diff --git a/image/cache/cache.go b/image/cache/cache.go index ee89a171e2..b4f551a016 100644 --- a/image/cache/cache.go +++ b/image/cache/cache.go @@ -6,7 +6,6 @@ import ( "reflect" "strings" - "github.com/containerd/containerd/platforms" containertypes "github.com/docker/docker/api/types/container" "github.com/docker/docker/dockerversion" "github.com/docker/docker/image" @@ -255,11 +254,12 @@ func getLocalCachedImage(imageStore image.Store, imgID image.ID, config *contain OSFeatures: img.OSFeatures, Variant: img.Variant, } + // Discard old linux/amd64 images with empty platform. if imgPlatform.OS == "" && imgPlatform.Architecture == "" { continue } - if !platforms.OnlyStrict(platform).Match(imgPlatform) { + if !comparePlatform(platform, imgPlatform) { continue } diff --git a/image/cache/compare.go b/image/cache/compare.go index d438b65be7..c13b11a06d 100644 --- a/image/cache/compare.go +++ b/image/cache/compare.go @@ -1,7 +1,11 @@ package cache // import "github.com/docker/docker/image/cache" import ( + "strings" + + "github.com/containerd/containerd/platforms" "github.com/docker/docker/api/types/container" + ocispec "github.com/opencontainers/image-spec/specs-go/v1" ) // TODO: Remove once containerd image service directly uses the ImageCache and @@ -10,6 +14,29 @@ func CompareConfig(a, b *container.Config) bool { return compare(a, b) } +func comparePlatform(builderPlatform, imagePlatform ocispec.Platform) bool { + // On Windows, only check the Major and Minor versions. + // The Build and Revision compatibility depends on whether `process` or + // `hyperv` isolation used. + // + // Fixes https://github.com/moby/moby/issues/47307 + if builderPlatform.OS == "windows" && imagePlatform.OS == builderPlatform.OS { + // OSVersion format is: + // Major.Minor.Build.Revision + builderParts := strings.Split(builderPlatform.OSVersion, ".") + imageParts := strings.Split(imagePlatform.OSVersion, ".") + + if len(builderParts) >= 3 && len(imageParts) >= 3 { + // Keep only Major & Minor. + builderParts[0] = imageParts[0] + builderParts[1] = imageParts[1] + imagePlatform.OSVersion = strings.Join(builderParts, ".") + } + } + + return platforms.Only(builderPlatform).Match(imagePlatform) +} + // compare two Config struct. Do not container-specific fields: // - Image // - Hostname diff --git a/image/cache/compare_test.go b/image/cache/compare_test.go index 939e99f050..0ed163f91c 100644 --- a/image/cache/compare_test.go +++ b/image/cache/compare_test.go @@ -1,11 +1,15 @@ package cache // import "github.com/docker/docker/image/cache" import ( + "runtime" "testing" + "github.com/containerd/containerd/platforms" "github.com/docker/docker/api/types/container" "github.com/docker/docker/api/types/strslice" "github.com/docker/go-connections/nat" + "gotest.tools/v3/assert" + is "gotest.tools/v3/assert/cmp" ) // Just to make life easier @@ -124,3 +128,79 @@ func TestCompare(t *testing.T) { } } } + +func TestPlatformCompare(t *testing.T) { + for _, tc := range []struct { + name string + builder platforms.Platform + image platforms.Platform + expected bool + }{ + { + name: "same os and arch", + builder: platforms.Platform{Architecture: "amd64", OS: runtime.GOOS}, + image: platforms.Platform{Architecture: "amd64", OS: runtime.GOOS}, + expected: true, + }, + { + name: "same os different arch", + builder: platforms.Platform{Architecture: "amd64", OS: runtime.GOOS}, + image: platforms.Platform{Architecture: "arm64", OS: runtime.GOOS}, + expected: false, + }, + { + name: "same os smaller host variant", + builder: platforms.Platform{Variant: "v7", Architecture: "arm", OS: runtime.GOOS}, + image: platforms.Platform{Variant: "v8", Architecture: "arm", OS: runtime.GOOS}, + expected: false, + }, + { + name: "same os higher host variant", + builder: platforms.Platform{Variant: "v8", Architecture: "arm", OS: runtime.GOOS}, + image: platforms.Platform{Variant: "v7", Architecture: "arm", OS: runtime.GOOS}, + expected: true, + }, + { + // Test for https://github.com/moby/moby/issues/47307 + name: "different build and revision", + builder: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.0.22621"}, + image: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.0.17763.5329"}, + expected: true, + }, + { + name: "different revision", + builder: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.0.17763.1234"}, + image: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.0.17763.5329"}, + expected: true, + }, + { + name: "different major", + builder: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "11.0.17763.5329"}, + image: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.0.17763.5329"}, + expected: false, + }, + { + name: "different minor same osver", + builder: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.0.17763.5329"}, + image: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.1.17763.5329"}, + expected: false, + }, + { + name: "different arch same osver", + builder: platforms.Platform{Architecture: "arm64", OS: "windows", OSVersion: "10.0.17763.5329"}, + image: platforms.Platform{Architecture: "amd64", OS: "windows", OSVersion: "10.0.17763.5329"}, + expected: false, + }, + } { + tc := tc + // OSVersion comparison is only performed by containerd platform + // matcher if built on Windows. + if (tc.image.OSVersion != "" || tc.builder.OSVersion != "") && runtime.GOOS != "windows" { + continue + } + + t.Run(tc.name, func(t *testing.T) { + assert.Check(t, is.Equal(comparePlatform(tc.builder, tc.image), tc.expected)) + }) + } +}