You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
87 lines
2.3 KiB
Go
87 lines
2.3 KiB
Go
2 years ago
|
package integration
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"fmt"
|
||
|
|
"log"
|
||
|
|
"os"
|
||
|
|
"runtime"
|
||
|
|
|
||
|
|
"github.com/moby/buildkit/util/bklog"
|
||
|
|
"github.com/pkg/errors"
|
||
|
|
)
|
||
|
|
|
||
|
|
func InitOCIWorker() {
|
||
|
|
Register(&OCI{ID: "oci"})
|
||
|
|
|
||
|
|
// the rootless uid is defined in Dockerfile
|
||
|
|
if s := os.Getenv("BUILDKIT_INTEGRATION_ROOTLESS_IDPAIR"); s != "" {
|
||
|
|
var uid, gid int
|
||
|
|
if _, err := fmt.Sscanf(s, "%d:%d", &uid, &gid); err != nil {
|
||
|
|
bklog.L.Fatalf("unexpected BUILDKIT_INTEGRATION_ROOTLESS_IDPAIR: %q", s)
|
||
|
|
}
|
||
|
|
if rootlessSupported(uid) {
|
||
|
|
Register(&OCI{ID: "oci-rootless", UID: uid, GID: gid})
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if s := os.Getenv("BUILDKIT_INTEGRATION_SNAPSHOTTER"); s != "" {
|
||
|
|
Register(&OCI{ID: "oci-snapshotter-" + s, Snapshotter: s})
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
type OCI struct {
|
||
|
|
ID string
|
||
|
|
UID int
|
||
|
|
GID int
|
||
|
|
Snapshotter string
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *OCI) Name() string {
|
||
|
|
return s.ID
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *OCI) Rootless() bool {
|
||
|
|
return s.UID != 0
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *OCI) New(ctx context.Context, cfg *BackendConfig) (Backend, func() error, error) {
|
||
|
|
if err := lookupBinary("buildkitd"); err != nil {
|
||
|
|
return nil, nil, err
|
||
|
|
}
|
||
|
|
if err := requireRoot(); err != nil {
|
||
|
|
return nil, nil, err
|
||
|
|
}
|
||
|
|
// Include use of --oci-worker-labels to trigger https://github.com/moby/buildkit/pull/603
|
||
|
|
buildkitdArgs := []string{"buildkitd", "--oci-worker=true", "--containerd-worker=false", "--oci-worker-gc=false", "--oci-worker-labels=org.mobyproject.buildkit.worker.sandbox=true"}
|
||
|
|
|
||
|
|
if s.Snapshotter != "" {
|
||
|
|
buildkitdArgs = append(buildkitdArgs,
|
||
|
|
fmt.Sprintf("--oci-worker-snapshotter=%s", s.Snapshotter))
|
||
|
|
}
|
||
|
|
|
||
|
|
if s.UID != 0 {
|
||
|
|
if s.GID == 0 {
|
||
|
|
return nil, nil, errors.Errorf("unsupported id pair: uid=%d, gid=%d", s.UID, s.GID)
|
||
|
|
}
|
||
|
|
// TODO: make sure the user exists and subuid/subgid are configured.
|
||
|
|
buildkitdArgs = append([]string{"sudo", "-u", fmt.Sprintf("#%d", s.UID), "-i", "--", "exec", "rootlesskit"}, buildkitdArgs...)
|
||
|
|
}
|
||
|
|
|
||
|
|
var extraEnv []string
|
||
|
|
if runtime.GOOS != "windows" && s.Snapshotter != "native" {
|
||
|
|
extraEnv = append(extraEnv, "BUILDKIT_DEBUG_FORCE_OVERLAY_DIFF=true")
|
||
|
|
}
|
||
|
|
buildkitdSock, stop, err := runBuildkitd(ctx, cfg, buildkitdArgs, cfg.Logs, s.UID, s.GID, extraEnv)
|
||
|
|
if err != nil {
|
||
|
|
printLogs(cfg.Logs, log.Println)
|
||
|
|
return nil, nil, err
|
||
|
|
}
|
||
|
|
|
||
|
|
return backend{
|
||
|
|
address: buildkitdSock,
|
||
|
|
rootless: s.UID != 0,
|
||
|
|
snapshotter: s.Snapshotter,
|
||
|
|
}, stop, nil
|
||
|
|
}
|