Fix a Rootless Docker-in-Docker issue on Fedora 30: https://github.com/docker-library/docker/pull/165#issuecomment-511717143 Related: #1598 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
		
			
				
	
	
		
			356 lines
		
	
	
		
			9.0 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			356 lines
		
	
	
		
			9.0 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
// +build linux
 | 
						|
 | 
						|
/*
 | 
						|
   Copyright The containerd Authors.
 | 
						|
 | 
						|
   Licensed under the Apache License, Version 2.0 (the "License");
 | 
						|
   you may not use this file except in compliance with the License.
 | 
						|
   You may obtain a copy of the License at
 | 
						|
 | 
						|
       http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
 | 
						|
   Unless required by applicable law or agreed to in writing, software
 | 
						|
   distributed under the License is distributed on an "AS IS" BASIS,
 | 
						|
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | 
						|
   See the License for the specific language governing permissions and
 | 
						|
   limitations under the License.
 | 
						|
*/
 | 
						|
 | 
						|
package linux
 | 
						|
 | 
						|
import (
 | 
						|
	"context"
 | 
						|
	"sync"
 | 
						|
 | 
						|
	"github.com/containerd/cgroups"
 | 
						|
	eventstypes "github.com/containerd/containerd/api/events"
 | 
						|
	"github.com/containerd/containerd/api/types/task"
 | 
						|
	"github.com/containerd/containerd/errdefs"
 | 
						|
	"github.com/containerd/containerd/events/exchange"
 | 
						|
	"github.com/containerd/containerd/identifiers"
 | 
						|
	"github.com/containerd/containerd/log"
 | 
						|
	"github.com/containerd/containerd/runtime"
 | 
						|
	"github.com/containerd/containerd/runtime/v1/shim/client"
 | 
						|
	"github.com/containerd/containerd/runtime/v1/shim/v1"
 | 
						|
	"github.com/containerd/ttrpc"
 | 
						|
	"github.com/containerd/typeurl"
 | 
						|
	"github.com/gogo/protobuf/types"
 | 
						|
	"github.com/pkg/errors"
 | 
						|
)
 | 
						|
 | 
						|
// Task on a linux based system
 | 
						|
type Task struct {
 | 
						|
	mu        sync.Mutex
 | 
						|
	id        string
 | 
						|
	pid       int
 | 
						|
	shim      *client.Client
 | 
						|
	namespace string
 | 
						|
	cg        cgroups.Cgroup
 | 
						|
	events    *exchange.Exchange
 | 
						|
	tasks     *runtime.TaskList
 | 
						|
	bundle    *bundle
 | 
						|
}
 | 
						|
 | 
						|
func newTask(id, namespace string, pid int, shim *client.Client, events *exchange.Exchange, list *runtime.TaskList, bundle *bundle) (*Task, error) {
 | 
						|
	var (
 | 
						|
		err error
 | 
						|
		cg  cgroups.Cgroup
 | 
						|
	)
 | 
						|
	if pid > 0 {
 | 
						|
		cg, err = cgroups.Load(cgroups.V1, cgroups.PidPath(pid))
 | 
						|
		if err != nil && err != cgroups.ErrCgroupDeleted {
 | 
						|
			return nil, err
 | 
						|
		}
 | 
						|
	}
 | 
						|
	return &Task{
 | 
						|
		id:        id,
 | 
						|
		pid:       pid,
 | 
						|
		shim:      shim,
 | 
						|
		namespace: namespace,
 | 
						|
		cg:        cg,
 | 
						|
		events:    events,
 | 
						|
		tasks:     list,
 | 
						|
		bundle:    bundle,
 | 
						|
	}, nil
 | 
						|
}
 | 
						|
 | 
						|
// ID of the task
 | 
						|
func (t *Task) ID() string {
 | 
						|
	return t.id
 | 
						|
}
 | 
						|
 | 
						|
// Namespace of the task
 | 
						|
func (t *Task) Namespace() string {
 | 
						|
	return t.namespace
 | 
						|
}
 | 
						|
 | 
						|
// Delete the task and return the exit status
 | 
						|
func (t *Task) Delete(ctx context.Context) (*runtime.Exit, error) {
 | 
						|
	rsp, err := t.shim.Delete(ctx, empty)
 | 
						|
	if err != nil && !errdefs.IsNotFound(err) {
 | 
						|
		return nil, errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	t.tasks.Delete(ctx, t.id)
 | 
						|
	if err := t.shim.KillShim(ctx); err != nil {
 | 
						|
		log.G(ctx).WithError(err).Error("failed to kill shim")
 | 
						|
	}
 | 
						|
	if err := t.bundle.Delete(); err != nil {
 | 
						|
		log.G(ctx).WithError(err).Error("failed to delete bundle")
 | 
						|
	}
 | 
						|
	t.events.Publish(ctx, runtime.TaskDeleteEventTopic, &eventstypes.TaskDelete{
 | 
						|
		ContainerID: t.id,
 | 
						|
		ExitStatus:  rsp.ExitStatus,
 | 
						|
		ExitedAt:    rsp.ExitedAt,
 | 
						|
		Pid:         rsp.Pid,
 | 
						|
	})
 | 
						|
	return &runtime.Exit{
 | 
						|
		Status:    rsp.ExitStatus,
 | 
						|
		Timestamp: rsp.ExitedAt,
 | 
						|
		Pid:       rsp.Pid,
 | 
						|
	}, nil
 | 
						|
}
 | 
						|
 | 
						|
// Start the task
 | 
						|
func (t *Task) Start(ctx context.Context) error {
 | 
						|
	t.mu.Lock()
 | 
						|
	hasCgroup := t.cg != nil
 | 
						|
	t.mu.Unlock()
 | 
						|
	r, err := t.shim.Start(ctx, &shim.StartRequest{
 | 
						|
		ID: t.id,
 | 
						|
	})
 | 
						|
	if err != nil {
 | 
						|
		return errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	t.pid = int(r.Pid)
 | 
						|
	if !hasCgroup {
 | 
						|
		cg, err := cgroups.Load(cgroups.V1, cgroups.PidPath(t.pid))
 | 
						|
		if err != nil && err != cgroups.ErrCgroupDeleted {
 | 
						|
			return err
 | 
						|
		}
 | 
						|
		t.mu.Lock()
 | 
						|
		if err == cgroups.ErrCgroupDeleted {
 | 
						|
			t.cg = nil
 | 
						|
		} else {
 | 
						|
			t.cg = cg
 | 
						|
		}
 | 
						|
		t.mu.Unlock()
 | 
						|
	}
 | 
						|
	t.events.Publish(ctx, runtime.TaskStartEventTopic, &eventstypes.TaskStart{
 | 
						|
		ContainerID: t.id,
 | 
						|
		Pid:         uint32(t.pid),
 | 
						|
	})
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// State returns runtime information for the task
 | 
						|
func (t *Task) State(ctx context.Context) (runtime.State, error) {
 | 
						|
	response, err := t.shim.State(ctx, &shim.StateRequest{
 | 
						|
		ID: t.id,
 | 
						|
	})
 | 
						|
	if err != nil {
 | 
						|
		if errors.Cause(err) != ttrpc.ErrClosed {
 | 
						|
			return runtime.State{}, errdefs.FromGRPC(err)
 | 
						|
		}
 | 
						|
		return runtime.State{}, errdefs.ErrNotFound
 | 
						|
	}
 | 
						|
	var status runtime.Status
 | 
						|
	switch response.Status {
 | 
						|
	case task.StatusCreated:
 | 
						|
		status = runtime.CreatedStatus
 | 
						|
	case task.StatusRunning:
 | 
						|
		status = runtime.RunningStatus
 | 
						|
	case task.StatusStopped:
 | 
						|
		status = runtime.StoppedStatus
 | 
						|
	case task.StatusPaused:
 | 
						|
		status = runtime.PausedStatus
 | 
						|
	case task.StatusPausing:
 | 
						|
		status = runtime.PausingStatus
 | 
						|
	}
 | 
						|
	return runtime.State{
 | 
						|
		Pid:        response.Pid,
 | 
						|
		Status:     status,
 | 
						|
		Stdin:      response.Stdin,
 | 
						|
		Stdout:     response.Stdout,
 | 
						|
		Stderr:     response.Stderr,
 | 
						|
		Terminal:   response.Terminal,
 | 
						|
		ExitStatus: response.ExitStatus,
 | 
						|
		ExitedAt:   response.ExitedAt,
 | 
						|
	}, nil
 | 
						|
}
 | 
						|
 | 
						|
// Pause the task and all processes
 | 
						|
func (t *Task) Pause(ctx context.Context) error {
 | 
						|
	if _, err := t.shim.Pause(ctx, empty); err != nil {
 | 
						|
		return errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	t.events.Publish(ctx, runtime.TaskPausedEventTopic, &eventstypes.TaskPaused{
 | 
						|
		ContainerID: t.id,
 | 
						|
	})
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// Resume the task and all processes
 | 
						|
func (t *Task) Resume(ctx context.Context) error {
 | 
						|
	if _, err := t.shim.Resume(ctx, empty); err != nil {
 | 
						|
		return errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	t.events.Publish(ctx, runtime.TaskResumedEventTopic, &eventstypes.TaskResumed{
 | 
						|
		ContainerID: t.id,
 | 
						|
	})
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// Kill the task using the provided signal
 | 
						|
//
 | 
						|
// Optionally send the signal to all processes that are a child of the task
 | 
						|
func (t *Task) Kill(ctx context.Context, signal uint32, all bool) error {
 | 
						|
	if _, err := t.shim.Kill(ctx, &shim.KillRequest{
 | 
						|
		ID:     t.id,
 | 
						|
		Signal: signal,
 | 
						|
		All:    all,
 | 
						|
	}); err != nil {
 | 
						|
		return errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// Exec creates a new process inside the task
 | 
						|
func (t *Task) Exec(ctx context.Context, id string, opts runtime.ExecOpts) (runtime.Process, error) {
 | 
						|
	if err := identifiers.Validate(id); err != nil {
 | 
						|
		return nil, errors.Wrapf(err, "invalid exec id")
 | 
						|
	}
 | 
						|
	request := &shim.ExecProcessRequest{
 | 
						|
		ID:       id,
 | 
						|
		Stdin:    opts.IO.Stdin,
 | 
						|
		Stdout:   opts.IO.Stdout,
 | 
						|
		Stderr:   opts.IO.Stderr,
 | 
						|
		Terminal: opts.IO.Terminal,
 | 
						|
		Spec:     opts.Spec,
 | 
						|
	}
 | 
						|
	if _, err := t.shim.Exec(ctx, request); err != nil {
 | 
						|
		return nil, errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	return &Process{
 | 
						|
		id: id,
 | 
						|
		t:  t,
 | 
						|
	}, nil
 | 
						|
}
 | 
						|
 | 
						|
// Pids returns all system level process ids running inside the task
 | 
						|
func (t *Task) Pids(ctx context.Context) ([]runtime.ProcessInfo, error) {
 | 
						|
	resp, err := t.shim.ListPids(ctx, &shim.ListPidsRequest{
 | 
						|
		ID: t.id,
 | 
						|
	})
 | 
						|
	if err != nil {
 | 
						|
		return nil, errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	var processList []runtime.ProcessInfo
 | 
						|
	for _, p := range resp.Processes {
 | 
						|
		processList = append(processList, runtime.ProcessInfo{
 | 
						|
			Pid:  p.Pid,
 | 
						|
			Info: p.Info,
 | 
						|
		})
 | 
						|
	}
 | 
						|
	return processList, nil
 | 
						|
}
 | 
						|
 | 
						|
// ResizePty changes the side of the task's PTY to the provided width and height
 | 
						|
func (t *Task) ResizePty(ctx context.Context, size runtime.ConsoleSize) error {
 | 
						|
	_, err := t.shim.ResizePty(ctx, &shim.ResizePtyRequest{
 | 
						|
		ID:     t.id,
 | 
						|
		Width:  size.Width,
 | 
						|
		Height: size.Height,
 | 
						|
	})
 | 
						|
	if err != nil {
 | 
						|
		err = errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	return err
 | 
						|
}
 | 
						|
 | 
						|
// CloseIO closes the provided IO on the task
 | 
						|
func (t *Task) CloseIO(ctx context.Context) error {
 | 
						|
	_, err := t.shim.CloseIO(ctx, &shim.CloseIORequest{
 | 
						|
		ID:    t.id,
 | 
						|
		Stdin: true,
 | 
						|
	})
 | 
						|
	if err != nil {
 | 
						|
		err = errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	return err
 | 
						|
}
 | 
						|
 | 
						|
// Checkpoint creates a system level dump of the task and process information that can be later restored
 | 
						|
func (t *Task) Checkpoint(ctx context.Context, path string, options *types.Any) error {
 | 
						|
	r := &shim.CheckpointTaskRequest{
 | 
						|
		Path:    path,
 | 
						|
		Options: options,
 | 
						|
	}
 | 
						|
	if _, err := t.shim.Checkpoint(ctx, r); err != nil {
 | 
						|
		return errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	t.events.Publish(ctx, runtime.TaskCheckpointedEventTopic, &eventstypes.TaskCheckpointed{
 | 
						|
		ContainerID: t.id,
 | 
						|
	})
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// Update changes runtime information of a running task
 | 
						|
func (t *Task) Update(ctx context.Context, resources *types.Any) error {
 | 
						|
	if _, err := t.shim.Update(ctx, &shim.UpdateTaskRequest{
 | 
						|
		Resources: resources,
 | 
						|
	}); err != nil {
 | 
						|
		return errdefs.FromGRPC(err)
 | 
						|
	}
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// Process returns a specific process inside the task by the process id
 | 
						|
func (t *Task) Process(ctx context.Context, id string) (runtime.Process, error) {
 | 
						|
	p := &Process{
 | 
						|
		id: id,
 | 
						|
		t:  t,
 | 
						|
	}
 | 
						|
	if _, err := p.State(ctx); err != nil {
 | 
						|
		return nil, err
 | 
						|
	}
 | 
						|
	return p, nil
 | 
						|
}
 | 
						|
 | 
						|
// Stats returns runtime specific system level metric information for the task
 | 
						|
func (t *Task) Stats(ctx context.Context) (*types.Any, error) {
 | 
						|
	t.mu.Lock()
 | 
						|
	defer t.mu.Unlock()
 | 
						|
	if t.cg == nil {
 | 
						|
		return nil, errors.Wrap(errdefs.ErrNotFound, "cgroup does not exist")
 | 
						|
	}
 | 
						|
	stats, err := t.cg.Stat(cgroups.IgnoreNotExist)
 | 
						|
	if err != nil {
 | 
						|
		return nil, err
 | 
						|
	}
 | 
						|
	return typeurl.MarshalAny(stats)
 | 
						|
}
 | 
						|
 | 
						|
// Cgroup returns the underlying cgroup for a linux task
 | 
						|
func (t *Task) Cgroup() (cgroups.Cgroup, error) {
 | 
						|
	t.mu.Lock()
 | 
						|
	defer t.mu.Unlock()
 | 
						|
	if t.cg == nil {
 | 
						|
		return nil, errors.Wrap(errdefs.ErrNotFound, "cgroup does not exist")
 | 
						|
	}
 | 
						|
	return t.cg, nil
 | 
						|
}
 | 
						|
 | 
						|
// Wait for the task to exit returning the status and timestamp
 | 
						|
func (t *Task) Wait(ctx context.Context) (*runtime.Exit, error) {
 | 
						|
	r, err := t.shim.Wait(ctx, &shim.WaitRequest{
 | 
						|
		ID: t.id,
 | 
						|
	})
 | 
						|
	if err != nil {
 | 
						|
		return nil, err
 | 
						|
	}
 | 
						|
	return &runtime.Exit{
 | 
						|
		Timestamp: r.ExitedAt,
 | 
						|
		Status:    r.ExitStatus,
 | 
						|
	}, nil
 | 
						|
}
 |