equal(jmsg.Action, "test"))

+		assert.Check(t, is.Equal(jmsg.Action, events.Action("test")))

 		assert.Check(t, is.Equal(jmsg.Actor.ID, "cont"))

 		assert.Check(t, is.Equal(jmsg.Actor.Attributes["image"], "image"))

 	case <-time.After(1 * time.Second):

@@ -91,7 +91,7 @@ func TestLogEvents(t *testing.T) {

 	for i := 0; i < eventsLimit+16; i++ {

 		num := strconv.Itoa(i)

-		e.Log("action_"+num, events.ContainerEventType, events.Actor{

+		e.Log(events.Action("action_"+num), events.ContainerEventType, events.Actor{

 			ID:         "cont_" + num,

 			Attributes: map[string]string{"image": "image_" + num},

 		})

@@ -100,7 +100,7 @@ func TestLogEvents(t *testing.T) {

 	current, l, _ := e.Subscribe()

 	for i := 0; i < 10; i++ {

 		num := strconv.Itoa(i + eventsLimit + 16)

-		e.Log("action_"+num, events.ContainerEventType, events.Actor{

+		e.Log(events.Action("action_"+num), events.ContainerEventType, events.Actor{

 			ID:         "cont_" + num,

 			Attributes: map[string]string{"image": "image_" + num},

 		})

@@ -121,16 +121,16 @@ func TestLogEvents(t *testing.T) {

 	first := current[0]

 	validateLegacyFields(t, first)

-	assert.Check(t, is.Equal(first.Action, "action_16"))

+	assert.Check(t, is.Equal(first.Action, events.Action("action_16")))

 	last := current[len(current)-1]

-	assert.Check(t, is.Equal(last.Action, "action_271"))

+	assert.Check(t, is.Equal(last.Action, events.Action("action_271")))

 	firstC := msgs[0]

-	assert.Check(t, is.Equal(firstC.Action, "action_272"))

+	assert.Check(t, is.Equal(firstC.Action, events.Action("action_272")))

 	lastC := msgs[len(msgs)-1]

-	assert.Check(t, is.Equal(lastC.Action, "action_281"))

+	assert.Check(t, is.Equal(lastC.Action, events.Action("action_281")))

 }

 // Regression-test for https://github.com/moby/moby/issues/20999

@@ -38,9 +38,9 @@ func (ef *Filter) matchEvent(ev events.Message) bool {

 	// #25798 if an event filter contains either health_status, exec_create or exec_start without a colon

 	// Let's to a FuzzyMatch instead of an ExactMatch.

 	if ef.filterContains("event", map[string]struct{}{"health_status": {}, "exec_create": {}, "exec_start": {}}) {

-		return ef.filter.FuzzyMatch("event", ev.Action)

+		return ef.filter.FuzzyMatch("event", string(ev.Action))

 	}

-	return ef.filter.ExactMatch("event", ev.Action)

+	return ef.filter.ExactMatch("event", string(ev.Action))

 }

 func (ef *Filter) filterContains(field string, values map[string]struct{}) bool {

@@ -66,7 +66,7 @@ func Scan(text string) (*events.Message, error) {

 		Time:     t,

 		TimeNano: time.Unix(t, tn).UnixNano(),

 		Type:     events.Type(md["eventType"]),

-		Action:   md["action"],

+		Action:   events.Action(md["action"]),

 		Actor: events.Actor{

 			ID:         md["id"],

 			Attributes: attrs,

@@ -29,7 +29,7 @@ func TestLogContainerEventCopyLabels(t *testing.T) {

 	daemon := &Daemon{

 		EventsService: e,

 	}

-	daemon.LogContainerEvent(ctr, "create")

+	daemon.LogContainerEvent(ctr, eventtypes.ActionCreate)

 	if _, mutated := ctr.Config.Labels["image"]; mutated {

 		t.Fatalf("Expected to not mutate the container labels, got %q", ctr.Config.Labels)

@@ -59,7 +59,7 @@ func TestLogContainerEventWithAttributes(t *testing.T) {

 	daemon := &Daemon{

 		EventsService: e,

 	}

-	daemon.LogContainerEventWithAttributes(ctr, "create", map[string]string{

+	daemon.LogContainerEventWithAttributes(ctr, eventtypes.ActionCreate, map[string]string{

 		"node": "2",

 		"foo":  "bar",

 	})

@@ -13,6 +13,7 @@ import (

 	"github.com/containerd/containerd/log"

 	"github.com/docker/docker/api/types"

 	containertypes "github.com/docker/docker/api/types/container"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/api/types/strslice"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/container/stream"

@@ -137,7 +138,7 @@ func (daemon *Daemon) ContainerExecCreate(name string, config *types.ExecConfig)

 	}

 	daemon.registerExecCommand(cntr, execConfig)

-	daemon.LogContainerEventWithAttributes(cntr, "exec_create: "+execConfig.Entrypoint+" "+strings.Join(execConfig.Args, " "), map[string]string{

+	daemon.LogContainerEventWithAttributes(cntr, events.Action(string(events.ActionExecCreate)+": "+execConfig.Entrypoint+" "+strings.Join(execConfig.Args, " ")), map[string]string{

 		"execID": execConfig.ID,

 	})

@@ -173,7 +174,7 @@ func (daemon *Daemon) ContainerExecStart(ctx context.Context, name string, optio

 	ec.Unlock()

 	log.G(ctx).Debugf("starting exec command %s in container %s", ec.ID, ec.Container.ID)

-	daemon.LogContainerEventWithAttributes(ec.Container, "exec_start: "+ec.Entrypoint+" "+strings.Join(ec.Args, " "), map[string]string{

+	daemon.LogContainerEventWithAttributes(ec.Container, events.Action(string(events.ActionExecStart)+": "+ec.Entrypoint+" "+strings.Join(ec.Args, " ")), map[string]string{

 		"execID": ec.ID,

 	})

@@ -308,7 +309,7 @@ func (daemon *Daemon) ContainerExecStart(ctx context.Context, name string, optio

 			if _, ok := err.(term.EscapeError); !ok {

 				return errdefs.System(errors.Wrap(err, "exec attach failed"))

 			}

-			daemon.LogContainerEventWithAttributes(ec.Container, "exec_detach", map[string]string{

+			daemon.LogContainerEventWithAttributes(ec.Container, events.ActionExecDetach, map[string]string{

 				"execID": ec.ID,

 			})

 		}

@@ -5,6 +5,7 @@ import (

 	"fmt"

 	"io"

+	"github.com/docker/docker/api/types/events"

 	"github.com/docker/docker/container"

 	"github.com/docker/docker/errdefs"

 	"github.com/docker/docker/pkg/archive"

@@ -58,6 +59,6 @@ func (daemon *Daemon) containerExport(ctx context.Context, container *container.

 	if err != nil {

 		return err

 	}

-	daemon.LogContainerEvent(container, "export")