mirror of
https://github.com/containers/podman.git
synced 2025-12-02 02:58:03 +08:00
vendor latest buildah
Pulls in fixes for determining insecure registries by removing redundant wrapper code and instead using the API of sysregistriesv2 directly. Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
This commit is contained in:
14
vendor/github.com/containers/buildah/common.go
generated
vendored
14
vendor/github.com/containers/buildah/common.go
generated
vendored
@@ -6,10 +6,8 @@ import (
|
||||
"path/filepath"
|
||||
|
||||
cp "github.com/containers/image/copy"
|
||||
"github.com/containers/image/transports"
|
||||
"github.com/containers/image/types"
|
||||
"github.com/containers/libpod/pkg/rootless"
|
||||
"github.com/sirupsen/logrus"
|
||||
)
|
||||
|
||||
const (
|
||||
@@ -34,12 +32,6 @@ func getCopyOptions(reportWriter io.Writer, sourceReference types.ImageReference
|
||||
|
||||
}
|
||||
}
|
||||
sourceInsecure, err := isReferenceInsecure(sourceReference, sourceCtx)
|
||||
if err != nil {
|
||||
logrus.Debugf("error determining if registry for %q is insecure: %v", transports.ImageName(sourceReference), err)
|
||||
} else if sourceInsecure {
|
||||
sourceCtx.OCIInsecureSkipTLSVerify = true
|
||||
}
|
||||
|
||||
destinationCtx := &types.SystemContext{}
|
||||
if destinationSystemContext != nil {
|
||||
@@ -51,12 +43,6 @@ func getCopyOptions(reportWriter io.Writer, sourceReference types.ImageReference
|
||||
}
|
||||
}
|
||||
}
|
||||
destinationInsecure, err := isReferenceInsecure(destinationReference, destinationCtx)
|
||||
if err != nil {
|
||||
logrus.Debugf("error determining if registry for %q is insecure: %v", transports.ImageName(destinationReference), err)
|
||||
} else if destinationInsecure {
|
||||
destinationCtx.OCIInsecureSkipTLSVerify = true
|
||||
}
|
||||
|
||||
return &cp.Options{
|
||||
ReportWriter: reportWriter,
|
||||
|
||||
23
vendor/github.com/containers/buildah/util.go
generated
vendored
23
vendor/github.com/containers/buildah/util.go
generated
vendored
@@ -173,24 +173,6 @@ func (b *Builder) tarPath() func(path string) (io.ReadCloser, error) {
|
||||
}
|
||||
}
|
||||
|
||||
// isRegistryInsecure checks if the named registry is marked as not secure
|
||||
func isRegistryInsecure(registry string, sc *types.SystemContext) (bool, error) {
|
||||
reginfo, err := sysregistriesv2.FindRegistry(sc, registry)
|
||||
if err != nil {
|
||||
return false, errors.Wrapf(err, "unable to parse the registries configuration (%s)", sysregistries.RegistriesConfPath(sc))
|
||||
}
|
||||
if reginfo != nil {
|
||||
if reginfo.Insecure {
|
||||
logrus.Debugf("registry %q is marked insecure in registries configuration %q", registry, sysregistries.RegistriesConfPath(sc))
|
||||
} else {
|
||||
logrus.Debugf("registry %q is not marked insecure in registries configuration %q", registry, sysregistries.RegistriesConfPath(sc))
|
||||
}
|
||||
return reginfo.Insecure, nil
|
||||
}
|
||||
logrus.Debugf("registry %q is not listed in registries configuration %q, assuming it's secure", registry, sysregistries.RegistriesConfPath(sc))
|
||||
return false, nil
|
||||
}
|
||||
|
||||
// isRegistryBlocked checks if the named registry is marked as blocked
|
||||
func isRegistryBlocked(registry string, sc *types.SystemContext) (bool, error) {
|
||||
reginfo, err := sysregistriesv2.FindRegistry(sc, registry)
|
||||
@@ -221,11 +203,6 @@ func isReferenceSomething(ref types.ImageReference, sc *types.SystemContext, wha
|
||||
return false, nil
|
||||
}
|
||||
|
||||
// isReferenceInsecure checks if the registry part of a reference is insecure
|
||||
func isReferenceInsecure(ref types.ImageReference, sc *types.SystemContext) (bool, error) {
|
||||
return isReferenceSomething(ref, sc, isRegistryInsecure)
|
||||
}
|
||||
|
||||
// isReferenceBlocked checks if the registry part of a reference is blocked
|
||||
func isReferenceBlocked(ref types.ImageReference, sc *types.SystemContext) (bool, error) {
|
||||
if ref != nil && ref.Transport() != nil {
|
||||
|
||||
Reference in New Issue
Block a user