d855e2c8ad
Push and pull can now access any cached registry credentials from the auth file Signed-off-by: umohnani8 <umohnani@redhat.com>
98 lines
2.4 KiB
Go
98 lines
2.4 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
|
|
"golang.org/x/crypto/ssh/terminal"
|
|
|
|
"github.com/containers/image/types"
|
|
"github.com/kubernetes-incubator/cri-o/libpod"
|
|
"github.com/kubernetes-incubator/cri-o/libpod/common"
|
|
"github.com/pkg/errors"
|
|
"github.com/sirupsen/logrus"
|
|
"github.com/urfave/cli"
|
|
)
|
|
|
|
var (
|
|
pullFlags = []cli.Flag{
|
|
cli.StringFlag{
|
|
Name: "signature-policy",
|
|
Usage: "`pathname` of signature policy file (not usually used)",
|
|
},
|
|
cli.StringFlag{
|
|
Name: "authfile",
|
|
Usage: "Path of the authentication file. Default is ${XDG_RUNTIME_DIR}/containers/auth.json",
|
|
},
|
|
cli.StringFlag{
|
|
Name: "creds",
|
|
Usage: "`credentials` (USERNAME:PASSWORD) to use for authenticating to a registry",
|
|
},
|
|
}
|
|
|
|
pullDescription = "Pulls an image from a registry and stores it locally.\n" +
|
|
"An image can be pulled using its tag or digest. If a tag is not\n" +
|
|
"specified, the image with the 'latest' tag (if it exists) is pulled."
|
|
pullCommand = cli.Command{
|
|
Name: "pull",
|
|
Usage: "pull an image from a registry",
|
|
Description: pullDescription,
|
|
Flags: pullFlags,
|
|
Action: pullCmd,
|
|
ArgsUsage: "",
|
|
}
|
|
)
|
|
|
|
// pullCmd gets the data from the command line and calls pullImage
|
|
// to copy an image from a registry to a local machine
|
|
func pullCmd(c *cli.Context) error {
|
|
runtime, err := getRuntime(c)
|
|
if err != nil {
|
|
return errors.Wrapf(err, "could not get runtime")
|
|
}
|
|
defer runtime.Shutdown(false)
|
|
|
|
args := c.Args()
|
|
if len(args) == 0 {
|
|
logrus.Errorf("an image name must be specified")
|
|
return nil
|
|
}
|
|
if len(args) > 1 {
|
|
logrus.Errorf("too many arguments. Requires exactly 1")
|
|
return nil
|
|
}
|
|
if err := validateFlags(c, pullFlags); err != nil {
|
|
return err
|
|
}
|
|
image := args[0]
|
|
|
|
var registryCreds *types.DockerAuthConfig
|
|
if c.String("creds") != "" {
|
|
creds, err := common.ParseRegistryCreds(c.String("creds"))
|
|
if err != nil {
|
|
if err == common.ErrNoPassword {
|
|
fmt.Print("Password: ")
|
|
password, err := terminal.ReadPassword(0)
|
|
if err != nil {
|
|
return errors.Wrapf(err, "could not read password from terminal")
|
|
}
|
|
creds.Password = string(password)
|
|
} else {
|
|
return err
|
|
}
|
|
}
|
|
registryCreds = creds
|
|
}
|
|
|
|
options := libpod.CopyOptions{
|
|
SignaturePolicyPath: c.String("signature-policy"),
|
|
AuthFile: c.String("authfile"),
|
|
DockerRegistryOptions: common.DockerRegistryOptions{
|
|
DockerRegistryCreds: registryCreds,
|
|
},
|
|
Writer: os.Stdout,
|
|
}
|
|
|
|
return runtime.PullImage(image, options)
|
|
|
|
}
|