501a898e0e
Now that listeners is no longer an internal of the client, make it less Docker-specific (despite there still being some open questions as how to deal with some of the warnings that listeners has to emit). We should move as much of the Docker-specific stuff (especially the port allocation) to docker/ where it belongs (or maybe pass a check function). Signed-off-by: Aleksa Sarai <asarai@suse.de>
24 lines
688 B
Go
24 lines
688 B
Go
package listeners
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"net"
|
|
|
|
"github.com/Sirupsen/logrus"
|
|
"github.com/docker/go-connections/sockets"
|
|
)
|
|
|
|
func initTCPSocket(addr string, tlsConfig *tls.Config) (l net.Listener, err error) {
|
|
if tlsConfig == nil || tlsConfig.ClientAuth != tls.RequireAndVerifyClientCert {
|
|
// TODO: Move this outside pkg/listeners since it's Docker-specific.
|
|
// ... and slightly scary.
|
|
logrus.Warn("/!\\ DON'T BIND ON ANY IP ADDRESS WITHOUT setting -tlsverify IF YOU DON'T KNOW WHAT YOU'RE DOING /!\\")
|
|
}
|
|
if l, err = sockets.NewTCPSocket(addr, tlsConfig); err != nil {
|
|
return nil, err
|
|
}
|
|
if err := allocateDaemonPort(addr); err != nil {
|
|
return nil, err
|
|
}
|
|
return
|
|
}
|