2018-11-14 11:20:35 +00:00
|
|
|
package docker
|
|
|
|
|
|
|
|
|
|
import (
|
2018-11-20 03:41:14 +00:00
|
|
|
"fmt"
|
2018-11-14 11:20:35 +00:00
|
|
|
"strconv"
|
|
|
|
|
"strings"
|
|
|
|
|
"time"
|
|
|
|
|
|
|
|
|
|
hclog "github.com/hashicorp/go-hclog"
|
|
|
|
|
"github.com/hashicorp/nomad/client/structs"
|
|
|
|
|
"github.com/hashicorp/nomad/plugins/base"
|
|
|
|
|
"github.com/hashicorp/nomad/plugins/drivers"
|
|
|
|
|
"github.com/hashicorp/nomad/plugins/shared/hclspec"
|
|
|
|
|
"github.com/hashicorp/nomad/plugins/shared/loader"
|
|
|
|
|
)
|
|
|
|
|
|
2018-11-16 18:52:54 +00:00
|
|
|
const (
|
|
|
|
|
// NoSuchContainerError is returned by the docker daemon if the container
|
|
|
|
|
// does not exist.
|
|
|
|
|
NoSuchContainerError = "No such container"
|
|
|
|
|
|
|
|
|
|
// pluginName is the name of the plugin
|
|
|
|
|
pluginName = "docker"
|
|
|
|
|
|
|
|
|
|
// fingerprintPeriod is the interval at which the driver will send fingerprint responses
|
|
|
|
|
fingerprintPeriod = 30 * time.Second
|
|
|
|
|
|
|
|
|
|
// dockerTimeout is the length of time a request can be outstanding before
|
|
|
|
|
// it is timed out.
|
|
|
|
|
dockerTimeout = 5 * time.Minute
|
|
|
|
|
|
|
|
|
|
// dockerBasicCaps is comma-separated list of Linux capabilities that are
|
|
|
|
|
// allowed by docker by default, as documented in
|
|
|
|
|
// https://docs.docker.com/engine/reference/run/#block-io-bandwidth-blkio-constraint
|
|
|
|
|
dockerBasicCaps = "CHOWN,DAC_OVERRIDE,FSETID,FOWNER,MKNOD,NET_RAW,SETGID," +
|
|
|
|
|
"SETUID,SETFCAP,SETPCAP,NET_BIND_SERVICE,SYS_CHROOT,KILL,AUDIT_WRITE"
|
|
|
|
|
|
|
|
|
|
// dockerAuthHelperPrefix is the prefix to attach to the credential helper
|
|
|
|
|
// and should be found in the $PATH. Example: ${prefix-}${helper-name}
|
|
|
|
|
dockerAuthHelperPrefix = "docker-credential-"
|
|
|
|
|
)
|
|
|
|
|
|
2018-11-14 11:20:35 +00:00
|
|
|
func PluginLoader(opts map[string]string) (map[string]interface{}, error) {
|
|
|
|
|
conf := map[string]interface{}{}
|
|
|
|
|
if v, ok := opts["docker.endpoint"]; ok {
|
|
|
|
|
conf["endpoint"] = v
|
|
|
|
|
}
|
2018-11-20 02:07:30 +00:00
|
|
|
|
|
|
|
|
// dockerd auth
|
|
|
|
|
authConf := map[string]interface{}{}
|
2018-11-14 11:20:35 +00:00
|
|
|
if v, ok := opts["docker.auth.config"]; ok {
|
2018-11-20 02:32:08 +00:00
|
|
|
authConf["config"] = v
|
2018-11-14 11:20:35 +00:00
|
|
|
}
|
|
|
|
|
if v, ok := opts["docker.auth.helper"]; ok {
|
2018-11-20 02:32:08 +00:00
|
|
|
authConf["helper"] = v
|
2018-11-14 11:20:35 +00:00
|
|
|
}
|
2018-11-20 02:07:30 +00:00
|
|
|
conf["auth"] = authConf
|
|
|
|
|
|
|
|
|
|
// dockerd tls
|
2018-11-14 11:20:35 +00:00
|
|
|
if _, ok := opts["docker.tls.cert"]; ok {
|
|
|
|
|
conf["tls"] = map[string]interface{}{
|
|
|
|
|
"cert": opts["docker.tls.cert"],
|
|
|
|
|
"key": opts["docker.tls.key"],
|
|
|
|
|
"ca": opts["docker.tls.ca"],
|
|
|
|
|
}
|
|
|
|
|
}
|
2018-11-20 02:07:30 +00:00
|
|
|
|
|
|
|
|
// garbage collection
|
|
|
|
|
gcConf := map[string]interface{}{}
|
|
|
|
|
if v, err := strconv.ParseBool(opts["docker.cleanup.image"]); err == nil {
|
|
|
|
|
gcConf["image"] = v
|
|
|
|
|
}
|
2018-11-14 11:20:35 +00:00
|
|
|
if v, ok := opts["docker.cleanup.image.delay"]; ok {
|
2018-11-20 02:07:30 +00:00
|
|
|
gcConf["image_delay"] = v
|
|
|
|
|
}
|
|
|
|
|
if v, err := strconv.ParseBool(opts["docker.cleanup.container"]); err == nil {
|
|
|
|
|
gcConf["container"] = v
|
|
|
|
|
}
|
|
|
|
|
conf["gc"] = gcConf
|
|
|
|
|
|
|
|
|
|
// volume options
|
2018-11-20 02:32:08 +00:00
|
|
|
volConf := map[string]interface{}{}
|
2018-11-20 02:07:30 +00:00
|
|
|
if v, err := strconv.ParseBool(opts["docker.volumes.enabled"]); err == nil {
|
2018-11-20 02:32:08 +00:00
|
|
|
volConf["enabled"] = v
|
2018-11-14 11:20:35 +00:00
|
|
|
}
|
|
|
|
|
if v, ok := opts["docker.volumes.selinuxlabel"]; ok {
|
2018-11-20 02:32:08 +00:00
|
|
|
volConf["selinuxlabel"] = v
|
2018-11-14 11:20:35 +00:00
|
|
|
}
|
2018-11-20 02:32:08 +00:00
|
|
|
conf["volumes"] = volConf
|
2018-11-20 02:07:30 +00:00
|
|
|
|
|
|
|
|
// capabilities
|
2018-11-14 11:20:35 +00:00
|
|
|
if v, ok := opts["docker.caps.whitelist"]; ok {
|
|
|
|
|
conf["allow_caps"] = strings.Split(v, ",")
|
|
|
|
|
}
|
2018-11-20 02:07:30 +00:00
|
|
|
|
|
|
|
|
// privileged containers
|
2018-11-14 11:20:35 +00:00
|
|
|
if v, err := strconv.ParseBool(opts["docker.privileged.enabled"]); err == nil {
|
|
|
|
|
conf["allow_privileged"] = v
|
|
|
|
|
}
|
|
|
|
|
return conf, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
var (
|
|
|
|
|
// PluginID is the rawexec plugin metadata registered in the plugin
|
|
|
|
|
// catalog.
|
|
|
|
|
PluginID = loader.PluginID{
|
|
|
|
|
Name: pluginName,
|
|
|
|
|
PluginType: base.PluginTypeDriver,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// PluginConfig is the rawexec factory function registered in the
|
|
|
|
|
// plugin catalog.
|
|
|
|
|
PluginConfig = &loader.InternalPluginConfig{
|
|
|
|
|
Config: map[string]interface{}{},
|
|
|
|
|
Factory: func(l hclog.Logger) interface{} { return NewDockerDriver(l) },
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// pluginInfo is the response returned for the PluginInfo RPC
|
|
|
|
|
pluginInfo = &base.PluginInfoResponse{
|
|
|
|
|
Type: base.PluginTypeDriver,
|
|
|
|
|
PluginApiVersion: "0.0.1",
|
|
|
|
|
PluginVersion: "0.1.0",
|
|
|
|
|
Name: pluginName,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// configSpec is the hcl specification returned by the ConfigSchema RPC
|
2018-11-20 02:32:08 +00:00
|
|
|
// and is used to parse the contents of the 'plugin "docker" {...}' block.
|
|
|
|
|
// Example:
|
|
|
|
|
// plugin "docker" {
|
|
|
|
|
// endpoint = "unix:///var/run/docker.sock"
|
|
|
|
|
// auth {
|
|
|
|
|
// config = "/etc/docker-auth.json"
|
|
|
|
|
// helper = "docker-credential-aws"
|
|
|
|
|
// }
|
|
|
|
|
// tls {
|
|
|
|
|
// cert = "/etc/nomad/nomad.pub"
|
|
|
|
|
// key = "/etc/nomad/nomad.pem"
|
|
|
|
|
// ca = "/etc/nomad/nomad.cert"
|
|
|
|
|
// }
|
|
|
|
|
// gc {
|
|
|
|
|
// image = true
|
|
|
|
|
// image_delay = "5m"
|
|
|
|
|
// container = false
|
|
|
|
|
// }
|
|
|
|
|
// volumes {
|
|
|
|
|
// enabled = true
|
|
|
|
|
// selinuxlabel = "z"
|
|
|
|
|
// }
|
|
|
|
|
// allow_privileged = false
|
|
|
|
|
// allow_caps = ["CHOWN", "NET_RAW" ... ]
|
|
|
|
|
// }
|
2018-11-14 11:20:35 +00:00
|
|
|
configSpec = hclspec.NewObject(map[string]*hclspec.Spec{
|
2018-11-20 02:07:30 +00:00
|
|
|
"endpoint": hclspec.NewAttr("endpoint", "string", false),
|
2018-11-20 03:58:05 +00:00
|
|
|
|
|
|
|
|
// docker daemon auth option for image registry
|
2018-11-20 02:07:30 +00:00
|
|
|
"auth": hclspec.NewBlock("auth", false, hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"config": hclspec.NewAttr("config", "string", false),
|
|
|
|
|
"helper": hclspec.NewAttr("helper", "string", false),
|
|
|
|
|
})),
|
2018-11-20 03:58:05 +00:00
|
|
|
|
|
|
|
|
// client tls options
|
2018-11-14 11:20:35 +00:00
|
|
|
"tls": hclspec.NewBlock("tls", false, hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"cert": hclspec.NewAttr("cert", "string", false),
|
|
|
|
|
"key": hclspec.NewAttr("key", "string", false),
|
|
|
|
|
"ca": hclspec.NewAttr("ca", "string", false),
|
|
|
|
|
})),
|
2018-11-20 03:58:05 +00:00
|
|
|
|
|
|
|
|
// garbage collection options
|
|
|
|
|
// default needed for both if the gc {...} block is not set and
|
|
|
|
|
// if the default fields are missing
|
|
|
|
|
"gc": hclspec.NewDefault(hclspec.NewBlock("gc", false, hclspec.NewObject(map[string]*hclspec.Spec{
|
2018-11-20 02:07:30 +00:00
|
|
|
"image": hclspec.NewDefault(
|
|
|
|
|
hclspec.NewAttr("image", "bool", false),
|
|
|
|
|
hclspec.NewLiteral("true"),
|
|
|
|
|
),
|
|
|
|
|
"image_delay": hclspec.NewAttr("image_delay", "string", false),
|
|
|
|
|
"container": hclspec.NewDefault(
|
|
|
|
|
hclspec.NewAttr("container", "bool", false),
|
|
|
|
|
hclspec.NewLiteral("true"),
|
|
|
|
|
),
|
2018-11-20 03:58:05 +00:00
|
|
|
})), hclspec.NewLiteral(`{
|
|
|
|
|
image = true
|
|
|
|
|
container = true
|
|
|
|
|
}`)),
|
|
|
|
|
|
|
|
|
|
// docker volume options
|
|
|
|
|
// defaulted needed for both if the volumes {...} block is not set and
|
|
|
|
|
// if the default fields are missing
|
|
|
|
|
"volumes": hclspec.NewDefault(hclspec.NewBlock("volumes", false, hclspec.NewObject(map[string]*hclspec.Spec{
|
2018-11-20 02:32:08 +00:00
|
|
|
"enabled": hclspec.NewDefault(
|
|
|
|
|
hclspec.NewAttr("enabled", "bool", false),
|
|
|
|
|
hclspec.NewLiteral("true"),
|
|
|
|
|
),
|
|
|
|
|
"selinuxlabel": hclspec.NewAttr("selinuxlabel", "string", false),
|
2018-11-20 03:58:05 +00:00
|
|
|
})), hclspec.NewLiteral("{ enabled = true }")),
|
2018-11-20 02:32:08 +00:00
|
|
|
"allow_privileged": hclspec.NewAttr("allow_privileged", "bool", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
"allow_caps": hclspec.NewDefault(
|
|
|
|
|
hclspec.NewAttr("allow_caps", "list(string)", false),
|
|
|
|
|
hclspec.NewLiteral(`["CHOWN","DAC_OVERRIDE","FSETID","FOWNER","MKNOD","NET_RAW","SETGID","SETUID","SETFCAP","SETPCAP","NET_BIND_SERVICE","SYS_CHROOT","KILL","AUDIT_WRITE"]`),
|
|
|
|
|
),
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// taskConfigSpec is the hcl specification for the driver config section of
|
|
|
|
|
// a task within a job. It is returned in the TaskConfigSchema RPC
|
|
|
|
|
taskConfigSpec = hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"image": hclspec.NewAttr("image", "string", true),
|
|
|
|
|
"advertise_ipv6_address": hclspec.NewAttr("advertise_ipv6_address", "bool", false),
|
|
|
|
|
"args": hclspec.NewAttr("args", "list(string)", false),
|
|
|
|
|
"auth": hclspec.NewBlock("auth", false, hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"username": hclspec.NewAttr("username", "string", false),
|
|
|
|
|
"password": hclspec.NewAttr("password", "string", false),
|
|
|
|
|
"email": hclspec.NewAttr("email", "string", false),
|
|
|
|
|
"server_address": hclspec.NewAttr("server_address", "string", false),
|
|
|
|
|
})),
|
|
|
|
|
"auth_soft_fail": hclspec.NewAttr("auth_soft_fail", "bool", false),
|
|
|
|
|
"cap_add": hclspec.NewAttr("cap_add", "list(string)", false),
|
|
|
|
|
"cap_drop": hclspec.NewAttr("cap_drop", "list(string)", false),
|
|
|
|
|
"command": hclspec.NewAttr("command", "string", false),
|
|
|
|
|
"cpu_hard_limit": hclspec.NewAttr("cpu_hard_limit", "bool", false),
|
|
|
|
|
"cpu_cfs_period": hclspec.NewAttr("cpu_cfs_period", "number", false),
|
|
|
|
|
"devices": hclspec.NewBlockSet("devices", hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"host_path": hclspec.NewAttr("host_path", "string", false),
|
|
|
|
|
"container_path": hclspec.NewAttr("container_path", "string", false),
|
|
|
|
|
"cgroup_permissions": hclspec.NewAttr("cgroup_permissions", "string", false),
|
|
|
|
|
})),
|
|
|
|
|
"dns_search_domains": hclspec.NewAttr("dns_search_domains", "list(string)", false),
|
|
|
|
|
"dns_options": hclspec.NewAttr("dns_options", "list(string)", false),
|
|
|
|
|
"dns_servers": hclspec.NewAttr("dns_servers", "list(string)", false),
|
|
|
|
|
"entrypoint": hclspec.NewAttr("entrypoint", "list(string)", false),
|
|
|
|
|
"extra_hosts": hclspec.NewAttr("extra_hosts", "list(string)", false),
|
|
|
|
|
"force_pull": hclspec.NewAttr("force_pull", "bool", false),
|
|
|
|
|
"hostname": hclspec.NewAttr("hostname", "string", false),
|
|
|
|
|
"interactive": hclspec.NewAttr("interactive", "bool", false),
|
|
|
|
|
"ipc_mode": hclspec.NewAttr("ipc_mode", "string", false),
|
|
|
|
|
"ipv4_address": hclspec.NewAttr("ipv4_address", "string", false),
|
|
|
|
|
"ipv6_address": hclspec.NewAttr("ipv6_address", "string", false),
|
2018-11-20 02:07:30 +00:00
|
|
|
"labels": hclspec.NewBlockAttrs("labels", "string", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
"load": hclspec.NewAttr("load", "string", false),
|
2018-11-20 02:07:30 +00:00
|
|
|
"logging": hclspec.NewBlockSet("logging", hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"type": hclspec.NewAttr("type", "string", false),
|
|
|
|
|
"config": hclspec.NewBlockAttrs("config", "string", false),
|
|
|
|
|
})),
|
|
|
|
|
"mac_address": hclspec.NewAttr("mac_address", "string", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
"mounts": hclspec.NewBlockSet("mounts", hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"target": hclspec.NewAttr("target", "string", false),
|
|
|
|
|
"source": hclspec.NewAttr("source", "string", false),
|
|
|
|
|
"readonly": hclspec.NewAttr("readonly", "bool", false),
|
|
|
|
|
"volume_options": hclspec.NewBlockSet("volume_options", hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"no_copy": hclspec.NewAttr("no_copy", "bool", false),
|
2018-11-20 02:07:30 +00:00
|
|
|
"labels": hclspec.NewBlockAttrs("labels", "string", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
"driver_config": hclspec.NewBlockSet("driver_config", hclspec.NewObject(map[string]*hclspec.Spec{
|
|
|
|
|
"name": hclspec.NewAttr("name", "string", false),
|
2018-11-20 02:07:30 +00:00
|
|
|
"options": hclspec.NewBlockAttrs("name", "string", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
})),
|
|
|
|
|
})),
|
|
|
|
|
})),
|
|
|
|
|
"network_aliases": hclspec.NewAttr("network_aliases", "list(string)", false),
|
|
|
|
|
"network_mode": hclspec.NewAttr("network_mode", "string", false),
|
|
|
|
|
"pids_limit": hclspec.NewAttr("pids_limit", "number", false),
|
|
|
|
|
"pid_mode": hclspec.NewAttr("pid_mode", "string", false),
|
2018-11-20 02:07:30 +00:00
|
|
|
"port_map": hclspec.NewBlockAttrs("port_map", "number", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
"privileged": hclspec.NewAttr("privileged", "bool", false),
|
|
|
|
|
"readonly_rootfs": hclspec.NewAttr("readonly_rootfs", "bool", false),
|
|
|
|
|
"security_opt": hclspec.NewAttr("security_opt", "list(string)", false),
|
|
|
|
|
"shm_size": hclspec.NewAttr("shm_size", "number", false),
|
2018-11-20 14:49:50 +00:00
|
|
|
"storage_opt": hclspec.NewBlockAttrs("storage_opt", "string", false),
|
2018-11-20 02:07:30 +00:00
|
|
|
"sysctl": hclspec.NewBlockAttrs("sysctl", "string", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
"tty": hclspec.NewAttr("tty", "bool", false),
|
2018-11-20 02:07:30 +00:00
|
|
|
"ulimit": hclspec.NewBlockAttrs("ulimit", "string", false),
|
2018-11-14 11:20:35 +00:00
|
|
|
"uts_mode": hclspec.NewAttr("uts_mode", "string", false),
|
|
|
|
|
"userns_mode": hclspec.NewAttr("userns_mode", "string", false),
|
|
|
|
|
"volumes": hclspec.NewAttr("volumes", "list(string)", false),
|
|
|
|
|
"volume_driver": hclspec.NewAttr("volume_driver", "string", false),
|
|
|
|
|
"work_dir": hclspec.NewAttr("work_dir", "string", false),
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// capabilities is returned by the Capabilities RPC and indicates what
|
|
|
|
|
// optional features this driver supports
|
|
|
|
|
capabilities = &drivers.Capabilities{
|
|
|
|
|
SendSignals: true,
|
|
|
|
|
Exec: true,
|
|
|
|
|
FSIsolation: structs.FSIsolationImage,
|
|
|
|
|
}
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
type TaskConfig struct {
|
|
|
|
|
Image string `codec:"image"`
|
|
|
|
|
AdvertiseIPv6Addr bool `codec:"advertise_ipv6_address"`
|
|
|
|
|
Args []string `codec:"args"`
|
|
|
|
|
Auth DockerAuth `codec:"auth"`
|
|
|
|
|
AuthSoftFail bool `codec:"auth_soft_fail"`
|
|
|
|
|
CapAdd []string `codec:"cap_add"`
|
|
|
|
|
CapDrop []string `codec:"cap_drop"`
|
|
|
|
|
Command string `codec:"command"`
|
|
|
|
|
CPUCFSPeriod int64 `codec:"cpu_cfs_period"`
|
|
|
|
|
CPUHardLimit bool `codec:"cpu_hard_limit"`
|
|
|
|
|
Devices []DockerDevice `codec:"devices"`
|
|
|
|
|
DNSSearchDomains []string `codec:"dns_search_domains"`
|
|
|
|
|
DNSOptions []string `codec:"dns_options"`
|
|
|
|
|
DNSServers []string `codec:"dns_servers"`
|
|
|
|
|
Entrypoint []string `codec:"entrypoint"`
|
|
|
|
|
ExtraHosts []string `codec:"extra_hosts"`
|
|
|
|
|
ForcePull bool `codec:"force_pull"`
|
|
|
|
|
Hostname string `codec:"hostname"`
|
|
|
|
|
Interactive bool `codec:"interactive"`
|
|
|
|
|
IPCMode string `codec:"ipc_mode"`
|
|
|
|
|
IPv4Address string `codec:"ipv4_address"`
|
|
|
|
|
IPv6Address string `codec:"ipv6_address"`
|
|
|
|
|
Labels map[string]string `codec:"labels"`
|
|
|
|
|
LoadImage string `codec:"load"`
|
|
|
|
|
Logging DockerLogging `codec:"logging"`
|
|
|
|
|
MacAddress string `codec:"mac_address"`
|
|
|
|
|
Mounts []DockerMount `codec:"mounts"`
|
|
|
|
|
NetworkAliases []string `codec:"network_aliases"`
|
|
|
|
|
NetworkMode string `codec:"network_mode"`
|
|
|
|
|
PidsLimit int64 `codec:"pids_limit"`
|
|
|
|
|
PidMode string `codec:"pid_mode"`
|
|
|
|
|
PortMap map[string]int `codec:"port_map"`
|
|
|
|
|
Privileged bool `codec:"privileged"`
|
|
|
|
|
ReadonlyRootfs bool `codec:"readonly_rootfs"`
|
|
|
|
|
SecurityOpt []string `codec:"security_opt"`
|
|
|
|
|
ShmSize int64 `codec:"shm_size"`
|
2018-11-20 14:49:50 +00:00
|
|
|
StorageOpt map[string]string `codec:"storage_opt"`
|
2018-11-14 11:20:35 +00:00
|
|
|
Sysctl map[string]string `codec:"sysctl"`
|
|
|
|
|
TTY bool `codec:"tty"`
|
|
|
|
|
Ulimit map[string]string `codec:"ulimit"`
|
|
|
|
|
UTSMode string `codec:"uts_mode"`
|
|
|
|
|
UsernsMode string `codec:"userns_mode"`
|
|
|
|
|
Volumes []string `codec:"volumes"`
|
|
|
|
|
VolumeDriver string `codec:"volume_driver"`
|
|
|
|
|
WorkDir string `codec:"work_dir"`
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type DockerAuth struct {
|
|
|
|
|
Username string `codec:"username"`
|
|
|
|
|
Password string `codec:"password"`
|
|
|
|
|
Email string `codec:"email"`
|
|
|
|
|
ServerAddr string `codec:"server_address"`
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type DockerDevice struct {
|
|
|
|
|
HostPath string `codec:"host_path"`
|
|
|
|
|
ContainerPath string `codec:"container_path"`
|
|
|
|
|
CgroupPermissions string `codec:"cgroup_permissions"`
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type DockerLogging struct {
|
|
|
|
|
Type string `codec:"type"`
|
|
|
|
|
Config map[string]string `codec:"config"`
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type DockerMount struct {
|
|
|
|
|
Target string `codec:"target"`
|
|
|
|
|
Source string `codec:"source"`
|
|
|
|
|
ReadOnly bool `codec:"readonly"`
|
|
|
|
|
VolumeOptions DockerVolumeOptions `codec:"volume_options"`
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type DockerVolumeOptions struct {
|
|
|
|
|
NoCopy bool `codec:"no_copy"`
|
|
|
|
|
Labels map[string]string `codec:"labels"`
|
|
|
|
|
DriverConfig DockerVolumeDriverConfig `codec:"driver_config"`
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// VolumeDriverConfig holds a map of volume driver specific options
|
|
|
|
|
type DockerVolumeDriverConfig struct {
|
|
|
|
|
Name string `codec:"name"`
|
|
|
|
|
Options map[string]string `codec:"options"`
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type DriverConfig struct {
|
2018-11-20 02:32:08 +00:00
|
|
|
Endpoint string `codec:"endpoint"`
|
|
|
|
|
Auth AuthConfig `codec:"auth"`
|
|
|
|
|
TLS TLSConfig `codec:"tls"`
|
|
|
|
|
GC GCConfig `codec:"gc"`
|
|
|
|
|
Volumes VolumeConfig `codec:"volumes"`
|
|
|
|
|
AllowPrivileged bool `codec:"allow_privileged"`
|
|
|
|
|
AllowCaps []string `codec:"allow_caps"`
|
2018-11-20 02:07:30 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type AuthConfig struct {
|
|
|
|
|
Config string `codec:"config"`
|
|
|
|
|
Helper string `codec:"helper"`
|
2018-11-14 11:20:35 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type TLSConfig struct {
|
|
|
|
|
Cert string `codec:"cert"`
|
|
|
|
|
Key string `codec:"key"`
|
|
|
|
|
CA string `codec:"ca"`
|
|
|
|
|
}
|
2018-11-20 02:07:30 +00:00
|
|
|
|
|
|
|
|
type GCConfig struct {
|
|
|
|
|
Image bool `codec:"image"`
|
|
|
|
|
ImageDelay string `codec:"image_delay"`
|
|
|
|
|
imageDelayDuration time.Duration `codec:"-"`
|
|
|
|
|
Container bool `codec:"container"`
|
|
|
|
|
}
|
2018-11-20 02:32:08 +00:00
|
|
|
|
|
|
|
|
type VolumeConfig struct {
|
|
|
|
|
Enabled bool `codec:"enabled"`
|
|
|
|
|
SelinuxLabel string `codec:"selinuxlabel"`
|
|
|
|
|
}
|
2018-11-20 03:41:14 +00:00
|
|
|
|
|
|
|
|
func (d *Driver) PluginInfo() (*base.PluginInfoResponse, error) {
|
|
|
|
|
return pluginInfo, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func (d *Driver) ConfigSchema() (*hclspec.Spec, error) {
|
|
|
|
|
return configSpec, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func (d *Driver) SetConfig(data []byte, cfg *base.ClientAgentConfig) error {
|
|
|
|
|
var config DriverConfig
|
|
|
|
|
if err := base.MsgPackDecode(data, &config); err != nil {
|
|
|
|
|
return err
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
d.config = &config
|
|
|
|
|
if len(d.config.GC.ImageDelay) > 0 {
|
|
|
|
|
dur, err := time.ParseDuration(d.config.GC.ImageDelay)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return fmt.Errorf("failed to parse 'image_delay' duration: %v", err)
|
|
|
|
|
}
|
|
|
|
|
d.config.GC.imageDelayDuration = dur
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if cfg != nil {
|
|
|
|
|
d.clientConfig = cfg.Driver
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
dockerClient, _, err := d.dockerClients()
|
|
|
|
|
if err != nil {
|
|
|
|
|
return fmt.Errorf("failed to get docker client: %v", err)
|
|
|
|
|
}
|
|
|
|
|
coordinatorConfig := &dockerCoordinatorConfig{
|
|
|
|
|
client: dockerClient,
|
|
|
|
|
cleanup: d.config.GC.Image,
|
|
|
|
|
logger: d.logger,
|
|
|
|
|
removeDelay: d.config.GC.imageDelayDuration,
|
|
|
|
|
}
|
|
|
|
|
|
2018-11-20 04:07:07 +00:00
|
|
|
d.coordinator = newDockerCoordinator(coordinatorConfig)
|
2018-11-20 03:41:14 +00:00
|
|
|
|
|
|
|
|
return nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func (d *Driver) TaskConfigSchema() (*hclspec.Spec, error) {
|
|
|
|
|
return taskConfigSpec, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func (d *Driver) Capabilities() (*drivers.Capabilities, error) {
|
|
|
|
|
return capabilities, nil
|
|
|
|
|
}
|
