podman/vendor/go.podman.io/common/pkg/config/new.go

package config

import (
	"errors"
	"fmt"
	"io/fs"
	"os"
	"path/filepath"
	"strconv"
	"strings"
	"sync"

	"github.com/BurntSushi/toml"
	"github.com/sirupsen/logrus"
	"go.podman.io/storage/pkg/fileutils"
	"go.podman.io/storage/pkg/unshare"
)

var (
	cachedConfigError error
	cachedConfigMutex sync.Mutex
	cachedConfig      *Config
)

const (
	containersConfEnv         = "CONTAINERS_CONF"
	containersConfOverrideEnv = containersConfEnv + "_OVERRIDE"
)

// Options to use when loading a Config via New().
type Options struct {
	// Attempt to load the following config modules.
	Modules []string

	// Set the loaded config as the default one which can later on be
	// accessed via Default().
	SetDefault bool
}

// paths defines the search paths used for config reading.
type paths struct {
	usr  string
	etc  string
	home string
	uid  int
}

func defaultPaths() (*paths, error) {
	etcPath, err := overrideContainersConfigPath()
	if err != nil {
		return nil, err
	}
	homePath, err := userConfigPath()
	if err != nil {
		return nil, err
	}
	return &paths{
		usr:  defaultContainersConfig,
		etc:  etcPath,
		home: homePath,
		uid:  unshare.GetRootlessUID(),
	}, nil
}

// New returns a Config as described in the containers.conf(5) man page.
func New(options *Options) (*Config, error) {
	if options == nil {
		options = &Options{}
	} else if options.SetDefault {
		cachedConfigMutex.Lock()
		defer cachedConfigMutex.Unlock()
	}
	paths, err := defaultPaths()
	if err != nil {
		return nil, err
	}
	return newLocked(options, paths)
}

// Default returns the default container config.  If no default config has been
// set yet, a new config will be loaded by New() and set as the default one.
// All callers are expected to use the returned Config read only.  Changing
// data may impact other call sites.
func Default() (*Config, error) {
	cachedConfigMutex.Lock()
	defer cachedConfigMutex.Unlock()
	if cachedConfig != nil || cachedConfigError != nil {
		return cachedConfig, cachedConfigError
	}
	paths, err := defaultPaths()
	if err != nil {
		return nil, err
	}
	cachedConfig, cachedConfigError = newLocked(&Options{SetDefault: true}, paths)
	return cachedConfig, cachedConfigError
}

// A helper function for New() expecting the caller to hold the
// cachedConfigMutex if options.SetDefault is set..
func newLocked(options *Options, paths *paths) (*Config, error) {
	// Start with the built-in defaults
	config, err := defaultConfig()
	if err != nil {
		return nil, err
	}

	// Now, gather the system configs and merge them as needed.
	configs, err := systemConfigs(paths)
	if err != nil {
		return nil, fmt.Errorf("finding config on system: %w", err)
	}

	for _, path := range configs {
		// Merge changes in later configs with the previous configs.
		// Each config file that specified fields, will override the
		// previous fields.
		if err = readConfigFromFile(path, config, true); err != nil {
			return nil, fmt.Errorf("reading system config %q: %w", path, err)
		}
		logrus.Debugf("Merged system config %q", path)
		logrus.Tracef("%+v", config)
	}

	modules, err := options.modules(paths)
	if err != nil {
		return nil, err
	}
	config.loadedModules = modules

	// If the caller specified a config path to use, then we read it to
	// override the system defaults.
	for _, add := range modules {
		// readConfigFromFile reads in container config in the specified
		// file and then merge changes with the current default.
		if err := readConfigFromFile(add, config, false); err != nil {
			return nil, fmt.Errorf("reading additional config %q: %w", add, err)
		}
		logrus.Debugf("Merged additional config %q", add)
		logrus.Tracef("%+v", config)
	}

	// The _OVERRIDE variable _must_ always win.  That's a contract we need
	// to honor (for the Podman CI).
	if path := os.Getenv(containersConfOverrideEnv); path != "" {
		if err := readConfigFromFile(path, config, true); err != nil {
			return nil, fmt.Errorf("reading %s config %q: %w", containersConfOverrideEnv, path, err)
		}
		logrus.Debugf("Merged %s config %q", containersConfOverrideEnv, path)
		logrus.Tracef("%+v", config)
	}

	config.addCAPPrefix()

	if err := config.Validate(); err != nil {
		return nil, err
	}

	if err := config.setupEnv(); err != nil {
		return nil, err
	}

	if options.SetDefault {
		cachedConfig = config
		cachedConfigError = nil
	}

	return config, nil
}

// Returns the list of configuration files, if they exist in order of hierarchy.
// The files are read in order and each new file can/will override previous
// file settings.
func systemConfigs(paths *paths) (configs []string, finalErr error) {
	if path := os.Getenv(containersConfEnv); path != "" {
		if err := fileutils.Exists(path); err != nil {
			return nil, fmt.Errorf("%s file: %w", containersConfEnv, err)
		}
		return append(configs, path), nil
	}

	configs = append(configs, paths.usr)
	configs = append(configs, paths.etc)

	configs, err := addConfigs(paths.etc+".d", configs)
	if err != nil {
		return nil, err
	}

	// add rootless specific file overwrites in a global system dir
	// /etc/containers/containers.rootless.conf
	// /etc/containers/containers.rootless.conf.d/
	// /etc/containers/containers.rootless.conf.d/<UID>/
	if paths.uid > 0 {
		rootlessOverwritePath := filepath.Join(filepath.Dir(paths.etc), "containers.rootless.conf")
		configs = append(configs, rootlessOverwritePath)
		rootlessOverwritePathD := rootlessOverwritePath + ".d"
		configs, err = addConfigs(rootlessOverwritePathD, configs)
		if err != nil {
			return nil, err
		}
		configs, err = addConfigs(filepath.Join(rootlessOverwritePathD, strconv.Itoa(paths.uid)), configs)
		if err != nil {
			return nil, err
		}
	}
	configs = append(configs, paths.home)
	configs, err = addConfigs(paths.home+".d", configs)
	if err != nil {
		return nil, err
	}
	return configs, nil
}

// addConfigs will search one level in the config dirPath for config files
// If the dirPath does not exist, addConfigs will return configs, nil.
func addConfigs(dirPath string, configs []string) ([]string, error) {
	// Note: ReadDir already sorts the result by filename so we do not have to sort again.
	entries, err := os.ReadDir(dirPath)
	if err != nil {
		if errors.Is(err, os.ErrNotExist) {
			return configs, nil
		}
		return nil, err
	}
	newConfigs := make([]string, 0, len(entries))
	for _, entry := range entries {
		if !entry.IsDir() && strings.HasSuffix(entry.Name(), ".conf") {
			newConfigs = append(newConfigs, filepath.Join(dirPath, entry.Name()))
		}
	}

	return append(configs, newConfigs...), nil
}

// readConfigFromFile reads the specified config file at `path` and attempts to
// unmarshal its content into a Config. The config param specifies the previous
// default config. If the path, only specifies a few fields in the Toml file
// the defaults from the config parameter will be used for all other fields.
func readConfigFromFile(path string, config *Config, ignoreErrNotExist bool) error {
	logrus.Tracef("Reading configuration file %q", path)
	meta, err := toml.DecodeFile(path, config)
	if err != nil {
		if ignoreErrNotExist && errors.Is(err, fs.ErrNotExist) {
			return nil
		}
		return fmt.Errorf("decode configuration %v: %w", path, err)
	}
	keys := meta.Undecoded()
	if len(keys) > 0 {
		logrus.Debugf("Failed to decode the keys %q from %q.", keys, path)
	}

	return nil
}