112 lines
3.2 KiB
Go
112 lines
3.2 KiB
Go
![]() |
package graph
|
||
|
|
||
|
import (
|
||
|
"errors"
|
||
|
"net"
|
||
|
"net/http"
|
||
|
"net/url"
|
||
|
"time"
|
||
|
|
||
|
"github.com/Sirupsen/logrus"
|
||
|
"github.com/docker/distribution"
|
||
|
"github.com/docker/distribution/digest"
|
||
|
"github.com/docker/distribution/manifest"
|
||
|
"github.com/docker/distribution/registry/client"
|
||
|
"github.com/docker/distribution/registry/client/auth"
|
||
|
"github.com/docker/distribution/registry/client/transport"
|
||
|
"github.com/docker/docker/cliconfig"
|
||
|
"github.com/docker/docker/registry"
|
||
|
"golang.org/x/net/context"
|
||
|
)
|
||
|
|
||
|
type dumbCredentialStore struct {
|
||
|
auth *cliconfig.AuthConfig
|
||
|
}
|
||
|
|
||
|
func (dcs dumbCredentialStore) Basic(*url.URL) (string, string) {
|
||
|
return dcs.auth.Username, dcs.auth.Password
|
||
|
}
|
||
|
|
||
|
// v2 only
|
||
|
func NewV2Repository(repoInfo *registry.RepositoryInfo, endpoint registry.APIEndpoint, metaHeaders http.Header, authConfig *cliconfig.AuthConfig) (distribution.Repository, error) {
|
||
|
ctx := context.Background()
|
||
|
|
||
|
repoName := repoInfo.CanonicalName
|
||
|
// If endpoint does not support CanonicalName, use the RemoteName instead
|
||
|
if endpoint.TrimHostname {
|
||
|
repoName = repoInfo.RemoteName
|
||
|
}
|
||
|
|
||
|
// TODO(dmcgowan): Call close idle connections when complete, use keep alive
|
||
|
base := &http.Transport{
|
||
|
Proxy: http.ProxyFromEnvironment,
|
||
|
Dial: (&net.Dialer{
|
||
|
Timeout: 30 * time.Second,
|
||
|
KeepAlive: 30 * time.Second,
|
||
|
DualStack: true,
|
||
|
}).Dial,
|
||
|
TLSHandshakeTimeout: 10 * time.Second,
|
||
|
TLSClientConfig: endpoint.TLSConfig,
|
||
|
// TODO(dmcgowan): Call close idle connections when complete and use keep alive
|
||
|
DisableKeepAlives: true,
|
||
|
}
|
||
|
|
||
|
modifiers := registry.DockerHeaders(metaHeaders)
|
||
|
authTransport := transport.NewTransport(base, modifiers...)
|
||
|
pingClient := &http.Client{
|
||
|
Transport: authTransport,
|
||
|
Timeout: 5 * time.Second,
|
||
|
}
|
||
|
endpointStr := endpoint.URL + "/v2/"
|
||
|
req, err := http.NewRequest("GET", endpointStr, nil)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
resp, err := pingClient.Do(req)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
defer resp.Body.Close()
|
||
|
|
||
|
versions := auth.APIVersions(resp, endpoint.VersionHeader)
|
||
|
if endpoint.VersionHeader != "" && len(endpoint.Versions) > 0 {
|
||
|
var foundVersion bool
|
||
|
for _, version := range endpoint.Versions {
|
||
|
for _, pingVersion := range versions {
|
||
|
if version == pingVersion {
|
||
|
foundVersion = true
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
if !foundVersion {
|
||
|
return nil, errors.New("endpoint does not support v2 API")
|
||
|
}
|
||
|
}
|
||
|
|
||
|
challengeManager := auth.NewSimpleChallengeManager()
|
||
|
if err := challengeManager.AddResponse(resp); err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
|
||
|
creds := dumbCredentialStore{auth: authConfig}
|
||
|
tokenHandler := auth.NewTokenHandler(authTransport, creds, repoName, "push", "pull")
|
||
|
basicHandler := auth.NewBasicHandler(creds)
|
||
|
modifiers = append(modifiers, auth.NewAuthorizer(challengeManager, tokenHandler, basicHandler))
|
||
|
tr := transport.NewTransport(base, modifiers...)
|
||
|
|
||
|
return client.NewRepository(ctx, repoName, endpoint.URL, tr)
|
||
|
}
|
||
|
|
||
|
func digestFromManifest(m *manifest.SignedManifest, localName string) (digest.Digest, error) {
|
||
|
payload, err := m.Payload()
|
||
|
if err != nil {
|
||
|
logrus.Debugf("could not retrieve manifest payload: %v", err)
|
||
|
return "", err
|
||
|
}
|
||
|
manifestDigest, err := digest.FromBytes(payload)
|
||
|
if err != nil {
|
||
|
logrus.Infof("Could not compute manifest digest for %s:%s : %v", localName, m.Tag, err)
|
||
|
}
|
||
|
return manifestDigest, nil
|
||
|
}
|