package docker import ( "bytes" "encoding/json" "fmt" "github.com/dotcloud/docker/auth" "io" "io/ioutil" "net/http" "os" "path" "strings" ) //FIXME: Set the endpoint in a conf file or via commandline //const INDEX_ENDPOINT = "http://registry-creack.dotcloud.com/v1" const INDEX_ENDPOINT = auth.INDEX_SERVER + "/v1" // Build an Image object from raw json data func NewImgJson(src []byte) (*Image, error) { ret := &Image{} Debugf("Json string: {%s}\n", src) // FIXME: Is there a cleaner way to "purify" the input json? if err := json.Unmarshal(src, ret); err != nil { return nil, err } return ret, nil } // Build an Image object list from a raw json data // FIXME: Do this in "stream" mode func NewMultipleImgJson(src []byte) ([]*Image, error) { ret := []*Image{} dec := json.NewDecoder(strings.NewReader(string(src))) for { m := &Image{} if err := dec.Decode(m); err == io.EOF { break } else if err != nil { return nil, err } ret = append(ret, m) } return ret, nil } // Retrieve the history of a given image from the Registry. // Return a list of the parent's json (requested image included) func (graph *Graph) getRemoteHistory(imgId, registry string, token []string) ([]*Image, error) { client := graph.getHttpClient() req, err := http.NewRequest("GET", registry+"/images/"+imgId+"/ancestry", nil) if err != nil { return nil, err } req.Header["X-Docker-Token"] = token // req.SetBasicAuth(authConfig.Username, authConfig.Password) res, err := client.Do(req) if err != nil || res.StatusCode != 200 { if res != nil { return nil, fmt.Errorf("Internal server error: %d trying to fetch remote history for %s", res.StatusCode, imgId) } return nil, err } defer res.Body.Close() jsonString, err := ioutil.ReadAll(res.Body) if err != nil { return nil, fmt.Errorf("Error while reading the http response: %s\n", err) } history, err := NewMultipleImgJson(jsonString) if err != nil { return nil, fmt.Errorf("Error while parsing the json: %s\n", err) } return history, nil } func (graph *Graph) getHttpClient() *http.Client { if graph.httpClient == nil { graph.httpClient = new(http.Client) } return graph.httpClient } // Check if an image exists in the Registry func (graph *Graph) LookupRemoteImage(imgId, registry string, authConfig *auth.AuthConfig) bool { rt := &http.Transport{Proxy: http.ProxyFromEnvironment} req, err := http.NewRequest("GET", registry+"/images/"+imgId+"/json", nil) if err != nil { return false } req.SetBasicAuth(authConfig.Username, authConfig.Password) res, err := rt.RoundTrip(req) return err == nil && res.StatusCode == 307 } // Retrieve an image from the Registry. // Returns the Image object as well as the layer as an Archive (io.Reader) func (graph *Graph) getRemoteImage(stdout io.Writer, imgId, registry string, token []string) (*Image, Archive, error) { client := graph.getHttpClient() fmt.Fprintf(stdout, "Pulling %s metadata\r\n", imgId) // Get the Json req, err := http.NewRequest("GET", registry+"/images/"+imgId+"/json", nil) if err != nil { return nil, nil, fmt.Errorf("Failed to download json: %s", err) } req.Header["X-Docker-Token"] = token // req.SetBasicAuth(authConfig.Username, authConfig.Password) res, err := client.Do(req) if err != nil { return nil, nil, fmt.Errorf("Failed to download json: %s", err) } if res.StatusCode != 200 { return nil, nil, fmt.Errorf("HTTP code %d", res.StatusCode) } defer res.Body.Close() jsonString, err := ioutil.ReadAll(res.Body) if err != nil { return nil, nil, fmt.Errorf("Failed to download json: %s", err) } img, err := NewImgJson(jsonString) if err != nil { return nil, nil, fmt.Errorf("Failed to parse json: %s", err) } img.Id = imgId // Get the layer fmt.Fprintf(stdout, "Pulling %s fs layer\r\n", imgId) req, err = http.NewRequest("GET", registry+"/images/"+imgId+"/layer", nil) if err != nil { return nil, nil, fmt.Errorf("Error while getting from the server: %s\n", err) } req.Header["X-Docker-Token"] = token // req.SetBasicAuth(authConfig.Username, authConfig.Password) res, err = client.Do(req) if err != nil { return nil, nil, err } return img, ProgressReader(res.Body, int(res.ContentLength), stdout, "Downloading %v/%v (%v)"), nil } func (graph *Graph) getRemoteTags(stdout io.Writer, registries []string, repository string, token []string) (map[string]string, error) { client := graph.getHttpClient() for _, host := range registries { endpoint := "https://" + host + "/v1/repositories/" + repository + "/tags" req, err := http.NewRequest("GET", endpoint, nil) if err != nil { return nil, err } req.Header["X-Docker-Token"] = token res, err := client.Do(req) defer res.Body.Close() if err != nil || (res.StatusCode != 200 && res.StatusCode != 404) { Debugf("Registry isn't responding: trying another registry endpoint") continue } else if res.StatusCode == 404 { return nil, fmt.Errorf("Repository not found") } var result *map[string]string rawJson, err := ioutil.ReadAll(res.Body) if err != nil { return nil, err } if err = json.Unmarshal(rawJson, result); err != nil { return nil, err } return *result, nil } return nil, fmt.Errorf("Could not reach any registry endpoint") } func (graph *Graph) getImageForTag(stdout io.Writer, tag, remote, registry string, token []string) (string, error) { client := graph.getHttpClient() registryEndpoint := "https://" + registry + "/v1" repositoryTarget := registryEndpoint + "/repositories/" + remote + "/tags/" + tag req, err := http.NewRequest("GET", repositoryTarget, nil) if err != nil { return "", err } req.Header["X-Docker-Token"] = token res, err := client.Do(req) if err != nil { return "", fmt.Errorf("Error while retrieving repository info: %v", err) } defer res.Body.Close() if res.StatusCode == 403 { return "", fmt.Errorf("You aren't authorized to access this resource") } else if res.StatusCode != 200 { return "", fmt.Errorf("HTTP code: %d", res.StatusCode) } var imgId string rawJson, err := ioutil.ReadAll(res.Body) if err != nil { return "", err } if err = json.Unmarshal(rawJson, &imgId); err != nil { return "", err } return imgId, nil } func (graph *Graph) PullImage(stdout io.Writer, imgId, registry string, token []string) error { history, err := graph.getRemoteHistory(imgId, registry, token) if err != nil { return err } // FIXME: Try to stream the images? // FIXME: Launch the getRemoteImage() in goroutines for _, j := range history { if !graph.Exists(j.Id) { img, layer, err := graph.getRemoteImage(stdout, j.Id, registry, token) if err != nil { // FIXME: Keep goging in case of error? return err } if err = graph.Register(layer, img); err != nil { return err } } } return nil } func (graph *Graph) PullRepository(stdout io.Writer, remote, askedTag string, repositories *TagStore, authConfig *auth.AuthConfig) error { client := graph.getHttpClient() fmt.Fprintf(stdout, "Pulling repository %s\r\n", remote) repositoryTarget := INDEX_ENDPOINT + "/repositories/" + remote + "/checksums" req, err := http.NewRequest("GET", repositoryTarget, nil) if err != nil { return err } if authConfig != nil { req.SetBasicAuth(authConfig.Username, authConfig.Password) } res, err := client.Do(req) if err != nil { return err } defer res.Body.Close() // TODO: Right now we're ignoring checksums in the response body. // In the future, we need to use them to check image validity. if res.StatusCode != 200 { return fmt.Errorf("HTTP code: %d", res.StatusCode) } var token, endpoints []string if res.Header.Get("X-Docker-Token") != "" { token = res.Header["X-Docker-Token"] } if res.Header.Get("X-Docker-Endpoints") != "" { endpoints = res.Header["X-Docker-Endpoints"] } else { return fmt.Errorf("Index response didn't contain any endpoints") } // FIXME: If askedTag is empty, fetch all tags. var tagsList map[string]string if askedTag == "" { tagsList, err = graph.getRemoteTags(stdout, endpoints, remote, token) if err != nil { return err } } else { tagsList = map[string]string{askedTag: ""} } for askedTag, imgId := range tagsList { success := false for _, registry := range endpoints { if imgId == "" { imgId, err = graph.getImageForTag(stdout, askedTag, remote, registry, token) if err != nil { fmt.Fprintf(stdout, "Error while retrieving image for tag: %v (%v) ; "+ "checking next endpoint", askedTag, err) continue } } if err := graph.PullImage(stdout, imgId, "https://"+registry+"/v1", token); err != nil { return err } if err = repositories.Set(remote, askedTag, imgId, true); err != nil { return err } success = true } if !success { return fmt.Errorf("Could not find repository on any of the indexed registries.") } } if err = repositories.Save(); err != nil { return err } return nil } // Push a local image to the registry with its history if needed func (graph *Graph) PushImage(stdout io.Writer, imgOrig *Image, registry string, token []string) error { client := graph.getHttpClient() registry = "https://" + registry + "/v1" // FIXME: Factorize the code // FIXME: Do the puts in goroutines if err := imgOrig.WalkHistory(func(img *Image) error { jsonRaw, err := ioutil.ReadFile(path.Join(graph.Root, img.Id, "json")) if err != nil { return fmt.Errorf("Error while retreiving the path for {%s}: %s", img.Id, err) } fmt.Fprintf(stdout, "Pushing %s metadata\r\n", img.Id) // FIXME: try json with UTF8 jsonData := strings.NewReader(string(jsonRaw)) req, err := http.NewRequest("PUT", registry+"/images/"+img.Id+"/json", jsonData) if err != nil { return err } req.Header.Add("Content-type", "application/json") req.Header["X-Docker-Token"] = token res, err := client.Do(req) if err != nil { return fmt.Errorf("Failed to upload metadata: %s", err) } defer res.Body.Close() if res.StatusCode != 200 { switch res.StatusCode { case 204: // Case where the image is already on the Registry fmt.Fprintf(stdout, "Image %s already uploaded ; skipping.", img.Id) return nil default: errBody, err := ioutil.ReadAll(res.Body) if err != nil { errBody = []byte(err.Error()) } return fmt.Errorf("HTTP code %d while uploading metadata: %s", res.StatusCode, errBody) } } fmt.Fprintf(stdout, "Pushing %s fs layer\r\n", img.Id) layerData2, err := Tar(path.Join(graph.Root, img.Id, "layer"), Xz) tmp, err := ioutil.ReadAll(layerData2) if err != nil { return err } layerLength := len(tmp) layerData, err := Tar(path.Join(graph.Root, img.Id, "layer"), Xz) if err != nil { return fmt.Errorf("Failed to generate layer archive: %s", err) } req3, err := http.NewRequest("PUT", registry+"/images/"+img.Id+"/layer", ProgressReader(layerData.(io.ReadCloser), layerLength, stdout)) if err != nil { return err } req3.ContentLength = int64(tmpLayer.Size) req3.TransferEncoding = []string{"none"} req3.Header["X-Docker-Token"] = token res3, err := client.Do(req3) if err != nil { return fmt.Errorf("Failed to upload layer: %s", err) } res3.Body.Close() if res3.StatusCode != 200 { return fmt.Errorf("Received HTTP code %d while uploading layer", res3.StatusCode) } return nil }); err != nil { return err } return nil } // push a tag on the registry. // Remote has the format '/ func (graph *Graph) pushTag(remote, revision, tag, registry string, token []string) error { // Keep this for backward compatibility if tag == "" { tag = "lastest" } // "jsonify" the string revision = "\"" + revision + "\"" registry = "https://" + registry + "/v1" Debugf("Pushing tags for rev [%s] on {%s}\n", revision, registry+"/users/"+remote+"/"+tag) client := graph.getHttpClient() req, err := http.NewRequest("PUT", registry+"/repositories/"+remote+"/tags/"+tag, strings.NewReader(revision)) req.Header.Add("Content-type", "application/json") req.Header["X-Docker-Token"] = token res, err := client.Do(req) if err != nil { return err } res.Body.Close() if res.StatusCode != 200 && res.StatusCode != 201 { return fmt.Errorf("Internal server error: %d trying to push tag %s on %s", res.StatusCode, tag, remote) } return nil } // FIXME: this should really be PushTag func (graph *Graph) pushPrimitive(stdout io.Writer, remote, tag, imgId, registry string, token []string) error { // Check if the local impage exists img, err := graph.Get(imgId) if err != nil { fmt.Fprintf(stdout, "Skipping tag %s:%s: %s does not exist\r\n", remote, tag, imgId) return nil } fmt.Fprintf(stdout, "Pushing image %s:%s\r\n", remote, tag) // Push the image if err = graph.PushImage(stdout, img, registry, token); err != nil { return err } fmt.Fprintf(stdout, "Registering tag %s:%s\r\n", remote, tag) // And then the tag if err = graph.pushTag(remote, imgId, registry, tag, token); err != nil { return err } return nil } // Push a repository to the registry. // Remote has the format '/ func (graph *Graph) PushRepository(stdout io.Writer, remote string, localRepo Repository, authConfig *auth.AuthConfig) error { client := graph.getHttpClient() checksums, err := graph.Checksums(localRepo) if err != nil { return err } req, err := http.NewRequest("PUT", INDEX_ENDPOINT+"/repositories/"+remote, nil) if err != nil { return err } req.SetBasicAuth(authConfig.Username, authConfig.Password) res, err := client.Do(req) if err != nil { return err } res.Body.Close() if res.StatusCode != 200 && res.StatusCode != 201 { return fmt.Errorf("Error: Status %d trying to push repository %s", res.StatusCode, remote) } var token, endpoints []string if res.Header.Get("X-Docker-Token") != "" { token = res.Header["X-Docker-Token"] } else { return fmt.Errorf("Index response didn't contain an access token") } if res.Header.Get("X-Docker-Endpoints") != "" { endpoints = res.Header["X-Docker-Endpoints"] } else { return fmt.Errorf("Index response didn't contain any endpoints") } for _, registry := range endpoints { fmt.Fprintf(stdout, "Pushing repository %s to %s (%d tags)\r\n", remote, registry, len(localRepo)) // For each image within the repo, push them for tag, imgId := range localRepo { if err := graph.pushPrimitive(stdout, remote, tag, imgId, registry, token); err != nil { // FIXME: Continue on error? return err } } } checksumsJson, err := json.Marshal(checksums) if err != nil { return err } req2, err := http.NewRequest("PUT", INDEX_ENDPOINT+"/repositories/"+remote+"/images", bytes.NewBuffer(checksumsJson)) if err != nil { return err } req2.SetBasicAuth(authConfig.Username, authConfig.Password) req2.Header["X-Docker-Endpoints"] = endpoints res2, err := client.Do(req) if err != nil { return err } res2.Body.Close() if res2.StatusCode != 204 { return fmt.Errorf("Error: Status %d trying to push checksums %s", res.StatusCode, remote) } return nil }