package imprt import ( "fmt" "os" "path" "strconv" "strings" "github.com/containers/image/v5/types" "github.com/hpcng/warewulf/internal/pkg/container" "github.com/hpcng/warewulf/internal/pkg/node" "github.com/hpcng/warewulf/internal/pkg/util" "github.com/hpcng/warewulf/internal/pkg/warewulfd" "github.com/hpcng/warewulf/internal/pkg/wwlog" "github.com/pkg/errors" "github.com/spf13/cobra" ) func setOCICredentials(sCtx *types.SystemContext) error { username, userSet := os.LookupEnv("WAREWULF_OCI_USERNAME") password, passSet := os.LookupEnv("WAREWULF_OCI_PASSWORD") if userSet || passSet { if userSet && passSet { sCtx.DockerAuthConfig = &types.DockerAuthConfig{ Username: username, Password: password, } } else { return fmt.Errorf("oci username and password env vars must be specified together") } } return nil } func setNoHTTPSOpts(sCtx *types.SystemContext) error { val, ok := os.LookupEnv("WAREWULF_OCI_NOHTTPS") if !ok { return nil } noHTTPS, err := strconv.ParseBool(val) if err != nil { return fmt.Errorf("while parsing insecure http option: %v", err) } // only set this if we want to disable, otherwise leave as undefined if noHTTPS { sCtx.DockerInsecureSkipTLSVerify = types.NewOptionalBool(true) } sCtx.OCIInsecureSkipTLSVerify = noHTTPS return nil } func getSystemContext() (sCtx *types.SystemContext, err error) { sCtx = &types.SystemContext{} if err := setOCICredentials(sCtx); err != nil { return nil, err } if err := setNoHTTPSOpts(sCtx); err != nil { return nil, err } return sCtx, nil } func CobraRunE(cmd *cobra.Command, args []string) error { var name string uri := args[0] if len(args) == 2 { name = args[1] } else { name = path.Base(uri) fmt.Printf("Setting VNFS name: %s\n", name) } if !container.ValidName(name) { wwlog.Printf(wwlog.ERROR, "VNFS name contains illegal characters: %s\n", name) os.Exit(1) } fullPath := container.SourceDir(name) if util.IsDir(fullPath) { if SetForce { fmt.Printf("Overwriting existing VNFS\n") err := os.RemoveAll(fullPath) if err != nil { wwlog.Printf(wwlog.ERROR, "%s\n", err) os.Exit(1) } } else if SetUpdate { fmt.Printf("Updating existing VNFS\n") } else { wwlog.Printf(wwlog.ERROR, "VNFS Name exists, specify --force, --update, or choose a different name: %s\n", name) os.Exit(1) } } else if strings.HasPrefix(uri, "docker://") || strings.HasPrefix(uri, "docker-daemon://") || strings.HasPrefix(uri, "file://") || util.IsFile(uri) { sCtx, err := getSystemContext() if err != nil { wwlog.Printf(wwlog.ERROR, "%s\n", err) } err = container.ImportDocker(uri, name, sCtx) if err != nil { wwlog.Printf(wwlog.ERROR, "Could not import image: %s\n", err) _ = container.DeleteSource(name) os.Exit(1) } } else if util.IsDir(uri) { err := container.ImportDirectory(uri, name) if err != nil { wwlog.Printf(wwlog.ERROR, "Could not import image: %s\n", err) _ = container.DeleteSource(name) os.Exit(1) } } else { wwlog.Printf(wwlog.ERROR, "Invalid dir or uri: %s\n", uri) os.Exit(1) } fmt.Printf("Updating the container's /etc/resolv.conf\n") err := util.CopyFile("/etc/resolv.conf", path.Join(container.RootFsDir(name), "/etc/resolv.conf")) if err != nil { wwlog.Printf(wwlog.WARN, "Could not copy /etc/resolv.conf into container: %s\n", err) } err = container.SyncUids(name, !NoSyncUser) if err != nil && !NoSyncUser { wwlog.Printf(wwlog.ERROR, "Error in user sync, fix error and run 'syncuser' manually: %s\n", err) os.Exit(1) } fmt.Printf("Building container: %s\n", name) err = container.Build(name, true) if err != nil { wwlog.Printf(wwlog.ERROR, "Could not build container %s: %s\n", name, err) os.Exit(1) } if SetDefault { nodeDB, err := node.New() if err != nil { wwlog.Printf(wwlog.ERROR, "Could not open node configuration: %s\n", err) os.Exit(1) } //TODO: Don't loop through profiles, instead have a nodeDB function that goes directly to the map profiles, _ := nodeDB.FindAllProfiles() for _, profile := range profiles { wwlog.Printf(wwlog.DEBUG, "Looking for profile default: %s\n", profile.Id.Get()) if profile.Id.Get() == "default" { wwlog.Printf(wwlog.DEBUG, "Found profile default, setting container name to: %s\n", name) profile.ContainerName.Set(name) err := nodeDB.ProfileUpdate(profile) if err != nil { return errors.Wrap(err, "failed to update profile") } } } err = nodeDB.Persist() if err != nil { return errors.Wrap(err, "failed to persist nodedb") } fmt.Printf("Set default profile to container: %s\n", name) err = warewulfd.DaemonReload() if err != nil { return errors.Wrap(err, "failed to reload warewulf daemon") } } return nil }