mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-08-10 20:32:54 +00:00
commit
a1361608a9
11
src/agent/Cargo.lock
generated
11
src/agent/Cargo.lock
generated
@ -579,7 +579,6 @@ dependencies = [
|
|||||||
"scan_fmt",
|
"scan_fmt",
|
||||||
"scopeguard",
|
"scopeguard",
|
||||||
"serde_json",
|
"serde_json",
|
||||||
"signal-hook",
|
|
||||||
"slog",
|
"slog",
|
||||||
"slog-scope",
|
"slog-scope",
|
||||||
"slog-stdlog",
|
"slog-stdlog",
|
||||||
@ -1511,16 +1510,6 @@ dependencies = [
|
|||||||
"syn 1.0.55",
|
"syn 1.0.55",
|
||||||
]
|
]
|
||||||
|
|
||||||
[[package]]
|
|
||||||
name = "signal-hook"
|
|
||||||
version = "0.1.16"
|
|
||||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
||||||
checksum = "604508c1418b99dfe1925ca9224829bb2a8a9a04dda655cc01fcad46f4ab05ed"
|
|
||||||
dependencies = [
|
|
||||||
"libc",
|
|
||||||
"signal-hook-registry",
|
|
||||||
]
|
|
||||||
|
|
||||||
[[package]]
|
[[package]]
|
||||||
name = "signal-hook-registry"
|
name = "signal-hook-registry"
|
||||||
version = "1.2.2"
|
version = "1.2.2"
|
||||||
|
@ -16,7 +16,6 @@ libc = "0.2.58"
|
|||||||
nix = "0.17.0"
|
nix = "0.17.0"
|
||||||
prctl = "1.0.0"
|
prctl = "1.0.0"
|
||||||
serde_json = "1.0.39"
|
serde_json = "1.0.39"
|
||||||
signal-hook = "0.1.9"
|
|
||||||
scan_fmt = "0.2.3"
|
scan_fmt = "0.2.3"
|
||||||
scopeguard = "1.0.0"
|
scopeguard = "1.0.0"
|
||||||
regex = "1"
|
regex = "1"
|
||||||
|
@ -55,7 +55,7 @@ use crate::pipestream::PipeStream;
|
|||||||
use crate::sync::{read_sync, write_count, write_sync, SYNC_DATA, SYNC_FAILED, SYNC_SUCCESS};
|
use crate::sync::{read_sync, write_count, write_sync, SYNC_DATA, SYNC_FAILED, SYNC_SUCCESS};
|
||||||
use crate::sync_with_async::{read_async, write_async};
|
use crate::sync_with_async::{read_async, write_async};
|
||||||
use async_trait::async_trait;
|
use async_trait::async_trait;
|
||||||
use tokio::io::{AsyncBufReadExt, AsyncReadExt, AsyncWriteExt};
|
use tokio::io::AsyncBufReadExt;
|
||||||
|
|
||||||
const STATE_FILENAME: &str = "state.json";
|
const STATE_FILENAME: &str = "state.json";
|
||||||
const EXEC_FIFO_FILENAME: &str = "exec.fifo";
|
const EXEC_FIFO_FILENAME: &str = "exec.fifo";
|
||||||
@ -276,7 +276,6 @@ pub struct SyncPC {
|
|||||||
pid: pid_t,
|
pid: pid_t,
|
||||||
}
|
}
|
||||||
|
|
||||||
#[async_trait]
|
|
||||||
pub trait Container: BaseContainer {
|
pub trait Container: BaseContainer {
|
||||||
fn pause(&mut self) -> Result<()>;
|
fn pause(&mut self) -> Result<()>;
|
||||||
fn resume(&mut self) -> Result<()>;
|
fn resume(&mut self) -> Result<()>;
|
||||||
@ -1513,8 +1512,10 @@ fn set_sysctls(sysctls: &HashMap<String, String>) -> Result<()> {
|
|||||||
Ok(())
|
Ok(())
|
||||||
}
|
}
|
||||||
|
|
||||||
|
use std::io::Read;
|
||||||
use std::os::unix::process::ExitStatusExt;
|
use std::os::unix::process::ExitStatusExt;
|
||||||
use std::process::Stdio;
|
use std::process::Stdio;
|
||||||
|
use std::sync::mpsc::{self, RecvTimeoutError};
|
||||||
use std::time::Duration;
|
use std::time::Duration;
|
||||||
|
|
||||||
async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
||||||
@ -1536,11 +1537,9 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
let _ = unistd::close(wfd);
|
let _ = unistd::close(wfd);
|
||||||
});
|
});
|
||||||
|
|
||||||
let mut pipe_r = PipeStream::from_fd(rfd);
|
|
||||||
let mut pipe_w = PipeStream::from_fd(wfd);
|
|
||||||
|
|
||||||
match unistd::fork()? {
|
match unistd::fork()? {
|
||||||
ForkResult::Parent { child } => {
|
ForkResult::Parent { child } => {
|
||||||
|
let mut pipe_r = PipeStream::from_fd(rfd);
|
||||||
let buf = read_async(&mut pipe_r).await?;
|
let buf = read_async(&mut pipe_r).await?;
|
||||||
let status = if buf.len() == 4 {
|
let status = if buf.len() == 4 {
|
||||||
let buf_array: [u8; 4] = [buf[0], buf[1], buf[2], buf[3]];
|
let buf_array: [u8; 4] = [buf[0], buf[1], buf[2], buf[3]];
|
||||||
@ -1565,13 +1564,13 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
ForkResult::Child => {
|
ForkResult::Child => {
|
||||||
let (mut tx, mut rx) = tokio::sync::mpsc::channel(100);
|
let (tx, rx) = mpsc::channel();
|
||||||
let (tx_logger, rx_logger) = tokio::sync::oneshot::channel();
|
let (tx_logger, rx_logger) = mpsc::channel();
|
||||||
|
|
||||||
tx_logger.send(logger.clone()).unwrap();
|
tx_logger.send(logger.clone()).unwrap();
|
||||||
|
|
||||||
let handle = tokio::spawn(async move {
|
let handle = std::thread::spawn(move || {
|
||||||
let logger = rx_logger.await.unwrap();
|
let logger = rx_logger.recv().unwrap();
|
||||||
|
|
||||||
// write oci state to child
|
// write oci state to child
|
||||||
let env: HashMap<String, String> = envs
|
let env: HashMap<String, String> = envs
|
||||||
@ -1582,7 +1581,7 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
})
|
})
|
||||||
.collect();
|
.collect();
|
||||||
|
|
||||||
let mut child = tokio::process::Command::new(path.to_str().unwrap())
|
let mut child = std::process::Command::new(path.to_str().unwrap())
|
||||||
.args(args.iter())
|
.args(args.iter())
|
||||||
.envs(env.iter())
|
.envs(env.iter())
|
||||||
.stdin(Stdio::piped())
|
.stdin(Stdio::piped())
|
||||||
@ -1592,7 +1591,7 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
.unwrap();
|
.unwrap();
|
||||||
|
|
||||||
// send out our pid
|
// send out our pid
|
||||||
tx.send(child.id() as libc::pid_t).await.unwrap();
|
tx.send(child.id() as libc::pid_t).unwrap();
|
||||||
info!(logger, "hook grand: {}", child.id());
|
info!(logger, "hook grand: {}", child.id());
|
||||||
|
|
||||||
child
|
child
|
||||||
@ -1600,9 +1599,11 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
.as_mut()
|
.as_mut()
|
||||||
.unwrap()
|
.unwrap()
|
||||||
.write_all(state.as_bytes())
|
.write_all(state.as_bytes())
|
||||||
.await
|
|
||||||
.unwrap();
|
.unwrap();
|
||||||
|
|
||||||
|
// Close stdin so that hook program could receive EOF.
|
||||||
|
child.stdin.take();
|
||||||
|
|
||||||
// read something from stdout for debug
|
// read something from stdout for debug
|
||||||
let mut out = String::new();
|
let mut out = String::new();
|
||||||
child
|
child
|
||||||
@ -1610,10 +1611,9 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
.as_mut()
|
.as_mut()
|
||||||
.unwrap()
|
.unwrap()
|
||||||
.read_to_string(&mut out)
|
.read_to_string(&mut out)
|
||||||
.await
|
|
||||||
.unwrap();
|
.unwrap();
|
||||||
info!(logger, "child stdout: {}", out.as_str());
|
info!(logger, "child stdout: {}", out.as_str());
|
||||||
match child.await {
|
match child.wait() {
|
||||||
Ok(exit) => {
|
Ok(exit) => {
|
||||||
let code: i32 = if exit.success() {
|
let code: i32 = if exit.success() {
|
||||||
0
|
0
|
||||||
@ -1624,7 +1624,7 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
|
||||||
tx.send(code).await.unwrap();
|
tx.send(code).unwrap();
|
||||||
}
|
}
|
||||||
|
|
||||||
Err(e) => {
|
Err(e) => {
|
||||||
@ -1644,33 +1644,29 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
// -- FIXME
|
// -- FIXME
|
||||||
// just in case. Should not happen any more
|
// just in case. Should not happen any more
|
||||||
|
|
||||||
tx.send(0).await.unwrap();
|
tx.send(0).unwrap();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
});
|
});
|
||||||
|
|
||||||
let pid = rx.recv().await.unwrap();
|
let pid = rx.recv().unwrap();
|
||||||
info!(logger, "hook grand: {}", pid);
|
info!(logger, "hook grand: {}", pid);
|
||||||
|
|
||||||
let status = {
|
let status = {
|
||||||
if let Some(timeout) = h.timeout {
|
if let Some(timeout) = h.timeout {
|
||||||
let timeout = tokio::time::delay_for(Duration::from_secs(timeout as u64));
|
match rx.recv_timeout(Duration::from_secs(timeout as u64)) {
|
||||||
tokio::select! {
|
Ok(s) => s,
|
||||||
v = rx.recv() => {
|
Err(e) => {
|
||||||
match v {
|
let error = if e == RecvTimeoutError::Timeout {
|
||||||
Some(s) => s,
|
-libc::ETIMEDOUT
|
||||||
None => {
|
} else {
|
||||||
let _ = signal::kill(Pid::from_raw(pid), Some(Signal::SIGKILL));
|
-libc::EPIPE
|
||||||
-libc::EPIPE
|
};
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
_ = timeout => {
|
|
||||||
let _ = signal::kill(Pid::from_raw(pid), Some(Signal::SIGKILL));
|
let _ = signal::kill(Pid::from_raw(pid), Some(Signal::SIGKILL));
|
||||||
-libc::ETIMEDOUT
|
error
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
} else if let Some(s) = rx.recv().await {
|
} else if let Ok(s) = rx.recv() {
|
||||||
s
|
s
|
||||||
} else {
|
} else {
|
||||||
let _ = signal::kill(Pid::from_raw(pid), Some(Signal::SIGKILL));
|
let _ = signal::kill(Pid::from_raw(pid), Some(Signal::SIGKILL));
|
||||||
@ -1678,13 +1674,12 @@ async fn execute_hook(logger: &Logger, h: &Hook, st: &OCIState) -> Result<()> {
|
|||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
|
||||||
handle.await.unwrap();
|
handle.join().unwrap();
|
||||||
let _ = write_async(
|
let _ = write_sync(
|
||||||
&mut pipe_w,
|
wfd,
|
||||||
SYNC_DATA,
|
SYNC_DATA,
|
||||||
std::str::from_utf8(&status.to_be_bytes()).unwrap_or_default(),
|
std::str::from_utf8(&status.to_be_bytes()).unwrap_or_default(),
|
||||||
)
|
);
|
||||||
.await;
|
|
||||||
std::process::exit(0);
|
std::process::exit(0);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -1706,6 +1701,29 @@ mod tests {
|
|||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
|
#[tokio::test]
|
||||||
|
async fn test_execute_hook() {
|
||||||
|
execute_hook(
|
||||||
|
&slog_scope::logger(),
|
||||||
|
&Hook {
|
||||||
|
path: "/usr/bin/xargs".to_string(),
|
||||||
|
args: vec![],
|
||||||
|
env: vec![],
|
||||||
|
timeout: None,
|
||||||
|
},
|
||||||
|
&OCIState {
|
||||||
|
version: "1.2.3".to_string(),
|
||||||
|
id: "321".to_string(),
|
||||||
|
status: "".to_string(),
|
||||||
|
pid: 2,
|
||||||
|
bundle: "".to_string(),
|
||||||
|
annotations: Default::default(),
|
||||||
|
},
|
||||||
|
)
|
||||||
|
.await
|
||||||
|
.unwrap()
|
||||||
|
}
|
||||||
|
|
||||||
#[test]
|
#[test]
|
||||||
fn test_status_transtition() {
|
fn test_status_transtition() {
|
||||||
let mut status = ContainerStatus::new();
|
let mut status = ContainerStatus::new();
|
||||||
|
@ -253,7 +253,6 @@ mod tests {
|
|||||||
|
|
||||||
// -1 by default
|
// -1 by default
|
||||||
assert_eq!(process.pid, -1);
|
assert_eq!(process.pid, -1);
|
||||||
assert!(process.wait().is_err());
|
|
||||||
// signal to every process in the process
|
// signal to every process in the process
|
||||||
// group of the calling process.
|
// group of the calling process.
|
||||||
process.pid = 0;
|
process.pid = 0;
|
||||||
|
@ -17,7 +17,6 @@ extern crate protocols;
|
|||||||
extern crate regex;
|
extern crate regex;
|
||||||
extern crate scan_fmt;
|
extern crate scan_fmt;
|
||||||
extern crate serde_json;
|
extern crate serde_json;
|
||||||
extern crate signal_hook;
|
|
||||||
|
|
||||||
#[macro_use]
|
#[macro_use]
|
||||||
extern crate scopeguard;
|
extern crate scopeguard;
|
||||||
|
Loading…
Reference in New Issue
Block a user