mirror of
https://github.com/containerd/containerd.git
synced 2026-11-06 05:17:02 +00:00
Eshaan Mathur
203578e2eb
- Populate the NRI container's Image field from the image identity recorded in the container metadata at creation, so plugins can identify and verify the container's image by digest. The following fields have been added:
- name: The image reference (ex. registry.k8s.io/pause:3.10)
- digest: Digest the image reference resolves to. Based on the image reference, it is a digest of one of:
- image index
- OCI: application/vnd.oci.image.index.v1+json
- Docker: application/vnd.docker.distribution.manifest.list.v2+json
- manifest
- OCI: application/vnd.oci.image.manifest.v1+json
- Docker: application/vnd.docker.distribution.manifest.v2+json
- config_digest: The image configuration digest
- OCI: application/vnd.oci.image.config.v1+json
- Docker: application/vnd.docker.container.image.v1+json
Signed-off-by: Eshaan Mathur <eshaanm25@gmail.com>
102 lines
2.7 KiB
Go
102 lines
2.7 KiB
Go
/*
|
|
Copyright The containerd Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package nri
|
|
|
|
import (
|
|
nri "github.com/containerd/nri/pkg/adaptation"
|
|
)
|
|
|
|
type ContainerStatus struct {
|
|
State nri.ContainerState
|
|
Reason string
|
|
Message string
|
|
Pid uint32
|
|
CreatedAt int64
|
|
StartedAt int64
|
|
FinishedAt int64
|
|
ExitCode int32
|
|
}
|
|
|
|
// Container interface for interacting with NRI.
|
|
type Container interface {
|
|
GetDomain() string
|
|
|
|
GetPodSandboxID() string
|
|
GetID() string
|
|
GetName() string
|
|
GetStatus() *ContainerStatus
|
|
GetLabels() map[string]string
|
|
GetAnnotations() map[string]string
|
|
GetArgs() []string
|
|
GetEnv() []string
|
|
GetMounts() []*nri.Mount
|
|
GetHooks() *nri.Hooks
|
|
GetLinuxContainer() LinuxContainer
|
|
GetCDIDevices() []*nri.CDIDevice
|
|
GetRlimits() []*nri.POSIXRlimit
|
|
GetUser() *nri.User
|
|
GetImage() *nri.Image
|
|
}
|
|
|
|
type LinuxContainer interface {
|
|
GetLinuxNamespaces() []*nri.LinuxNamespace
|
|
GetLinuxDevices() []*nri.LinuxDevice
|
|
GetLinuxResources() *nri.LinuxResources
|
|
GetOOMScoreAdj() *int
|
|
GetCgroupsPath() string
|
|
GetIOPriority() *nri.LinuxIOPriority
|
|
GetScheduler() *nri.LinuxScheduler
|
|
GetNetDevices() map[string]*nri.LinuxNetDevice
|
|
GetRdt() *nri.LinuxRdt
|
|
GetSeccompProfile() *nri.SecurityProfile
|
|
GetSysctl() map[string]string
|
|
GetSeccompPolicy() *nri.LinuxSeccomp
|
|
}
|
|
|
|
func commonContainerToNRI(ctr Container) *nri.Container {
|
|
status := ctr.GetStatus()
|
|
return &nri.Container{
|
|
Id: ctr.GetID(),
|
|
PodSandboxId: ctr.GetPodSandboxID(),
|
|
Name: ctr.GetName(),
|
|
State: status.State,
|
|
Labels: ctr.GetLabels(),
|
|
Annotations: ctr.GetAnnotations(),
|
|
Args: ctr.GetArgs(),
|
|
Env: ctr.GetEnv(),
|
|
Mounts: ctr.GetMounts(),
|
|
Hooks: ctr.GetHooks(),
|
|
CDIDevices: ctr.GetCDIDevices(),
|
|
Pid: status.Pid,
|
|
CreatedAt: status.CreatedAt,
|
|
StartedAt: status.StartedAt,
|
|
FinishedAt: status.FinishedAt,
|
|
ExitCode: status.ExitCode,
|
|
Rlimits: ctr.GetRlimits(),
|
|
User: ctr.GetUser(),
|
|
Image: ctr.GetImage(),
|
|
}
|
|
}
|
|
|
|
func containersToNRI(ctrList []Container) []*nri.Container {
|
|
ctrs := make([]*nri.Container, len(ctrList))
|
|
for i, ctr := range ctrList {
|
|
ctrs[i] = containerToNRI(ctr)
|
|
}
|
|
return ctrs
|
|
}
|