package main import ( "context" "io" "io/ioutil" "log/syslog" "os" "runtime/pprof" "strconv" "strings" "syscall" "github.com/containers/libpod/cmd/podman/cliconfig" "github.com/containers/libpod/cmd/podman/libpodruntime" "github.com/containers/libpod/libpod" _ "github.com/containers/libpod/pkg/hooks/0.1.0" "github.com/containers/libpod/pkg/rootless" "github.com/containers/libpod/pkg/tracing" "github.com/containers/libpod/version" "github.com/containers/storage/pkg/reexec" "github.com/opentracing/opentracing-go" "github.com/pkg/errors" "github.com/sirupsen/logrus" lsyslog "github.com/sirupsen/logrus/hooks/syslog" "github.com/spf13/cobra" ) // This is populated by the Makefile from the VERSION file // in the repository var ( exitCode = 125 Ctx context.Context span opentracing.Span closer io.Closer ) // Commands that the remote and local client have // implemented. var mainCommands = []*cobra.Command{ _buildCommand, _diffCommand, _createCommand, _eventsCommand, _exportCommand, _historyCommand, &_imagesCommand, _importCommand, _infoCommand, &_inspectCommand, _killCommand, _loadCommand, _logsCommand, podCommand.Command, &_psCommand, _pullCommand, _pushCommand, _rmCommand, &_rmiCommand, _runCommand, _saveCommand, _stopCommand, _tagCommand, _umountCommand, _versionCommand, _waitCommand, imageCommand.Command, systemCommand.Command, } var rootCmd = &cobra.Command{ Use: "podman", Long: "manage pods and images", RunE: commandRunE(), PersistentPreRunE: func(cmd *cobra.Command, args []string) error { return before(cmd, args) }, PersistentPostRunE: func(cmd *cobra.Command, args []string) error { return after(cmd, args) }, SilenceUsage: true, SilenceErrors: true, } var MainGlobalOpts cliconfig.MainFlags func init() { cobra.OnInitialize(initConfig) rootCmd.TraverseChildren = true rootCmd.Version = version.Version rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.CGroupManager, "cgroup-manager", "", "Cgroup manager to use (cgroupfs or systemd, default systemd)") // -c is deprecated due to conflict with -c on subcommands rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.CpuProfile, "cpu-profile", "", "Path for the cpu profiling results") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.Config, "config", "", "Path of a libpod config file detailing container server configuration options") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.ConmonPath, "conmon", "", "Path of the conmon binary") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.NetworkCmdPath, "network-cmd-path", "", "Path to the command for configuring the network") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.CniConfigDir, "cni-config-dir", "", "Path of the configuration directory for CNI networks") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.DefaultMountsFile, "default-mounts-file", "", "Path to default mounts file") rootCmd.PersistentFlags().MarkHidden("defaults-mount-file") // Override default --help information of `--help` global flag var dummyHelp bool rootCmd.PersistentFlags().BoolVar(&dummyHelp, "help", false, "Help for podman") rootCmd.PersistentFlags().StringSliceVar(&MainGlobalOpts.HooksDir, "hooks-dir", []string{}, "Set the OCI hooks directory path (may be set multiple times)") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.LogLevel, "log-level", "error", "Log messages above specified level: debug, info, warn, error, fatal or panic") rootCmd.PersistentFlags().IntVar(&MainGlobalOpts.MaxWorks, "max-workers", 0, "The maximum number of workers for parallel operations") rootCmd.PersistentFlags().MarkHidden("max-workers") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.Namespace, "namespace", "", "Set the libpod namespace, used to create separate views of the containers and pods on the system") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.Root, "root", "", "Path to the root directory in which data, including images, is stored") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.Runroot, "runroot", "", "Path to the 'run directory' where all state information is stored") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.Runtime, "runtime", "", "Path to the OCI-compatible binary used to run containers, default is /usr/bin/runc") // -s is depracated due to conflict with -s on subcommands rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.StorageDriver, "storage-driver", "", "Select which storage driver is used to manage storage of images and containers (default is overlay)") rootCmd.PersistentFlags().StringSliceVar(&MainGlobalOpts.StorageOpts, "storage-opt", []string{}, "Used to pass an option to the storage driver") rootCmd.PersistentFlags().BoolVar(&MainGlobalOpts.Syslog, "syslog", false, "Output logging information to syslog as well as the console") rootCmd.PersistentFlags().StringVar(&MainGlobalOpts.TmpDir, "tmpdir", "", "Path to the tmp directory") rootCmd.PersistentFlags().BoolVar(&MainGlobalOpts.Trace, "trace", false, "Enable opentracing output") // Override default --help information of `--version` global flag var dummyVersion bool rootCmd.PersistentFlags().BoolVar(&dummyVersion, "version", false, "Version for podman") rootCmd.AddCommand(mainCommands...) rootCmd.AddCommand(getMainCommands()...) } func initConfig() { // we can do more stuff in here. } func before(cmd *cobra.Command, args []string) error { if err := libpod.SetXdgRuntimeDir(""); err != nil { logrus.Errorf(err.Error()) os.Exit(1) } if os.Geteuid() != 0 && cmd != _searchCommand && cmd != _versionCommand && !strings.HasPrefix(cmd.Use, "help") { podmanCmd := cliconfig.PodmanCommand{ cmd, args, MainGlobalOpts, } runtime, err := libpodruntime.GetRuntime(&podmanCmd) if err != nil { return errors.Wrapf(err, "could not get runtime") } defer runtime.Shutdown(false) ctrs, err := runtime.GetRunningContainers() if err != nil { logrus.Errorf(err.Error()) os.Exit(1) } var became bool var ret int if len(ctrs) == 0 { became, ret, err = rootless.BecomeRootInUserNS() } else { for _, ctr := range ctrs { data, err := ioutil.ReadFile(ctr.Config().ConmonPidFile) if err != nil { logrus.Errorf(err.Error()) os.Exit(1) } conmonPid, err := strconv.Atoi(string(data)) if err != nil { logrus.Errorf(err.Error()) os.Exit(1) } became, ret, err = rootless.JoinUserAndMountNS(uint(conmonPid)) if err == nil { break } } } if err != nil { logrus.Errorf(err.Error()) os.Exit(1) } if became { os.Exit(ret) } } if MainGlobalOpts.Syslog { hook, err := lsyslog.NewSyslogHook("", "", syslog.LOG_INFO, "") if err == nil { logrus.AddHook(hook) } } // Set log level level, err := logrus.ParseLevel(MainGlobalOpts.LogLevel) if err != nil { return err } logrus.SetLevel(level) rlimits := new(syscall.Rlimit) rlimits.Cur = 1048576 rlimits.Max = 1048576 if err := syscall.Setrlimit(syscall.RLIMIT_NOFILE, rlimits); err != nil { if err := syscall.Getrlimit(syscall.RLIMIT_NOFILE, rlimits); err != nil { return errors.Wrapf(err, "error getting rlimits") } rlimits.Cur = rlimits.Max if err := syscall.Setrlimit(syscall.RLIMIT_NOFILE, rlimits); err != nil { return errors.Wrapf(err, "error setting new rlimits") } } if rootless.IsRootless() { logrus.Info("running as rootless") } // Be sure we can create directories with 0755 mode. syscall.Umask(0022) if cmd.Flag("cpu-profile").Changed { f, err := os.Create(MainGlobalOpts.CpuProfile) if err != nil { return errors.Wrapf(err, "unable to create cpu profiling file %s", MainGlobalOpts.CpuProfile) } pprof.StartCPUProfile(f) } if cmd.Flag("trace").Changed { var tracer opentracing.Tracer tracer, closer = tracing.Init("podman") opentracing.SetGlobalTracer(tracer) span = tracer.StartSpan("before-context") Ctx = opentracing.ContextWithSpan(context.Background(), span) } return nil } func after(cmd *cobra.Command, args []string) error { if cmd.Flag("cpu-profile").Changed { pprof.StopCPUProfile() } if cmd.Flag("trace").Changed { span.Finish() closer.Close() } return nil } func main() { //debug := false //cpuProfile := false if reexec.Init() { return } if err := rootCmd.Execute(); err != nil { outputError(err) } else { // The exitCode modified from 125, indicates an application // running inside of a container failed, as opposed to the // podman command failed. Must exit with that exit code // otherwise command exited correctly. if exitCode == 125 { exitCode = 0 } } // Check if /etc/containers/registries.conf exists when running in // in a local environment. CheckForRegistries() os.Exit(exitCode) }