2018-02-05 16:05:59 -05:00
|
|
|
package runconfig // import "github.com/docker/docker/runconfig"
|
2014-02-11 23:04:39 -05:00
|
|
|
|
|
|
|
import (
|
2015-04-10 20:05:21 -04:00
|
|
|
"encoding/json"
|
|
|
|
"io"
|
|
|
|
|
2016-09-06 14:18:12 -04:00
|
|
|
"github.com/docker/docker/api/types/container"
|
|
|
|
networktypes "github.com/docker/docker/api/types/network"
|
2016-06-07 15:05:43 -04:00
|
|
|
"github.com/docker/docker/pkg/sysinfo"
|
2014-02-11 23:04:39 -05:00
|
|
|
)
|
|
|
|
|
2016-03-28 14:22:23 -04:00
|
|
|
// ContainerDecoder implements httputils.ContainerDecoder
|
|
|
|
// calling DecodeContainerConfig.
|
2020-03-10 08:09:25 -04:00
|
|
|
type ContainerDecoder struct {
|
|
|
|
GetSysInfo func() *sysinfo.SysInfo
|
|
|
|
}
|
2016-03-28 14:22:23 -04:00
|
|
|
|
|
|
|
// DecodeConfig makes ContainerDecoder to implement httputils.ContainerDecoder
|
|
|
|
func (r ContainerDecoder) DecodeConfig(src io.Reader) (*container.Config, *container.HostConfig, *networktypes.NetworkingConfig, error) {
|
2020-03-10 08:09:25 -04:00
|
|
|
var si *sysinfo.SysInfo
|
|
|
|
if r.GetSysInfo != nil {
|
|
|
|
si = r.GetSysInfo()
|
|
|
|
} else {
|
|
|
|
si = sysinfo.New(true)
|
|
|
|
}
|
|
|
|
|
|
|
|
return decodeContainerConfig(src, si)
|
2016-03-28 14:22:23 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
// DecodeHostConfig makes ContainerDecoder to implement httputils.ContainerDecoder
|
|
|
|
func (r ContainerDecoder) DecodeHostConfig(src io.Reader) (*container.HostConfig, error) {
|
2017-08-29 14:32:59 -04:00
|
|
|
return decodeHostConfig(src)
|
2016-03-28 14:22:23 -04:00
|
|
|
}
|
|
|
|
|
2017-07-19 10:20:13 -04:00
|
|
|
// decodeContainerConfig decodes a json encoded config into a ContainerConfigWrapper
|
2016-04-05 08:53:04 -04:00
|
|
|
// struct and returns both a Config and a HostConfig struct
|
2015-06-06 12:41:42 -04:00
|
|
|
// Be aware this function is not checking whether the resulted structs are nil,
|
|
|
|
// it's your business to do so
|
2020-03-10 08:09:25 -04:00
|
|
|
func decodeContainerConfig(src io.Reader, si *sysinfo.SysInfo) (*container.Config, *container.HostConfig, *networktypes.NetworkingConfig, error) {
|
2015-04-10 20:05:21 -04:00
|
|
|
var w ContainerConfigWrapper
|
2015-09-09 22:23:06 -04:00
|
|
|
|
|
|
|
decoder := json.NewDecoder(src)
|
2015-04-10 20:05:21 -04:00
|
|
|
if err := decoder.Decode(&w); err != nil {
|
2016-01-07 19:18:34 -05:00
|
|
|
return nil, nil, nil, err
|
2014-02-11 23:04:39 -05:00
|
|
|
}
|
2015-04-10 20:05:21 -04:00
|
|
|
|
2015-07-09 18:12:36 -04:00
|
|
|
hc := w.getHostConfig()
|
|
|
|
|
2015-09-09 22:23:06 -04:00
|
|
|
// Perform platform-specific processing of Volumes and Binds.
|
|
|
|
if w.Config != nil && hc != nil {
|
|
|
|
|
2015-12-13 11:00:39 -05:00
|
|
|
// Initialize the volumes map if currently nil
|
2015-09-09 22:23:06 -04:00
|
|
|
if w.Config.Volumes == nil {
|
|
|
|
w.Config.Volumes = make(map[string]struct{})
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-07-09 18:12:36 -04:00
|
|
|
// Certain parameters need daemon-side validation that cannot be done
|
|
|
|
// on the client, as only the daemon knows what is valid for the platform.
|
2017-03-10 12:39:22 -05:00
|
|
|
if err := validateNetMode(w.Config, hc); err != nil {
|
2016-01-07 19:18:34 -05:00
|
|
|
return nil, nil, nil, err
|
2015-07-09 18:12:36 -04:00
|
|
|
}
|
|
|
|
|
2016-02-03 15:07:00 -05:00
|
|
|
// Validate isolation
|
2017-03-10 12:39:22 -05:00
|
|
|
if err := validateIsolation(hc); err != nil {
|
2016-01-07 19:18:34 -05:00
|
|
|
return nil, nil, nil, err
|
2015-09-18 21:21:57 -04:00
|
|
|
}
|
2016-02-24 20:51:46 -05:00
|
|
|
|
|
|
|
// Validate QoS
|
2017-03-10 12:39:22 -05:00
|
|
|
if err := validateQoS(hc); err != nil {
|
2016-02-24 20:51:46 -05:00
|
|
|
return nil, nil, nil, err
|
|
|
|
}
|
2016-06-07 15:15:50 -04:00
|
|
|
|
2016-06-07 15:05:43 -04:00
|
|
|
// Validate Resources
|
2020-03-10 08:09:25 -04:00
|
|
|
if err := validateResources(hc, si); err != nil {
|
2016-06-07 15:05:43 -04:00
|
|
|
return nil, nil, nil, err
|
|
|
|
}
|
2017-03-10 12:39:22 -05:00
|
|
|
|
|
|
|
// Validate Privileged
|
|
|
|
if err := validatePrivileged(hc); err != nil {
|
|
|
|
return nil, nil, nil, err
|
|
|
|
}
|
|
|
|
|
2017-05-08 12:29:37 -04:00
|
|
|
// Validate ReadonlyRootfs
|
|
|
|
if err := validateReadonlyRootfs(hc); err != nil {
|
|
|
|
return nil, nil, nil, err
|
|
|
|
}
|
|
|
|
|
2016-01-07 19:18:34 -05:00
|
|
|
return w.Config, hc, w.NetworkingConfig, nil
|
2014-02-11 23:04:39 -05:00
|
|
|
}
|