package main import ( "fmt" "os/exec" "github.com/docker/docker/integration-cli/checker" "github.com/go-check/check" "io/ioutil" "os" "path/filepath" "strings" ) var ( pluginProcessName = "sample-volume-plugin" pName = "tonistiigi/sample-volume-plugin" pTag = "latest" pNameWithTag = pName + ":" + pTag ) func (s *DockerSuite) TestPluginBasicOps(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) _, _, err := dockerCmdWithError("plugin", "install", "--grant-all-permissions", pNameWithTag) c.Assert(err, checker.IsNil) out, _, err := dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pName) c.Assert(out, checker.Contains, pTag) c.Assert(out, checker.Contains, "true") id, _, err := dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", pNameWithTag) id = strings.TrimSpace(id) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "remove", pNameWithTag) c.Assert(err, checker.NotNil) c.Assert(out, checker.Contains, "is enabled") _, _, err = dockerCmdWithError("plugin", "disable", pNameWithTag) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "remove", pNameWithTag) c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pNameWithTag) _, err = os.Stat(filepath.Join(dockerBasePath, "plugins", id)) if !os.IsNotExist(err) { c.Fatal(err) } } func (s *DockerSuite) TestPluginForceRemove(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) out, _, err := dockerCmdWithError("plugin", "install", "--grant-all-permissions", pNameWithTag) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "remove", pNameWithTag) c.Assert(out, checker.Contains, "is enabled") out, _, err = dockerCmdWithError("plugin", "remove", "--force", pNameWithTag) c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pNameWithTag) } func (s *DockerSuite) TestPluginActive(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) _, _, err := dockerCmdWithError("plugin", "install", "--grant-all-permissions", pNameWithTag) c.Assert(err, checker.IsNil) _, _, err = dockerCmdWithError("volume", "create", "-d", pNameWithTag, "--name", "testvol1") c.Assert(err, checker.IsNil) out, _, err := dockerCmdWithError("plugin", "disable", pNameWithTag) c.Assert(out, checker.Contains, "in use") _, _, err = dockerCmdWithError("volume", "rm", "testvol1") c.Assert(err, checker.IsNil) _, _, err = dockerCmdWithError("plugin", "disable", pNameWithTag) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "remove", pNameWithTag) c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pNameWithTag) } func (s *DockerSuite) TestPluginInstallDisable(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) out, _, err := dockerCmdWithError("plugin", "install", "--grant-all-permissions", "--disable", pName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, pName) out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, "false") out, _, err = dockerCmdWithError("plugin", "enable", pName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, pName) out, _, err = dockerCmdWithError("plugin", "disable", pName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, pName) out, _, err = dockerCmdWithError("plugin", "remove", pName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, pName) } func (s *DockerSuite) TestPluginInstallDisableVolumeLs(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) out, _, err := dockerCmdWithError("plugin", "install", "--grant-all-permissions", "--disable", pName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, pName) dockerCmd(c, "volume", "ls") } func (s *DockerSuite) TestPluginSet(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) out, _ := dockerCmd(c, "plugin", "install", "--grant-all-permissions", "--disable", pName) c.Assert(strings.TrimSpace(out), checker.Contains, pName) env, _ := dockerCmd(c, "plugin", "inspect", "-f", "{{.Settings.Env}}", pName) c.Assert(strings.TrimSpace(env), checker.Equals, "[DEBUG=0]") dockerCmd(c, "plugin", "set", pName, "DEBUG=1") env, _ = dockerCmd(c, "plugin", "inspect", "-f", "{{.Settings.Env}}", pName) c.Assert(strings.TrimSpace(env), checker.Equals, "[DEBUG=1]") } func (s *DockerSuite) TestPluginInstallArgs(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) out, _ := dockerCmd(c, "plugin", "install", "--grant-all-permissions", "--disable", pName, "DEBUG=1") c.Assert(strings.TrimSpace(out), checker.Contains, pName) env, _ := dockerCmd(c, "plugin", "inspect", "-f", "{{.Settings.Env}}", pName) c.Assert(strings.TrimSpace(env), checker.Equals, "[DEBUG=1]") } func (s *DockerRegistrySuite) TestPluginInstallImage(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64) repoName := fmt.Sprintf("%v/dockercli/busybox", privateRegistryURL) // tag the image to upload it to the private registry dockerCmd(c, "tag", "busybox", repoName) // push the image to the registry dockerCmd(c, "push", repoName) out, _, err := dockerCmdWithError("plugin", "install", repoName) c.Assert(err, checker.NotNil) c.Assert(out, checker.Contains, "target is image") } func (s *DockerSuite) TestPluginEnableDisableNegative(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) out, _, err := dockerCmdWithError("plugin", "install", "--grant-all-permissions", pName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, pName) out, _, err = dockerCmdWithError("plugin", "enable", pName) c.Assert(err, checker.NotNil) c.Assert(strings.TrimSpace(out), checker.Contains, "already enabled") _, _, err = dockerCmdWithError("plugin", "disable", pName) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "disable", pName) c.Assert(err, checker.NotNil) c.Assert(strings.TrimSpace(out), checker.Contains, "already disabled") _, _, err = dockerCmdWithError("plugin", "remove", pName) c.Assert(err, checker.IsNil) } func (s *DockerSuite) TestPluginCreate(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) name := "foo/bar-driver" temp, err := ioutil.TempDir("", "foo") c.Assert(err, checker.IsNil) defer os.RemoveAll(temp) data := `{"description": "foo plugin"}` err = ioutil.WriteFile(filepath.Join(temp, "config.json"), []byte(data), 0644) c.Assert(err, checker.IsNil) err = os.MkdirAll(filepath.Join(temp, "rootfs"), 0700) c.Assert(err, checker.IsNil) out, _, err := dockerCmdWithError("plugin", "create", name, temp) c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, name) out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, name) out, _, err = dockerCmdWithError("plugin", "create", name, temp) c.Assert(err, checker.NotNil) c.Assert(out, checker.Contains, "already exist") out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, name) // The output will consists of one HEADER line and one line of foo/bar-driver c.Assert(len(strings.Split(strings.TrimSpace(out), "\n")), checker.Equals, 2) } func (s *DockerSuite) TestPluginInspect(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) _, _, err := dockerCmdWithError("plugin", "install", "--grant-all-permissions", pNameWithTag) c.Assert(err, checker.IsNil) out, _, err := dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pName) c.Assert(out, checker.Contains, pTag) c.Assert(out, checker.Contains, "true") // Find the ID first out, _, err = dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", pNameWithTag) c.Assert(err, checker.IsNil) id := strings.TrimSpace(out) c.Assert(id, checker.Not(checker.Equals), "") // Long form out, _, err = dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", id) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Equals, id) // Short form out, _, err = dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", id[:5]) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Equals, id) // Name with tag form out, _, err = dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", pNameWithTag) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Equals, id) // Name without tag form out, _, err = dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", pName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Equals, id) _, _, err = dockerCmdWithError("plugin", "disable", pNameWithTag) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "remove", pNameWithTag) c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pNameWithTag) // After remove nothing should be found _, _, err = dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", id[:5]) c.Assert(err, checker.NotNil) } // Test case for https://github.com/docker/docker/pull/29186#discussion_r91277345 func (s *DockerSuite) TestPluginInspectOnWindows(c *check.C) { // This test should work on Windows only testRequires(c, DaemonIsWindows) out, _, err := dockerCmdWithError("plugin", "inspect", "foobar") c.Assert(err, checker.NotNil) c.Assert(out, checker.Contains, "plugins are not supported on this platform") c.Assert(err.Error(), checker.Contains, "plugins are not supported on this platform") } func (s *DockerTrustSuite) TestPluginTrustedInstall(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) trustedName := s.setupTrustedplugin(c, pNameWithTag, "trusted-plugin-install") installCmd := exec.Command(dockerBinary, "plugin", "install", "--grant-all-permissions", trustedName) s.trustedCmd(installCmd) out, _, err := runCommandWithOutput(installCmd) c.Assert(strings.TrimSpace(out), checker.Contains, trustedName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, trustedName) out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, "true") out, _, err = dockerCmdWithError("plugin", "disable", trustedName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, trustedName) out, _, err = dockerCmdWithError("plugin", "enable", trustedName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, trustedName) out, _, err = dockerCmdWithError("plugin", "rm", "-f", trustedName) c.Assert(err, checker.IsNil) c.Assert(strings.TrimSpace(out), checker.Contains, trustedName) // Try untrusted pull to ensure we pushed the tag to the registry installCmd = exec.Command(dockerBinary, "plugin", "install", "--disable-content-trust=true", "--grant-all-permissions", trustedName) s.trustedCmd(installCmd) out, _, err = runCommandWithOutput(installCmd) c.Assert(err, check.IsNil, check.Commentf(out)) c.Assert(string(out), checker.Contains, "Status: Downloaded", check.Commentf(out)) out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, "true") } func (s *DockerTrustSuite) TestPluginUntrustedInstall(c *check.C) { testRequires(c, DaemonIsLinux, IsAmd64, Network) pluginName := fmt.Sprintf("%v/dockercliuntrusted/plugintest:latest", privateRegistryURL) // install locally and push to private registry dockerCmd(c, "plugin", "install", "--grant-all-permissions", "--alias", pluginName, pNameWithTag) dockerCmd(c, "plugin", "push", pluginName) dockerCmd(c, "plugin", "rm", "-f", pluginName) // Try trusted install on untrusted plugin installCmd := exec.Command(dockerBinary, "plugin", "install", "--grant-all-permissions", pluginName) s.trustedCmd(installCmd) out, _, err := runCommandWithOutput(installCmd) c.Assert(err, check.NotNil, check.Commentf(out)) c.Assert(string(out), checker.Contains, "Error: remote trust data does not exist", check.Commentf(out)) } func (s *DockerSuite) TestPluginIDPrefix(c *check.C) { testRequires(c, DaemonIsLinux, Network) _, _, err := dockerCmdWithError("plugin", "install", "--disable", "--grant-all-permissions", pNameWithTag) c.Assert(err, checker.IsNil) // Find ID first id, _, err := dockerCmdWithError("plugin", "inspect", "-f", "{{.Id}}", pNameWithTag) id = strings.TrimSpace(id) c.Assert(err, checker.IsNil) // List current state out, _, err := dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pName) c.Assert(out, checker.Contains, pTag) c.Assert(out, checker.Contains, "false") env, _ := dockerCmd(c, "plugin", "inspect", "-f", "{{.Settings.Env}}", id[:5]) c.Assert(strings.TrimSpace(env), checker.Equals, "[DEBUG=0]") dockerCmd(c, "plugin", "set", id[:5], "DEBUG=1") env, _ = dockerCmd(c, "plugin", "inspect", "-f", "{{.Settings.Env}}", id[:5]) c.Assert(strings.TrimSpace(env), checker.Equals, "[DEBUG=1]") // Enable _, _, err = dockerCmdWithError("plugin", "enable", id[:5]) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pName) c.Assert(out, checker.Contains, pTag) c.Assert(out, checker.Contains, "true") // Disable _, _, err = dockerCmdWithError("plugin", "disable", id[:5]) c.Assert(err, checker.IsNil) out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Contains, pName) c.Assert(out, checker.Contains, pTag) c.Assert(out, checker.Contains, "false") // Remove out, _, err = dockerCmdWithError("plugin", "remove", id[:5]) c.Assert(err, checker.IsNil) // List returns none out, _, err = dockerCmdWithError("plugin", "ls") c.Assert(err, checker.IsNil) c.Assert(out, checker.Not(checker.Contains), pName) c.Assert(out, checker.Not(checker.Contains), pTag) }