user_linux.go 2.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119
  1. package file
  2. import (
  3. "os"
  4. "github.com/containerd/continuity/fs"
  5. "github.com/moby/buildkit/snapshot"
  6. "github.com/moby/buildkit/solver/llbsolver/ops/fileoptypes"
  7. "github.com/moby/buildkit/solver/pb"
  8. "github.com/opencontainers/runc/libcontainer/user"
  9. "github.com/pkg/errors"
  10. copy "github.com/tonistiigi/fsutil/copy"
  11. )
  12. func readUser(chopt *pb.ChownOpt, mu, mg fileoptypes.Mount) (*copy.User, error) {
  13. if chopt == nil {
  14. return nil, nil
  15. }
  16. var us copy.User
  17. if chopt.User != nil {
  18. switch u := chopt.User.User.(type) {
  19. case *pb.UserOpt_ByName:
  20. if mu == nil {
  21. return nil, errors.Errorf("invalid missing user mount")
  22. }
  23. mmu, ok := mu.(*Mount)
  24. if !ok {
  25. return nil, errors.Errorf("invalid mount type %T", mu)
  26. }
  27. lm := snapshot.LocalMounter(mmu.m)
  28. dir, err := lm.Mount()
  29. if err != nil {
  30. return nil, err
  31. }
  32. defer lm.Unmount()
  33. passwdPath, err := user.GetPasswdPath()
  34. if err != nil {
  35. return nil, err
  36. }
  37. passwdPath, err = fs.RootPath(dir, passwdPath)
  38. if err != nil {
  39. return nil, err
  40. }
  41. ufile, err := os.Open(passwdPath)
  42. if err != nil {
  43. return nil, err
  44. }
  45. defer ufile.Close()
  46. users, err := user.ParsePasswdFilter(ufile, func(uu user.User) bool {
  47. return uu.Name == u.ByName.Name
  48. })
  49. if err != nil {
  50. return nil, err
  51. }
  52. if len(users) > 0 {
  53. us.Uid = users[0].Uid
  54. us.Gid = users[0].Gid
  55. }
  56. case *pb.UserOpt_ByID:
  57. us.Uid = int(u.ByID)
  58. us.Gid = int(u.ByID)
  59. }
  60. }
  61. if chopt.Group != nil {
  62. switch u := chopt.Group.User.(type) {
  63. case *pb.UserOpt_ByName:
  64. if mg == nil {
  65. return nil, errors.Errorf("invalid missing group mount")
  66. }
  67. mmg, ok := mg.(*Mount)
  68. if !ok {
  69. return nil, errors.Errorf("invalid mount type %T", mg)
  70. }
  71. lm := snapshot.LocalMounter(mmg.m)
  72. dir, err := lm.Mount()
  73. if err != nil {
  74. return nil, err
  75. }
  76. defer lm.Unmount()
  77. groupPath, err := user.GetGroupPath()
  78. if err != nil {
  79. return nil, err
  80. }
  81. groupPath, err = fs.RootPath(dir, groupPath)
  82. if err != nil {
  83. return nil, err
  84. }
  85. gfile, err := os.Open(groupPath)
  86. if err != nil {
  87. return nil, err
  88. }
  89. defer gfile.Close()
  90. groups, err := user.ParseGroupFilter(gfile, func(g user.Group) bool {
  91. return g.Name == u.ByName.Name
  92. })
  93. if err != nil {
  94. return nil, err
  95. }
  96. if len(groups) > 0 {
  97. us.Gid = groups[0].Gid
  98. }
  99. case *pb.UserOpt_ByID:
  100. us.Gid = int(u.ByID)
  101. }
  102. }
  103. return &us, nil
  104. }