wehub-resource-sync
e84fb4a79e
container project - merge build / Invoke build (push) Successful in 1s
101 lines
4.0 KiB
Swift
101 lines
4.0 KiB
Swift
//===----------------------------------------------------------------------===//
|
|
// Copyright © 2026 Apple Inc. and the container project authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
import ArgumentParser
|
|
import ContainerAPIClient
|
|
import ContainerPersistence
|
|
import ContainerPlugin
|
|
import Containerization
|
|
import ContainerizationError
|
|
import ContainerizationOCI
|
|
import Foundation
|
|
|
|
extension Application {
|
|
public struct RegistryLogin: AsyncLoggableCommand {
|
|
public init() {}
|
|
public static let configuration = CommandConfiguration(
|
|
commandName: "login",
|
|
abstract: "Log in to a registry"
|
|
)
|
|
|
|
@OptionGroup
|
|
var registry: Flags.Registry
|
|
|
|
@Flag(help: "Take the password from stdin")
|
|
var passwordStdin: Bool = false
|
|
|
|
@Option(name: .shortAndLong, help: "Registry user name")
|
|
var username: String = ""
|
|
|
|
@OptionGroup
|
|
public var logOptions: Flags.Logging
|
|
|
|
@Argument(help: "Registry server name")
|
|
var server: String
|
|
|
|
public func run() async throws {
|
|
let containerSystemConfig: ContainerSystemConfig = try await Application.loadContainerSystemConfig()
|
|
var username = self.username
|
|
var password = ""
|
|
if passwordStdin {
|
|
if username == "" {
|
|
throw ContainerizationError(
|
|
.invalidArgument, message: "must provide --username with --password-stdin")
|
|
}
|
|
guard let passwordData = try FileHandle.standardInput.readToEnd() else {
|
|
throw ContainerizationError(.invalidArgument, message: "failed to read password from stdin")
|
|
}
|
|
password = String(decoding: passwordData, as: UTF8.self).trimmingCharacters(in: .whitespacesAndNewlines)
|
|
}
|
|
let keychain = KeychainHelper(securityDomain: Constants.keychainID)
|
|
if username == "" {
|
|
username = try keychain.userPrompt(hostname: server)
|
|
}
|
|
if password == "" {
|
|
password = try keychain.passwordPrompt()
|
|
print()
|
|
}
|
|
|
|
let server = Reference.resolveDomain(domain: server)
|
|
let scheme = try RequestScheme(registry.scheme).schemeFor(host: server, internalDnsDomain: containerSystemConfig.dns.domain)
|
|
let _url = "\(scheme)://\(server)"
|
|
guard let url = URL(string: _url) else {
|
|
throw ContainerizationError(.invalidArgument, message: "cannot convert \(_url) to URL")
|
|
}
|
|
guard let host = url.host else {
|
|
throw ContainerizationError(.invalidArgument, message: "invalid host \(server)")
|
|
}
|
|
|
|
let client = RegistryClient(
|
|
host: host,
|
|
scheme: scheme.rawValue,
|
|
port: url.port,
|
|
authentication: BasicAuthentication(username: username, password: password),
|
|
retryOptions: .init(
|
|
maxRetries: 10,
|
|
retryInterval: 300_000_000,
|
|
shouldRetry: ({ response in
|
|
response.status.code >= 500
|
|
})
|
|
)
|
|
)
|
|
try await client.ping()
|
|
try keychain.save(hostname: server, username: username, password: password)
|
|
log.info("Login succeeded")
|
|
}
|
|
}
|
|
}
|