mirror of
https://github.com/moby/moby.git
synced 2026-08-07 16:41:50 +00:00
eeba428939
The bridge driver should figure out whether it's running in a mirrored WSL2 setup, and tell the firewaller. So, move the WSL2-deciding code back into the bridge driver and unit test it there. Use TestIptabler to check the rules are constructed properly. Signed-off-by: Rob Murray <rob.murray@docker.com>
38 lines
1.3 KiB
Go
38 lines
1.3 KiB
Go
package bridge
|
|
|
|
import (
|
|
"context"
|
|
"os"
|
|
|
|
"github.com/containerd/log"
|
|
"github.com/docker/docker/internal/nlwrap"
|
|
"github.com/pkg/errors"
|
|
"github.com/vishvananda/netlink"
|
|
)
|
|
|
|
// Path to the executable installed in Linux under WSL2 that reports on
|
|
// WSL config. https://github.com/microsoft/WSL/releases/tag/2.0.4
|
|
// Can be modified by tests.
|
|
var wslinfoPath = "/usr/bin/wslinfo"
|
|
|
|
// isRunningUnderWSL2MirroredMode returns true if the host Linux appears to be
|
|
// running under Windows WSL2 with mirrored mode networking. If a loopback0
|
|
// device exists, and there's an executable at /usr/bin/wslinfo, infer that
|
|
// this is WSL2 with mirrored networking. ("wslinfo --networking-mode" reports
|
|
// "mirrored", but applying the workaround for WSL2's loopback device when it's
|
|
// not needed is low risk, compared with executing wslinfo with dockerd's
|
|
// elevated permissions.)
|
|
func isRunningUnderWSL2MirroredMode(ctx context.Context) bool {
|
|
if _, err := nlwrap.LinkByName("loopback0"); err != nil {
|
|
if !errors.As(err, &netlink.LinkNotFoundError{}) {
|
|
log.G(ctx).WithError(err).Warn("Failed to check for WSL interface")
|
|
}
|
|
return false
|
|
}
|
|
stat, err := os.Stat(wslinfoPath)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
return stat.Mode().IsRegular() && (stat.Mode().Perm()&0o111) != 0
|
|
}
|