Add entropy source to the containers http client

This commit fixes websocket connections to containers.

Thanks to @kenton for all the pointers.

src/workerd/api/container.c++

@@ -82,9 +82,11 @@ void Container::signal(jsg::Lock& js, int signo) {
 class Container::TcpPortWorkerInterface final: public WorkerInterface {
  public:
   TcpPortWorkerInterface(capnp::ByteStreamFactory& byteStreamFactory,
+      kj::EntropySource& entropySource,
       const kj::HttpHeaderTable& headerTable,
       rpc::Container::Port::Client port)
       : byteStreamFactory(byteStreamFactory),
+        entropySource(entropySource),
         headerTable(headerTable),
         port(kj::mv(port)) {}
 
@@ -120,7 +122,7 @@ class Container::TcpPortWorkerInterface final: public WorkerInterface {
         connectImpl(*pipe.ends[1]).then([]() -> kj::Promise<void> { return kj::NEVER_DONE; });
 
     // ... and then stack an HttpClient on it ...
-    auto client = kj::newHttpClient(headerTable, *pipe.ends[0]);
+    auto client = kj::newHttpClient(headerTable, *pipe.ends[0], {.entropySource = entropySource});
 
     // ... and then adapt that to an HttpService ...
     auto service = kj::newHttpService(*client);
@@ -167,6 +169,7 @@ class Container::TcpPortWorkerInterface final: public WorkerInterface {
 
  private:
   capnp::ByteStreamFactory& byteStreamFactory;
+  kj::EntropySource& entropySource;
   const kj::HttpHeaderTable& headerTable;
   rpc::Container::Port::Client port;
 
@@ -209,19 +212,22 @@ class Container::TcpPortWorkerInterface final: public WorkerInterface {
 class Container::TcpPortOutgoingFactory final: public Fetcher::OutgoingFactory {
  public:
   TcpPortOutgoingFactory(capnp::ByteStreamFactory& byteStreamFactory,
+      kj::EntropySource& entropySource,
       const kj::HttpHeaderTable& headerTable,
       rpc::Container::Port::Client port)
       : byteStreamFactory(byteStreamFactory),
+        entropySource(entropySource),
         headerTable(headerTable),
         port(kj::mv(port)) {}
 
   kj::Own<WorkerInterface> newSingleUseClient(kj::Maybe<kj::String> cfStr) override {
     // At present we have no use for `cfStr`.
-    return kj::heap<TcpPortWorkerInterface>(byteStreamFactory, headerTable, port);
+    return kj::heap<TcpPortWorkerInterface>(byteStreamFactory, entropySource, headerTable, port);
   }
 
  private:
   capnp::ByteStreamFactory& byteStreamFactory;
+  kj::EntropySource& entropySource;
   const kj::HttpHeaderTable& headerTable;
   rpc::Container::Port::Client port;
 };
@@ -234,8 +240,9 @@ jsg::Ref<Fetcher> Container::getTcpPort(jsg::Lock& js, int port) {
 
   auto& ioctx = IoContext::current();
 
-  kj::Own<Fetcher::OutgoingFactory> factory = kj::heap<TcpPortOutgoingFactory>(
-      ioctx.getByteStreamFactory(), ioctx.getHeaderTable(), req.send().getPort());
+  kj::Own<Fetcher::OutgoingFactory> factory =
+      kj::heap<TcpPortOutgoingFactory>(ioctx.getByteStreamFactory(), ioctx.getEntropySource(),
+          ioctx.getHeaderTable(), req.send().getPort());
 
   return jsg::alloc<Fetcher>(
       ioctx.addObject(kj::mv(factory)), Fetcher::RequiresHostAndProtocol::YES, true);