Move network aspect of links into driver as a job

Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)

container.go

@@ -670,10 +670,6 @@ func (container *Container) Start() (err error) {
 	}
 
 	if len(children) > 0 {
-		panic("todo crosbymichael")
-		/*
-			            linking is specific to iptables and the bridge we need to move this to a job
-
 		container.activeLinks = make(map[string]*Link, len(children))
 
 		// If we encounter an error make sure that we rollback any network
@@ -686,7 +682,7 @@ func (container *Container) Start() (err error) {
 		}
 
 		for p, child := range children {
-							link, err := NewLink(container, child, p, runtime.networkManager.bridgeIface)
+			link, err := NewLink(container, child, p, runtime.eng)
 			if err != nil {
 				rollback()
 				return err
@@ -702,7 +698,6 @@ func (container *Container) Start() (err error) {
 				env = append(env, envVar)
 			}
 		}
-		*/
 	}
 
 	for _, elem := range container.Config.Env {

links.go

@@ -2,7 +2,7 @@ package docker
 
 import (
 	"fmt"
-	"github.com/dotcloud/docker/pkg/iptables"
+	"github.com/dotcloud/docker/engine"
 	"path"
 	"strings"
 )
@@ -11,13 +11,13 @@ type Link struct {
 	ParentIP         string
 	ChildIP          string
 	Name             string
-	BridgeInterface  string
 	ChildEnvironment []string
 	Ports            []Port
 	IsEnabled        bool
+	eng              *engine.Engine
 }
 
-func NewLink(parent, child *Container, name, bridgeInterface string) (*Link, error) {
+func NewLink(parent, child *Container, name string, eng *engine.Engine) (*Link, error) {
 	if parent.ID == child.ID {
 		return nil, fmt.Errorf("Cannot link to self: %s == %s", parent.ID, child.ID)
 	}
@@ -33,12 +33,12 @@ func NewLink(parent, child *Container, name, bridgeInterface string) (*Link, err
 	}
 
 	l := &Link{
-		BridgeInterface:  bridgeInterface,
 		Name:             name,
 		ChildIP:          child.NetworkSettings.IPAddress,
 		ParentIP:         parent.NetworkSettings.IPAddress,
 		ChildEnvironment: child.Config.Env,
 		Ports:            ports,
+		eng:              eng,
 	}
 	return l, nil
 
@@ -119,18 +119,21 @@ func (l *Link) Disable() {
 }
 
 func (l *Link) toggle(action string, ignoreErrors bool) error {
-	for _, p := range l.Ports {
+	job := l.eng.Job("link", action)
-		if output, err := iptables.Raw(action, "FORWARD",
+
-			"-i", l.BridgeInterface, "-o", l.BridgeInterface,
+	job.Setenv("ParentIP", l.ParentIP)
-			"-p", p.Proto(),
+	job.Setenv("ChildIP", l.ChildIP)
-			"-s", l.ParentIP,
+	job.SetenvBool("IgnoreErrors", ignoreErrors)
-			"--dport", p.Port(),
+
-			"-d", l.ChildIP,
+	out := make([]string, len(l.Ports))
-			"-j", "ACCEPT"); !ignoreErrors && err != nil {
+	for i, p := range l.Ports {
-			return err
+		out[i] = fmt.Sprintf("%s/%s", p.Port(), p.Proto())
-		} else if len(output) != 0 {
-			return fmt.Errorf("Error toggle iptables forward: %s", output)
 	}
+	job.SetenvList("Ports", out)
+
+	if err := job.Run(); err != nil {
+		// TODO: get ouput from job
+		return err
 	}
 	return nil
 }

networkdriver/lxc/driver.go

@@ -13,6 +13,7 @@ import (
 	"io/ioutil"
 	"log"
 	"net"
+	"strings"
 	"syscall"
 	"unsafe"
 )
@@ -137,6 +138,7 @@ func InitDriver(job *engine.Job) engine.Status {
 		"allocate_interface": Allocate,
 		"release_interface":  Release,
 		"allocate_port":      AllocatePort,
+		"link":               LinkContainers,
 	} {
 		if err := job.Eng.Register(name, f); err != nil {
 			job.Error(err)
@@ -423,3 +425,35 @@ func AllocatePort(job *engine.Job) engine.Status {
 
 	return engine.StatusOK
 }
+
+func LinkContainers(job *engine.Job) engine.Status {
+	var (
+		action       = job.Args[0]
+		childIP      = job.Getenv("ChildIP")
+		parentIP     = job.Getenv("ParentIP")
+		ignoreErrors = job.GetenvBool("IgnoreErrors")
+		ports        = job.GetenvList("Ports")
+	)
+	split := func(p string) (string, string) {
+		parts := strings.Split(p, "/")
+		return parts[0], parts[1]
+	}
+
+	for _, p := range ports {
+		port, proto := split(p)
+		if output, err := iptables.Raw(action, "FORWARD",
+			"-i", bridgeIface, "-o", bridgeIface,
+			"-p", proto,
+			"-s", parentIP,
+			"--dport", port,
+			"-d", childIP,
+			"-j", "ACCEPT"); !ignoreErrors && err != nil {
+			job.Error(err)
+			return engine.StatusErr
+		} else if len(output) != 0 {
+			job.Errorf("Error toggle iptables forward: %s", output)
+			return engine.StatusErr
+		}
+	}
+	return engine.StatusOK
+}