528a9d87ac
Often the socket is put into the directory /run/containerd. When this directory does not exist, it gets created with the default uid/gid and permission 0660. When the user has specified a uid or gid, this should be used to set the ownership of that parent directory and the permissions should be 0770. This worked in a previous version of containerd but regressed after a refactor. Signed-off-by: Derek McGowan <derek@mcgstyle.net>
60 lines
1.1 KiB
Go
60 lines
1.1 KiB
Go
// +build !windows
|
|
|
|
package sys
|
|
|
|
import (
|
|
"net"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"golang.org/x/sys/unix"
|
|
)
|
|
|
|
// CreateUnixSocket creates a unix socket and returns the listener
|
|
func CreateUnixSocket(path string) (net.Listener, error) {
|
|
if err := os.MkdirAll(filepath.Dir(path), 0660); err != nil {
|
|
return nil, err
|
|
}
|
|
if err := unix.Unlink(path); err != nil && !os.IsNotExist(err) {
|
|
return nil, err
|
|
}
|
|
return net.Listen("unix", path)
|
|
}
|
|
|
|
// GetLocalListener returns a listerner out of a unix socket.
|
|
func GetLocalListener(path string, uid, gid int) (net.Listener, error) {
|
|
// Ensure parent directory is created
|
|
if err := mkdirAs(filepath.Dir(path), uid, gid); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
l, err := CreateUnixSocket(path)
|
|
if err != nil {
|
|
return l, err
|
|
}
|
|
|
|
if err := os.Chmod(path, 0660); err != nil {
|
|
l.Close()
|
|
return nil, err
|
|
}
|
|
|
|
if err := os.Chown(path, uid, gid); err != nil {
|
|
l.Close()
|
|
return nil, err
|
|
}
|
|
|
|
return l, nil
|
|
}
|
|
|
|
func mkdirAs(path string, uid, gid int) error {
|
|
if _, err := os.Stat(path); err == nil || !os.IsNotExist(err) {
|
|
return err
|
|
}
|
|
|
|
if err := os.Mkdir(path, 0770); err != nil {
|
|
return err
|
|
}
|
|
|
|
return os.Chown(path, uid, gid)
|
|
}
|