171 lines
6.1 KiB
Go
171 lines
6.1 KiB
Go
package images
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/containers/common/pkg/auth"
|
|
"github.com/containers/common/pkg/completion"
|
|
"github.com/containers/image/v5/types"
|
|
"github.com/containers/podman/v3/cmd/podman/common"
|
|
"github.com/containers/podman/v3/cmd/podman/registry"
|
|
"github.com/containers/podman/v3/cmd/podman/utils"
|
|
"github.com/containers/podman/v3/pkg/domain/entities"
|
|
"github.com/containers/podman/v3/pkg/util"
|
|
"github.com/pkg/errors"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
// pullOptionsWrapper wraps entities.ImagePullOptions and prevents leaking
|
|
// CLI-only fields into the API types.
|
|
type pullOptionsWrapper struct {
|
|
entities.ImagePullOptions
|
|
TLSVerifyCLI bool // CLI only
|
|
CredentialsCLI string
|
|
}
|
|
|
|
var (
|
|
pullOptions = pullOptionsWrapper{}
|
|
pullDescription = `Pulls an image from a registry and stores it locally.
|
|
|
|
An image can be pulled by tag or digest. If a tag is not specified, the image with the 'latest' tag is pulled.`
|
|
|
|
// Command: podman pull
|
|
pullCmd = &cobra.Command{
|
|
Use: "pull [options] IMAGE [IMAGE...]",
|
|
Args: cobra.MinimumNArgs(1),
|
|
Short: "Pull an image from a registry",
|
|
Long: pullDescription,
|
|
RunE: imagePull,
|
|
ValidArgsFunction: common.AutocompleteImages,
|
|
Example: `podman pull imageName
|
|
podman pull fedora:latest`,
|
|
}
|
|
|
|
// Command: podman image pull
|
|
// It's basically a clone of `pullCmd` with the exception of being a
|
|
// child of the images command.
|
|
imagesPullCmd = &cobra.Command{
|
|
Use: pullCmd.Use,
|
|
Args: pullCmd.Args,
|
|
Short: pullCmd.Short,
|
|
Long: pullCmd.Long,
|
|
RunE: pullCmd.RunE,
|
|
ValidArgsFunction: pullCmd.ValidArgsFunction,
|
|
Example: `podman image pull imageName
|
|
podman image pull fedora:latest`,
|
|
}
|
|
)
|
|
|
|
func init() {
|
|
// pull
|
|
registry.Commands = append(registry.Commands, registry.CliCommand{
|
|
Command: pullCmd,
|
|
})
|
|
pullFlags(pullCmd)
|
|
|
|
// images pull
|
|
registry.Commands = append(registry.Commands, registry.CliCommand{
|
|
Command: imagesPullCmd,
|
|
Parent: imageCmd,
|
|
})
|
|
pullFlags(imagesPullCmd)
|
|
}
|
|
|
|
// pullFlags set the flags for the pull command.
|
|
func pullFlags(cmd *cobra.Command) {
|
|
flags := cmd.Flags()
|
|
|
|
flags.BoolVar(&pullOptions.AllTags, "all-tags", false, "All tagged images in the repository will be pulled")
|
|
|
|
credsFlagName := "creds"
|
|
flags.StringVar(&pullOptions.CredentialsCLI, credsFlagName, "", "`Credentials` (USERNAME:PASSWORD) to use for authenticating to a registry")
|
|
_ = cmd.RegisterFlagCompletionFunc(credsFlagName, completion.AutocompleteNone)
|
|
|
|
archFlagName := "arch"
|
|
flags.StringVar(&pullOptions.Arch, archFlagName, "", "Use `ARCH` instead of the architecture of the machine for choosing images")
|
|
_ = cmd.RegisterFlagCompletionFunc(archFlagName, completion.AutocompleteArch)
|
|
|
|
osFlagName := "os"
|
|
flags.StringVar(&pullOptions.OS, osFlagName, "", "Use `OS` instead of the running OS for choosing images")
|
|
_ = cmd.RegisterFlagCompletionFunc(osFlagName, completion.AutocompleteOS)
|
|
|
|
variantFlagName := "variant"
|
|
flags.StringVar(&pullOptions.Variant, variantFlagName, "", " use VARIANT instead of the running architecture variant for choosing images")
|
|
_ = cmd.RegisterFlagCompletionFunc(variantFlagName, completion.AutocompleteNone)
|
|
|
|
platformFlagName := "platform"
|
|
flags.String(platformFlagName, "", "Specify the platform for selecting the image. (Conflicts with arch and os)")
|
|
_ = cmd.RegisterFlagCompletionFunc(platformFlagName, completion.AutocompleteNone)
|
|
|
|
flags.Bool("disable-content-trust", false, "This is a Docker specific option and is a NOOP")
|
|
flags.BoolVarP(&pullOptions.Quiet, "quiet", "q", false, "Suppress output information when pulling images")
|
|
flags.StringVar(&pullOptions.SignaturePolicy, "signature-policy", "", "`Pathname` of signature policy file (not usually used)")
|
|
flags.BoolVar(&pullOptions.TLSVerifyCLI, "tls-verify", true, "Require HTTPS and verify certificates when contacting registries")
|
|
|
|
authfileFlagName := "authfile"
|
|
flags.StringVar(&pullOptions.Authfile, authfileFlagName, auth.GetDefaultAuthFile(), "Path of the authentication file. Use REGISTRY_AUTH_FILE environment variable to override")
|
|
_ = cmd.RegisterFlagCompletionFunc(authfileFlagName, completion.AutocompleteDefault)
|
|
|
|
if !registry.IsRemote() {
|
|
certDirFlagName := "cert-dir"
|
|
flags.StringVar(&pullOptions.CertDir, certDirFlagName, "", "`Pathname` of a directory containing TLS certificates and keys")
|
|
_ = cmd.RegisterFlagCompletionFunc(certDirFlagName, completion.AutocompleteDefault)
|
|
}
|
|
_ = flags.MarkHidden("signature-policy")
|
|
}
|
|
|
|
// imagePull is implement the command for pulling images.
|
|
func imagePull(cmd *cobra.Command, args []string) error {
|
|
// TLS verification in c/image is controlled via a `types.OptionalBool`
|
|
// which allows for distinguishing among set-true, set-false, unspecified
|
|
// which is important to implement a sane way of dealing with defaults of
|
|
// boolean CLI flags.
|
|
if cmd.Flags().Changed("tls-verify") {
|
|
pullOptions.SkipTLSVerify = types.NewOptionalBool(!pullOptions.TLSVerifyCLI)
|
|
}
|
|
if pullOptions.Authfile != "" {
|
|
if _, err := os.Stat(pullOptions.Authfile); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
platform, err := cmd.Flags().GetString("platform")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if platform != "" {
|
|
if pullOptions.Arch != "" || pullOptions.OS != "" {
|
|
return errors.Errorf("--platform option can not be specified with --arch or --os")
|
|
}
|
|
split := strings.SplitN(platform, "/", 2)
|
|
pullOptions.OS = split[0]
|
|
if len(split) > 1 {
|
|
pullOptions.Arch = split[1]
|
|
}
|
|
}
|
|
|
|
if pullOptions.CredentialsCLI != "" {
|
|
creds, err := util.ParseRegistryCreds(pullOptions.CredentialsCLI)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
pullOptions.Username = creds.Username
|
|
pullOptions.Password = creds.Password
|
|
}
|
|
// Let's do all the remaining Yoga in the API to prevent us from
|
|
// scattering logic across (too) many parts of the code.
|
|
var errs utils.OutputErrors
|
|
for _, arg := range args {
|
|
pullReport, err := registry.ImageEngine().Pull(registry.GetContext(), arg, pullOptions.ImagePullOptions)
|
|
if err != nil {
|
|
errs = append(errs, err)
|
|
continue
|
|
}
|
|
for _, img := range pullReport.Images {
|
|
fmt.Println(img)
|
|
}
|
|
}
|
|
return errs.PrintErrors()
|
|
}
|