123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123 |
- package main
- import (
- "fmt"
- "os"
- "path/filepath"
- "github.com/Sirupsen/logrus"
- cliconfig "github.com/docker/docker/cli/config"
- "github.com/docker/docker/daemon/config"
- "github.com/docker/docker/opts"
- "github.com/docker/go-connections/tlsconfig"
- "github.com/spf13/pflag"
- )
- const (
- // DefaultCaFile is the default filename for the CA pem file
- DefaultCaFile = "ca.pem"
- // DefaultKeyFile is the default filename for the key pem file
- DefaultKeyFile = "key.pem"
- // DefaultCertFile is the default filename for the cert pem file
- DefaultCertFile = "cert.pem"
- // FlagTLSVerify is the flag name for the TLS verification option
- FlagTLSVerify = "tlsverify"
- )
- var (
- dockerCertPath = os.Getenv("DOCKER_CERT_PATH")
- dockerTLSVerify = os.Getenv("DOCKER_TLS_VERIFY") != ""
- )
- type daemonOptions struct {
- version bool
- configFile string
- daemonConfig *config.Config
- flags *pflag.FlagSet
- Debug bool
- Hosts []string
- LogLevel string
- TLS bool
- TLSVerify bool
- TLSOptions *tlsconfig.Options
- }
- // newDaemonOptions returns a new daemonFlags
- func newDaemonOptions(config *config.Config) *daemonOptions {
- return &daemonOptions{
- daemonConfig: config,
- }
- }
- // InstallFlags adds flags for the common options on the FlagSet
- func (o *daemonOptions) InstallFlags(flags *pflag.FlagSet) {
- if dockerCertPath == "" {
- dockerCertPath = cliconfig.Dir()
- }
- flags.BoolVarP(&o.Debug, "debug", "D", false, "Enable debug mode")
- flags.StringVarP(&o.LogLevel, "log-level", "l", "info", `Set the logging level ("debug"|"info"|"warn"|"error"|"fatal")`)
- flags.BoolVar(&o.TLS, "tls", false, "Use TLS; implied by --tlsverify")
- flags.BoolVar(&o.TLSVerify, FlagTLSVerify, dockerTLSVerify, "Use TLS and verify the remote")
- // TODO use flag flags.String("identity"}, "i", "", "Path to libtrust key file")
- o.TLSOptions = &tlsconfig.Options{
- CAFile: filepath.Join(dockerCertPath, DefaultCaFile),
- CertFile: filepath.Join(dockerCertPath, DefaultCertFile),
- KeyFile: filepath.Join(dockerCertPath, DefaultKeyFile),
- }
- tlsOptions := o.TLSOptions
- flags.Var(opts.NewQuotedString(&tlsOptions.CAFile), "tlscacert", "Trust certs signed only by this CA")
- flags.Var(opts.NewQuotedString(&tlsOptions.CertFile), "tlscert", "Path to TLS certificate file")
- flags.Var(opts.NewQuotedString(&tlsOptions.KeyFile), "tlskey", "Path to TLS key file")
- hostOpt := opts.NewNamedListOptsRef("hosts", &o.Hosts, opts.ValidateHost)
- flags.VarP(hostOpt, "host", "H", "Daemon socket(s) to connect to")
- }
- // SetDefaultOptions sets default values for options after flag parsing is
- // complete
- func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
- // Regardless of whether the user sets it to true or false, if they
- // specify --tlsverify at all then we need to turn on TLS
- // TLSVerify can be true even if not set due to DOCKER_TLS_VERIFY env var, so we need
- // to check that here as well
- if flags.Changed(FlagTLSVerify) || o.TLSVerify {
- o.TLS = true
- }
- if !o.TLS {
- o.TLSOptions = nil
- } else {
- tlsOptions := o.TLSOptions
- tlsOptions.InsecureSkipVerify = !o.TLSVerify
- // Reset CertFile and KeyFile to empty string if the user did not specify
- // the respective flags and the respective default files were not found.
- if !flags.Changed("tlscert") {
- if _, err := os.Stat(tlsOptions.CertFile); os.IsNotExist(err) {
- tlsOptions.CertFile = ""
- }
- }
- if !flags.Changed("tlskey") {
- if _, err := os.Stat(tlsOptions.KeyFile); os.IsNotExist(err) {
- tlsOptions.KeyFile = ""
- }
- }
- }
- }
- // setLogLevel sets the logrus logging level
- func setLogLevel(logLevel string) {
- if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
- } else {
- logrus.SetLevel(logrus.InfoLevel)
- }
- }
|