mirror of
https://github.com/containers/skopeo.git
synced 2025-09-22 18:37:21 +00:00
This requires re-vendoring a bunch of other things (as well as the old Sirupsen/logrus path), the relevant commits being: * github.com/xeipuuv/gojsonschema@0c8571ac0ce161a5feb57375a9cdf148c98c0f70 * github.com/xeipuuv/gojsonpointer@6fe8760cad3569743d51ddbb243b26f8456742dc * github.com/xeipuuv/gojsonreference@e02fc20de94c78484cd5ffb007f8af96be030a45 * go4.org@034d17a462f7b2dcd1a4a73553ec5357ff6e6c6e Signed-off-by: Aleksa Sarai <asarai@suse.de>
127 lines
3.2 KiB
Go
127 lines
3.2 KiB
Go
// Copyright 2016 The Linux Foundation
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package image
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"fmt"
|
|
"io"
|
|
"io/ioutil"
|
|
"os"
|
|
"path/filepath"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"github.com/opencontainers/image-spec/schema"
|
|
"github.com/opencontainers/image-spec/specs-go/v1"
|
|
"github.com/opencontainers/runtime-spec/specs-go"
|
|
"github.com/pkg/errors"
|
|
)
|
|
|
|
type config v1.Image
|
|
|
|
func findConfig(w walker, d *v1.Descriptor) (*config, error) {
|
|
var c config
|
|
cpath := filepath.Join("blobs", string(d.Digest.Algorithm()), d.Digest.Hex())
|
|
|
|
switch err := w.walk(func(path string, info os.FileInfo, r io.Reader) error {
|
|
if info.IsDir() || filepath.Clean(path) != cpath {
|
|
return nil
|
|
}
|
|
buf, err := ioutil.ReadAll(r)
|
|
if err != nil {
|
|
return errors.Wrapf(err, "%s: error reading config", path)
|
|
}
|
|
|
|
if err := schema.ValidatorMediaTypeImageConfig.Validate(bytes.NewReader(buf)); err != nil {
|
|
return errors.Wrapf(err, "%s: config validation failed", path)
|
|
}
|
|
|
|
if err := json.Unmarshal(buf, &c); err != nil {
|
|
return err
|
|
}
|
|
|
|
return errEOW
|
|
}); err {
|
|
case nil:
|
|
return nil, fmt.Errorf("%s: config not found", cpath)
|
|
case errEOW:
|
|
return &c, nil
|
|
default:
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
func (c *config) runtimeSpec(rootfs string) (*specs.Spec, error) {
|
|
if c.OS != "linux" {
|
|
return nil, fmt.Errorf("%s: unsupported OS", c.OS)
|
|
}
|
|
|
|
var s specs.Spec
|
|
s.Version = specs.Version
|
|
// we should at least apply the default spec, otherwise this is totally useless
|
|
s.Root = &specs.Root{}
|
|
s.Root.Path = rootfs
|
|
|
|
s.Process = &specs.Process{}
|
|
s.Process.Terminal = true
|
|
s.Process.Cwd = "/"
|
|
if c.Config.WorkingDir != "" {
|
|
s.Process.Cwd = c.Config.WorkingDir
|
|
}
|
|
s.Process.Env = append(s.Process.Env, c.Config.Env...)
|
|
s.Process.Args = append(s.Process.Args, c.Config.Entrypoint...)
|
|
s.Process.Args = append(s.Process.Args, c.Config.Cmd...)
|
|
|
|
if len(s.Process.Args) == 0 {
|
|
s.Process.Args = append(s.Process.Args, "sh")
|
|
}
|
|
|
|
if uid, err := strconv.Atoi(c.Config.User); err == nil {
|
|
s.Process.User.UID = uint32(uid)
|
|
} else if ug := strings.Split(c.Config.User, ":"); len(ug) == 2 {
|
|
uid, err := strconv.Atoi(ug[0])
|
|
if err != nil {
|
|
return nil, errors.New("config.User: unsupported uid format")
|
|
}
|
|
|
|
gid, err := strconv.Atoi(ug[1])
|
|
if err != nil {
|
|
return nil, errors.New("config.User: unsupported gid format")
|
|
}
|
|
|
|
s.Process.User.UID = uint32(uid)
|
|
s.Process.User.GID = uint32(gid)
|
|
} else if c.Config.User != "" {
|
|
return nil, errors.New("config.User: unsupported format")
|
|
}
|
|
|
|
s.Linux = &specs.Linux{}
|
|
|
|
for vol := range c.Config.Volumes {
|
|
s.Mounts = append(
|
|
s.Mounts,
|
|
specs.Mount{
|
|
Destination: vol,
|
|
Type: "bind",
|
|
Options: []string{"rbind"},
|
|
},
|
|
)
|
|
}
|
|
|
|
return &s, nil
|
|
}
|