2014-04-27 22:06:09 +00:00
|
|
|
package registry
|
|
|
|
|
2015-05-16 01:35:04 +00:00
|
|
|
import (
|
2015-02-12 18:23:22 +00:00
|
|
|
"crypto/tls"
|
2015-05-16 01:35:04 +00:00
|
|
|
"net/http"
|
2015-07-21 21:10:34 +00:00
|
|
|
"net/url"
|
2015-11-18 22:20:54 +00:00
|
|
|
"strings"
|
2015-05-16 01:35:04 +00:00
|
|
|
|
2016-03-01 07:07:41 +00:00
|
|
|
"github.com/Sirupsen/logrus"
|
2015-12-04 21:55:15 +00:00
|
|
|
"github.com/docker/docker/reference"
|
2016-01-05 00:05:26 +00:00
|
|
|
"github.com/docker/engine-api/types"
|
|
|
|
registrytypes "github.com/docker/engine-api/types/registry"
|
2015-05-16 01:35:04 +00:00
|
|
|
)
|
2015-04-22 12:06:58 +00:00
|
|
|
|
2015-07-21 19:40:36 +00:00
|
|
|
// Service is a registry service. It tracks configuration data such as a list
|
|
|
|
// of mirrors.
|
2014-04-27 22:06:09 +00:00
|
|
|
type Service struct {
|
2016-03-08 21:03:37 +00:00
|
|
|
config *serviceConfig
|
2014-04-27 22:06:09 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// NewService returns a new instance of Service ready to be
|
2015-07-21 19:40:36 +00:00
|
|
|
// installed into an engine.
|
2016-03-08 21:03:37 +00:00
|
|
|
func NewService(options ServiceOptions) *Service {
|
2014-08-20 15:31:24 +00:00
|
|
|
return &Service{
|
2016-03-08 21:03:37 +00:00
|
|
|
config: newServiceConfig(options),
|
2014-08-20 15:31:24 +00:00
|
|
|
}
|
2014-04-27 22:06:09 +00:00
|
|
|
}
|
|
|
|
|
2016-03-08 21:03:37 +00:00
|
|
|
// ServiceConfig returns the public registry service configuration.
|
|
|
|
func (s *Service) ServiceConfig() *registrytypes.ServiceConfig {
|
|
|
|
return &s.config.ServiceConfig
|
|
|
|
}
|
|
|
|
|
2014-04-27 22:06:09 +00:00
|
|
|
// Auth contacts the public registry with the provided credentials,
|
2015-08-07 22:24:18 +00:00
|
|
|
// and returns OK if authentication was successful.
|
2014-04-27 22:06:09 +00:00
|
|
|
// It can be used to verify the validity of a client's credentials.
|
2016-03-01 07:07:41 +00:00
|
|
|
func (s *Service) Auth(authConfig *types.AuthConfig, userAgent string) (status string, err error) {
|
|
|
|
endpoints, err := s.LookupPushEndpoints(authConfig.ServerAddress)
|
2015-03-31 23:21:37 +00:00
|
|
|
if err != nil {
|
|
|
|
return "", err
|
2014-04-27 22:06:09 +00:00
|
|
|
}
|
2015-09-16 17:42:17 +00:00
|
|
|
|
2016-03-01 07:07:41 +00:00
|
|
|
for _, endpoint := range endpoints {
|
|
|
|
login := loginV2
|
|
|
|
if endpoint.Version == APIVersion1 {
|
|
|
|
login = loginV1
|
|
|
|
}
|
2015-09-16 17:42:17 +00:00
|
|
|
|
2016-03-01 07:07:41 +00:00
|
|
|
status, err = login(authConfig, endpoint, userAgent)
|
|
|
|
if err == nil {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
if fErr, ok := err.(fallbackError); ok {
|
|
|
|
err = fErr.err
|
|
|
|
logrus.Infof("Error logging in to %s endpoint, trying next endpoint: %v", endpoint.Version, err)
|
|
|
|
continue
|
|
|
|
}
|
2015-03-31 23:21:37 +00:00
|
|
|
return "", err
|
2014-12-12 01:55:15 +00:00
|
|
|
}
|
2016-03-01 07:07:41 +00:00
|
|
|
|
|
|
|
return "", err
|
2014-04-27 22:06:09 +00:00
|
|
|
}
|
2014-04-27 22:21:42 +00:00
|
|
|
|
2015-11-18 22:20:54 +00:00
|
|
|
// splitReposSearchTerm breaks a search term into an index name and remote name
|
|
|
|
func splitReposSearchTerm(reposName string) (string, string) {
|
|
|
|
nameParts := strings.SplitN(reposName, "/", 2)
|
|
|
|
var indexName, remoteName string
|
|
|
|
if len(nameParts) == 1 || (!strings.Contains(nameParts[0], ".") &&
|
|
|
|
!strings.Contains(nameParts[0], ":") && nameParts[0] != "localhost") {
|
|
|
|
// This is a Docker Index repos (ex: samalba/hipache or ubuntu)
|
|
|
|
// 'docker.io'
|
|
|
|
indexName = IndexName
|
|
|
|
remoteName = reposName
|
|
|
|
} else {
|
|
|
|
indexName = nameParts[0]
|
|
|
|
remoteName = nameParts[1]
|
|
|
|
}
|
|
|
|
return indexName, remoteName
|
|
|
|
}
|
|
|
|
|
2014-04-27 22:21:42 +00:00
|
|
|
// Search queries the public registry for images matching the specified
|
|
|
|
// search terms, and returns the results.
|
2016-01-04 18:36:01 +00:00
|
|
|
func (s *Service) Search(term string, authConfig *types.AuthConfig, userAgent string, headers map[string][]string) (*registrytypes.SearchResults, error) {
|
2015-11-18 22:20:54 +00:00
|
|
|
if err := validateNoSchema(term); err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
indexName, remoteName := splitReposSearchTerm(term)
|
2015-09-22 11:44:40 +00:00
|
|
|
|
2016-03-08 21:03:37 +00:00
|
|
|
index, err := newIndexInfo(s.config, indexName)
|
2014-08-09 07:16:54 +00:00
|
|
|
if err != nil {
|
2015-03-31 23:21:37 +00:00
|
|
|
return nil, err
|
2014-08-09 07:16:54 +00:00
|
|
|
}
|
2015-05-14 14:12:54 +00:00
|
|
|
|
2014-10-07 01:54:52 +00:00
|
|
|
// *TODO: Search multiple indexes.
|
2016-03-01 07:07:41 +00:00
|
|
|
endpoint, err := NewV1Endpoint(index, userAgent, http.Header(headers))
|
2014-08-09 07:16:54 +00:00
|
|
|
if err != nil {
|
2015-03-31 23:21:37 +00:00
|
|
|
return nil, err
|
2014-04-27 22:21:42 +00:00
|
|
|
}
|
2015-09-16 17:42:17 +00:00
|
|
|
|
2015-05-16 01:35:04 +00:00
|
|
|
r, err := NewSession(endpoint.client, authConfig, endpoint)
|
2014-04-27 22:21:42 +00:00
|
|
|
if err != nil {
|
2015-03-31 23:21:37 +00:00
|
|
|
return nil, err
|
2014-04-27 22:21:42 +00:00
|
|
|
}
|
2014-10-07 01:54:52 +00:00
|
|
|
|
2015-11-18 22:20:54 +00:00
|
|
|
if index.Official {
|
|
|
|
localName := remoteName
|
|
|
|
if strings.HasPrefix(localName, "library/") {
|
|
|
|
// If pull "library/foo", it's stored locally under "foo"
|
|
|
|
localName = strings.SplitN(localName, "/", 2)[1]
|
|
|
|
}
|
|
|
|
|
|
|
|
return r.SearchRepositories(localName)
|
|
|
|
}
|
|
|
|
return r.SearchRepositories(remoteName)
|
2015-09-22 11:44:40 +00:00
|
|
|
}
|
|
|
|
|
2015-11-18 22:20:54 +00:00
|
|
|
// ResolveRepository splits a repository name into its components
|
2015-09-22 11:44:40 +00:00
|
|
|
// and configuration of the associated registry.
|
2015-11-18 22:20:54 +00:00
|
|
|
func (s *Service) ResolveRepository(name reference.Named) (*RepositoryInfo, error) {
|
2016-03-08 21:03:37 +00:00
|
|
|
return newRepositoryInfo(s.config, name)
|
2014-10-07 01:54:52 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// ResolveIndex takes indexName and returns index info
|
2015-12-12 02:14:52 +00:00
|
|
|
func (s *Service) ResolveIndex(name string) (*registrytypes.IndexInfo, error) {
|
2016-03-08 21:03:37 +00:00
|
|
|
return newIndexInfo(s.config, name)
|
2014-10-07 01:54:52 +00:00
|
|
|
}
|
2015-02-12 18:23:22 +00:00
|
|
|
|
2015-07-21 19:40:36 +00:00
|
|
|
// APIEndpoint represents a remote API endpoint
|
2015-02-12 18:23:22 +00:00
|
|
|
type APIEndpoint struct {
|
2015-12-04 21:42:33 +00:00
|
|
|
Mirror bool
|
2016-02-18 00:53:25 +00:00
|
|
|
URL *url.URL
|
2015-12-04 21:42:33 +00:00
|
|
|
Version APIVersion
|
|
|
|
Official bool
|
|
|
|
TrimHostname bool
|
|
|
|
TLSConfig *tls.Config
|
2015-02-12 18:23:22 +00:00
|
|
|
}
|
|
|
|
|
2015-07-21 19:40:36 +00:00
|
|
|
// ToV1Endpoint returns a V1 API endpoint based on the APIEndpoint
|
2016-03-01 07:07:41 +00:00
|
|
|
func (e APIEndpoint) ToV1Endpoint(userAgent string, metaHeaders http.Header) (*V1Endpoint, error) {
|
|
|
|
return newV1Endpoint(*e.URL, e.TLSConfig, userAgent, metaHeaders)
|
2015-02-12 18:23:22 +00:00
|
|
|
}
|
|
|
|
|
2015-07-21 19:40:36 +00:00
|
|
|
// TLSConfig constructs a client TLS configuration based on server defaults
|
|
|
|
func (s *Service) TLSConfig(hostname string) (*tls.Config, error) {
|
2016-03-08 21:03:37 +00:00
|
|
|
return newTLSConfig(hostname, isSecureIndex(s.config, hostname))
|
2015-02-12 18:23:22 +00:00
|
|
|
}
|
|
|
|
|
2016-02-18 00:53:25 +00:00
|
|
|
func (s *Service) tlsConfigForMirror(mirrorURL *url.URL) (*tls.Config, error) {
|
2015-07-21 19:40:36 +00:00
|
|
|
return s.TLSConfig(mirrorURL.Host)
|
2015-07-21 21:10:34 +00:00
|
|
|
}
|
|
|
|
|
2016-03-09 16:17:57 +00:00
|
|
|
// LookupPullEndpoints creates a list of endpoints to try to pull from, in order of preference.
|
2015-07-21 19:40:36 +00:00
|
|
|
// It gives preference to v2 endpoints over v1, mirrors over the actual
|
|
|
|
// registry, and HTTPS over plain HTTP.
|
2016-03-01 07:07:41 +00:00
|
|
|
func (s *Service) LookupPullEndpoints(hostname string) (endpoints []APIEndpoint, err error) {
|
|
|
|
return s.lookupEndpoints(hostname)
|
2015-08-06 21:41:59 +00:00
|
|
|
}
|
|
|
|
|
2016-03-09 16:17:57 +00:00
|
|
|
// LookupPushEndpoints creates a list of endpoints to try to push to, in order of preference.
|
2015-08-06 21:41:59 +00:00
|
|
|
// It gives preference to v2 endpoints over v1, and HTTPS over plain HTTP.
|
|
|
|
// Mirrors are not included.
|
2016-03-01 07:07:41 +00:00
|
|
|
func (s *Service) LookupPushEndpoints(hostname string) (endpoints []APIEndpoint, err error) {
|
|
|
|
allEndpoints, err := s.lookupEndpoints(hostname)
|
2015-08-07 01:21:02 +00:00
|
|
|
if err == nil {
|
|
|
|
for _, endpoint := range allEndpoints {
|
|
|
|
if !endpoint.Mirror {
|
|
|
|
endpoints = append(endpoints, endpoint)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return endpoints, err
|
2015-08-06 21:41:59 +00:00
|
|
|
}
|
|
|
|
|
2016-03-01 07:07:41 +00:00
|
|
|
func (s *Service) lookupEndpoints(hostname string) (endpoints []APIEndpoint, err error) {
|
|
|
|
endpoints, err = s.lookupV2Endpoints(hostname)
|
2015-02-12 18:23:22 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2016-03-08 21:03:37 +00:00
|
|
|
if s.config.V2Only {
|
2015-09-16 17:42:17 +00:00
|
|
|
return endpoints, nil
|
2015-02-12 18:23:22 +00:00
|
|
|
}
|
|
|
|
|
2016-03-01 07:07:41 +00:00
|
|
|
legacyEndpoints, err := s.lookupV1Endpoints(hostname)
|
2015-09-16 17:42:17 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
2015-02-12 18:23:22 +00:00
|
|
|
}
|
2015-09-16 17:42:17 +00:00
|
|
|
endpoints = append(endpoints, legacyEndpoints...)
|
2015-02-12 18:23:22 +00:00
|
|
|
|
|
|
|
return endpoints, nil
|
|
|
|
}
|