mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-08-27 18:57:53 +00:00
606a5cec8f
As discussed [1], the runlabel command should execute any command specified in a label. The reasoning behind is that we cannot restrict which options are passed to Podman which thereby has full access to the host (runlabels must be used with care). With the updated semantics, runlabel will substitute the commands with a basepath equal to "docker" or "podman" with "/proc/self/exe", and otherwise leave the command unchanged to execute any other command on the host. [1] https://github.com/containers/libpod/pull/1607#issuecomment-428321382 Signed-off-by: Valentin Rothberg <vrothberg@suse.com>
93 lines
2.2 KiB
Go
93 lines
2.2 KiB
Go
package shared
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
)
|
|
|
|
func substituteCommand(cmd string) (string, error) {
|
|
// If cmd is an absolute or relative path, check if the file exists.
|
|
// Throw an error if it doesn't exist.
|
|
if strings.Contains(cmd, "/") || strings.HasPrefix(cmd, ".") {
|
|
res, err := filepath.Abs(cmd)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
if _, err := os.Stat(res); !os.IsNotExist(err) {
|
|
return res, nil
|
|
} else if err != nil {
|
|
return "", err
|
|
}
|
|
}
|
|
|
|
// Replace cmd with "/proc/self/exe" if "podman" or "docker" is being
|
|
// used. Otherwise, leave the command unchanged.
|
|
switch cmd {
|
|
case "podman":
|
|
fallthrough
|
|
case "docker":
|
|
return "/proc/self/exe", nil
|
|
default:
|
|
return cmd, nil
|
|
}
|
|
}
|
|
|
|
// GenerateCommand takes a label (string) and converts it to an executable command
|
|
func GenerateCommand(command, imageName, name string) ([]string, error) {
|
|
var (
|
|
newCommand []string
|
|
)
|
|
if name == "" {
|
|
name = imageName
|
|
}
|
|
cmd := strings.Split(command, " ")
|
|
|
|
prog, err := substituteCommand(cmd[0])
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
newCommand = append(newCommand, prog)
|
|
|
|
for _, arg := range cmd[1:] {
|
|
var newArg string
|
|
switch arg {
|
|
case "IMAGE":
|
|
newArg = imageName
|
|
case "IMAGE=IMAGE":
|
|
newArg = fmt.Sprintf("IMAGE=%s", imageName)
|
|
case "IMAGE=$IMAGE":
|
|
newArg = fmt.Sprintf("IMAGE=%s", imageName)
|
|
case "NAME":
|
|
newArg = name
|
|
case "NAME=NAME":
|
|
newArg = fmt.Sprintf("NAME=%s", name)
|
|
case "NAME=$NAME":
|
|
newArg = fmt.Sprintf("NAME=%s", name)
|
|
default:
|
|
newArg = arg
|
|
}
|
|
newCommand = append(newCommand, newArg)
|
|
}
|
|
return newCommand, nil
|
|
}
|
|
|
|
// GenerateRunEnvironment merges the current environment variables with optional
|
|
// environment variables provided by the user
|
|
func GenerateRunEnvironment(name, imageName string, opts map[string]string) []string {
|
|
newEnv := os.Environ()
|
|
newEnv = append(newEnv, fmt.Sprintf("NAME=%s", name))
|
|
newEnv = append(newEnv, fmt.Sprintf("IMAGE=%s", imageName))
|
|
|
|
if opts["opt1"] != "" {
|
|
newEnv = append(newEnv, fmt.Sprintf("OPT1=%s", opts["opt1"]))
|
|
}
|
|
if opts["opt2"] != "" {
|
|
newEnv = append(newEnv, fmt.Sprintf("OPT2=%s", opts["opt2"]))
|
|
}
|
|
if opts["opt3"] != "" {
|
|
newEnv = append(newEnv, fmt.Sprintf("OPT3=%s", opts["opt3"]))
|
|
}
|
|
return newEnv
|
|
}
|