2018-02-05 21:05:59 +00:00
|
|
|
package distribution // import "github.com/docker/docker/distribution"
|
2016-02-11 22:08:49 +00:00
|
|
|
|
|
|
|
import (
|
2017-07-19 14:20:13 +00:00
|
|
|
"fmt"
|
2016-02-11 22:08:49 +00:00
|
|
|
"net/url"
|
|
|
|
"strings"
|
|
|
|
"syscall"
|
|
|
|
|
2016-11-29 21:13:42 +00:00
|
|
|
"github.com/docker/distribution"
|
2017-01-26 00:54:18 +00:00
|
|
|
"github.com/docker/distribution/reference"
|
2016-02-11 22:08:49 +00:00
|
|
|
"github.com/docker/distribution/registry/api/errcode"
|
2019-08-05 14:37:47 +00:00
|
|
|
v2 "github.com/docker/distribution/registry/api/v2"
|
2016-02-11 22:08:49 +00:00
|
|
|
"github.com/docker/distribution/registry/client"
|
2016-03-12 17:01:01 +00:00
|
|
|
"github.com/docker/distribution/registry/client/auth"
|
2016-02-11 22:08:49 +00:00
|
|
|
"github.com/docker/docker/distribution/xfer"
|
2018-01-11 19:53:06 +00:00
|
|
|
"github.com/docker/docker/errdefs"
|
2018-08-03 13:41:05 +00:00
|
|
|
"github.com/pkg/errors"
|
2017-07-26 21:42:13 +00:00
|
|
|
"github.com/sirupsen/logrus"
|
2016-02-11 22:08:49 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
// fallbackError wraps an error that can possibly allow fallback to a different
|
|
|
|
// endpoint.
|
|
|
|
type fallbackError struct {
|
|
|
|
// err is the error being wrapped.
|
|
|
|
err error
|
2016-02-11 23:45:29 +00:00
|
|
|
// transportOK is set to true if we managed to speak HTTP with the
|
|
|
|
// registry. This confirms that we're using appropriate TLS settings
|
|
|
|
// (or lack of TLS).
|
|
|
|
transportOK bool
|
2016-02-11 22:08:49 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// Error renders the FallbackError as a string.
|
|
|
|
func (f fallbackError) Error() string {
|
2016-07-25 21:52:27 +00:00
|
|
|
return f.Cause().Error()
|
|
|
|
}
|
|
|
|
|
|
|
|
func (f fallbackError) Cause() error {
|
|
|
|
return f.err
|
2016-02-11 22:08:49 +00:00
|
|
|
}
|
|
|
|
|
2017-07-19 14:20:13 +00:00
|
|
|
type notFoundError struct {
|
|
|
|
cause errcode.Error
|
|
|
|
ref reference.Named
|
|
|
|
}
|
|
|
|
|
|
|
|
func (e notFoundError) Error() string {
|
|
|
|
switch e.cause.Code {
|
|
|
|
case errcode.ErrorCodeDenied:
|
|
|
|
// ErrorCodeDenied is used when access to the repository was denied
|
2018-08-03 13:41:05 +00:00
|
|
|
return errors.Wrapf(e.cause, "pull access denied for %s, repository does not exist or may require 'docker login'", reference.FamiliarName(e.ref)).Error()
|
2017-07-19 14:20:13 +00:00
|
|
|
case v2.ErrorCodeManifestUnknown:
|
2018-08-03 13:41:05 +00:00
|
|
|
return errors.Wrapf(e.cause, "manifest for %s not found", reference.FamiliarString(e.ref)).Error()
|
2017-07-19 14:20:13 +00:00
|
|
|
case v2.ErrorCodeNameUnknown:
|
2018-08-03 13:41:05 +00:00
|
|
|
return errors.Wrapf(e.cause, "repository %s not found", reference.FamiliarName(e.ref)).Error()
|
2017-07-19 14:20:13 +00:00
|
|
|
}
|
|
|
|
// Shouldn't get here, but this is better than returning an empty string
|
|
|
|
return e.cause.Message
|
|
|
|
}
|
|
|
|
|
|
|
|
func (e notFoundError) NotFound() {}
|
|
|
|
|
|
|
|
func (e notFoundError) Cause() error {
|
|
|
|
return e.cause
|
|
|
|
}
|
|
|
|
|
2022-02-27 19:46:24 +00:00
|
|
|
// translatePullError is used to convert an error from a registry pull
|
2016-11-15 23:06:48 +00:00
|
|
|
// operation to an error representing the entire pull operation. Any error
|
|
|
|
// information which is not used by the returned error gets output to
|
|
|
|
// log at info level.
|
2022-02-27 19:46:24 +00:00
|
|
|
func translatePullError(err error, ref reference.Named) error {
|
2016-11-10 23:14:33 +00:00
|
|
|
switch v := err.(type) {
|
|
|
|
case errcode.Errors:
|
|
|
|
if len(v) != 0 {
|
|
|
|
for _, extra := range v[1:] {
|
2022-02-27 19:46:24 +00:00
|
|
|
logrus.WithError(extra).Infof("Ignoring extra error returned from registry")
|
2016-11-10 23:14:33 +00:00
|
|
|
}
|
2022-02-27 19:46:24 +00:00
|
|
|
return translatePullError(v[0], ref)
|
2016-11-10 23:14:33 +00:00
|
|
|
}
|
|
|
|
case errcode.Error:
|
|
|
|
switch v.Code {
|
2017-07-19 14:20:13 +00:00
|
|
|
case errcode.ErrorCodeDenied, v2.ErrorCodeManifestUnknown, v2.ErrorCodeNameUnknown:
|
|
|
|
return notFoundError{v, ref}
|
2016-11-10 23:14:33 +00:00
|
|
|
}
|
|
|
|
case xfer.DoNotRetry:
|
2022-02-27 19:46:24 +00:00
|
|
|
return translatePullError(v.Err, ref)
|
2016-11-10 23:14:33 +00:00
|
|
|
}
|
|
|
|
|
2017-11-29 04:09:37 +00:00
|
|
|
return errdefs.Unknown(err)
|
2016-11-10 23:14:33 +00:00
|
|
|
}
|
|
|
|
|
2020-12-03 21:15:18 +00:00
|
|
|
func isNotFound(err error) bool {
|
|
|
|
switch v := err.(type) {
|
|
|
|
case errcode.Errors:
|
|
|
|
for _, e := range v {
|
|
|
|
if isNotFound(e) {
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
}
|
|
|
|
case errcode.Error:
|
|
|
|
switch v.Code {
|
|
|
|
case errcode.ErrorCodeDenied, v2.ErrorCodeManifestUnknown, v2.ErrorCodeNameUnknown:
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return false
|
|
|
|
}
|
|
|
|
|
2016-02-11 22:08:49 +00:00
|
|
|
// continueOnError returns true if we should fallback to the next endpoint
|
|
|
|
// as a result of this error.
|
2017-11-15 00:06:17 +00:00
|
|
|
func continueOnError(err error, mirrorEndpoint bool) bool {
|
2016-02-11 22:08:49 +00:00
|
|
|
switch v := err.(type) {
|
|
|
|
case errcode.Errors:
|
|
|
|
if len(v) == 0 {
|
|
|
|
return true
|
|
|
|
}
|
2017-11-15 00:06:17 +00:00
|
|
|
return continueOnError(v[0], mirrorEndpoint)
|
2016-02-11 22:08:49 +00:00
|
|
|
case errcode.Error:
|
2019-06-18 01:42:24 +00:00
|
|
|
return mirrorEndpoint
|
2016-02-11 22:08:49 +00:00
|
|
|
case *client.UnexpectedHTTPResponseError:
|
|
|
|
return true
|
2022-02-27 19:46:24 +00:00
|
|
|
case imageConfigPullError:
|
|
|
|
// imageConfigPullError only happens with v2 images, v1 fallback is
|
2017-11-15 00:06:17 +00:00
|
|
|
// unnecessary.
|
|
|
|
// Failures from a mirror endpoint should result in fallback to the
|
|
|
|
// canonical repo.
|
|
|
|
return mirrorEndpoint
|
2016-02-11 22:08:49 +00:00
|
|
|
case error:
|
2017-05-23 14:22:32 +00:00
|
|
|
return !strings.Contains(err.Error(), strings.ToLower(syscall.ESRCH.Error()))
|
2016-02-11 22:08:49 +00:00
|
|
|
}
|
|
|
|
// let's be nice and fallback if the error is a completely
|
|
|
|
// unexpected one.
|
|
|
|
// If new errors have to be handled in some way, please
|
|
|
|
// add them to the switch above.
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
|
|
|
|
// retryOnError wraps the error in xfer.DoNotRetry if we should not retry the
|
|
|
|
// operation after this error.
|
|
|
|
func retryOnError(err error) error {
|
|
|
|
switch v := err.(type) {
|
|
|
|
case errcode.Errors:
|
2016-03-14 20:11:35 +00:00
|
|
|
if len(v) != 0 {
|
|
|
|
return retryOnError(v[0])
|
|
|
|
}
|
2016-02-11 22:08:49 +00:00
|
|
|
case errcode.Error:
|
|
|
|
switch v.Code {
|
2016-07-12 00:06:23 +00:00
|
|
|
case errcode.ErrorCodeUnauthorized, errcode.ErrorCodeUnsupported, errcode.ErrorCodeDenied, errcode.ErrorCodeTooManyRequests, v2.ErrorCodeNameUnknown:
|
2016-02-11 22:08:49 +00:00
|
|
|
return xfer.DoNotRetry{Err: err}
|
|
|
|
}
|
|
|
|
case *url.Error:
|
2016-03-18 17:54:05 +00:00
|
|
|
switch v.Err {
|
|
|
|
case auth.ErrNoBasicAuthCredentials, auth.ErrNoToken:
|
2016-03-12 17:01:01 +00:00
|
|
|
return xfer.DoNotRetry{Err: v.Err}
|
|
|
|
}
|
2016-02-11 22:08:49 +00:00
|
|
|
return retryOnError(v.Err)
|
|
|
|
case *client.UnexpectedHTTPResponseError:
|
|
|
|
return xfer.DoNotRetry{Err: err}
|
|
|
|
case error:
|
2016-11-29 21:13:42 +00:00
|
|
|
if err == distribution.ErrBlobUnknown {
|
|
|
|
return xfer.DoNotRetry{Err: err}
|
|
|
|
}
|
2016-02-11 22:08:49 +00:00
|
|
|
if strings.Contains(err.Error(), strings.ToLower(syscall.ENOSPC.Error())) {
|
|
|
|
return xfer.DoNotRetry{Err: err}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
// let's be nice and fallback if the error is a completely
|
|
|
|
// unexpected one.
|
|
|
|
// If new errors have to be handled in some way, please
|
|
|
|
// add them to the switch above.
|
|
|
|
return err
|
|
|
|
}
|
2017-07-19 14:20:13 +00:00
|
|
|
|
|
|
|
type invalidManifestClassError struct {
|
|
|
|
mediaType string
|
|
|
|
class string
|
|
|
|
}
|
|
|
|
|
|
|
|
func (e invalidManifestClassError) Error() string {
|
|
|
|
return fmt.Sprintf("Encountered remote %q(%s) when fetching", e.mediaType, e.class)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (e invalidManifestClassError) InvalidParameter() {}
|
|
|
|
|
|
|
|
type invalidManifestFormatError struct{}
|
|
|
|
|
|
|
|
func (invalidManifestFormatError) Error() string {
|
|
|
|
return "unsupported manifest format"
|
|
|
|
}
|
|
|
|
|
|
|
|
func (invalidManifestFormatError) InvalidParameter() {}
|
|
|
|
|
|
|
|
type reservedNameError string
|
|
|
|
|
|
|
|
func (e reservedNameError) Error() string {
|
|
|
|
return "'" + string(e) + "' is a reserved name"
|
|
|
|
}
|
|
|
|
|
|
|
|
func (e reservedNameError) Forbidden() {}
|