2015-07-16 00:48:49 +02:00
|
|
|
package main // import "github.com/CenturyLinkLabs/watchtower"
|
2015-07-13 23:41:04 +02:00
|
|
|
|
|
|
|
import (
|
2016-10-13 22:40:16 +02:00
|
|
|
"context"
|
2015-07-24 21:51:21 +02:00
|
|
|
"crypto/tls"
|
|
|
|
"crypto/x509"
|
2015-07-14 22:51:12 +02:00
|
|
|
"fmt"
|
2015-07-24 21:51:21 +02:00
|
|
|
"io/ioutil"
|
2015-07-13 23:41:04 +02:00
|
|
|
"os"
|
|
|
|
"os/signal"
|
2015-07-24 21:51:21 +02:00
|
|
|
"strings"
|
2015-07-13 23:41:04 +02:00
|
|
|
"sync"
|
|
|
|
"syscall"
|
|
|
|
"time"
|
|
|
|
|
2015-07-21 18:04:41 +02:00
|
|
|
"github.com/CenturyLinkLabs/watchtower/actions"
|
2015-07-21 21:37:18 +02:00
|
|
|
"github.com/CenturyLinkLabs/watchtower/container"
|
2015-07-22 23:58:16 +02:00
|
|
|
log "github.com/Sirupsen/logrus"
|
2016-10-13 23:57:08 +02:00
|
|
|
"github.com/urfave/cli"
|
2016-10-13 19:16:24 +02:00
|
|
|
"github.com/docker/docker/api/types"
|
2016-10-13 22:40:16 +02:00
|
|
|
dockerclient "github.com/docker/docker/client"
|
2015-07-13 23:41:04 +02:00
|
|
|
)
|
|
|
|
|
|
|
|
var (
|
2016-10-13 22:40:16 +02:00
|
|
|
wg sync.WaitGroup
|
|
|
|
client container.Client
|
|
|
|
registryClient container.Client
|
|
|
|
pollInterval time.Duration
|
|
|
|
cleanup bool
|
2015-07-13 23:41:04 +02:00
|
|
|
)
|
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
func init() {
|
|
|
|
log.SetLevel(log.InfoLevel)
|
|
|
|
}
|
|
|
|
|
2015-07-13 23:41:04 +02:00
|
|
|
func main() {
|
2015-07-24 21:51:21 +02:00
|
|
|
rootCertPath := "/etc/ssl/docker"
|
|
|
|
|
|
|
|
if os.Getenv("DOCKER_CERT_PATH") != "" {
|
|
|
|
rootCertPath = os.Getenv("DOCKER_CERT_PATH")
|
|
|
|
}
|
|
|
|
|
2015-07-13 23:41:04 +02:00
|
|
|
app := cli.NewApp()
|
|
|
|
app.Name = "watchtower"
|
|
|
|
app.Usage = "Automatically update running Docker containers"
|
2015-07-21 00:54:18 +02:00
|
|
|
app.Before = before
|
2015-07-13 23:41:04 +02:00
|
|
|
app.Action = start
|
|
|
|
app.Flags = []cli.Flag{
|
2015-07-21 21:37:18 +02:00
|
|
|
cli.StringFlag{
|
|
|
|
Name: "host, H",
|
2015-07-24 21:51:21 +02:00
|
|
|
Usage: "daemon socket to connect to",
|
2015-07-21 21:37:18 +02:00
|
|
|
Value: "unix:///var/run/docker.sock",
|
|
|
|
EnvVar: "DOCKER_HOST",
|
|
|
|
},
|
2016-10-13 19:16:24 +02:00
|
|
|
cli.StringFlag{
|
|
|
|
Name: "registry",
|
|
|
|
Usage: "docker registry from which to pull images",
|
|
|
|
Value: "unix:///var/run/docker.sock",
|
|
|
|
EnvVar: "DOCKER_REGISTRY",
|
|
|
|
},
|
2015-07-13 23:41:04 +02:00
|
|
|
cli.IntFlag{
|
|
|
|
Name: "interval, i",
|
|
|
|
Usage: "poll interval (in seconds)",
|
2015-07-24 21:51:21 +02:00
|
|
|
Value: 300,
|
2015-07-13 23:41:04 +02:00
|
|
|
},
|
2015-07-22 01:29:00 +02:00
|
|
|
cli.BoolFlag{
|
|
|
|
Name: "no-pull",
|
|
|
|
Usage: "do not pull new images",
|
|
|
|
},
|
2015-07-31 20:24:27 +02:00
|
|
|
cli.BoolFlag{
|
|
|
|
Name: "cleanup",
|
|
|
|
Usage: "remove old images after updating",
|
|
|
|
},
|
2015-07-24 21:51:21 +02:00
|
|
|
cli.BoolFlag{
|
|
|
|
Name: "tls",
|
|
|
|
Usage: "use TLS; implied by --tlsverify",
|
|
|
|
},
|
|
|
|
cli.BoolFlag{
|
|
|
|
Name: "tlsverify",
|
|
|
|
Usage: "use TLS and verify the remote",
|
|
|
|
EnvVar: "DOCKER_TLS_VERIFY",
|
|
|
|
},
|
|
|
|
cli.StringFlag{
|
|
|
|
Name: "tlscacert",
|
|
|
|
Usage: "trust certs signed only by this CA",
|
|
|
|
Value: fmt.Sprintf("%s/ca.pem", rootCertPath),
|
|
|
|
},
|
|
|
|
cli.StringFlag{
|
|
|
|
Name: "tlscert",
|
|
|
|
Usage: "client certificate for TLS authentication",
|
|
|
|
Value: fmt.Sprintf("%s/cert.pem", rootCertPath),
|
|
|
|
},
|
|
|
|
cli.StringFlag{
|
|
|
|
Name: "tlskey",
|
|
|
|
Usage: "client key for TLS authentication",
|
|
|
|
Value: fmt.Sprintf("%s/key.pem", rootCertPath),
|
|
|
|
},
|
2015-07-22 23:58:16 +02:00
|
|
|
cli.BoolFlag{
|
|
|
|
Name: "debug",
|
|
|
|
Usage: "enable debug mode with verbose logging",
|
|
|
|
},
|
2015-07-13 23:41:04 +02:00
|
|
|
}
|
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
if err := app.Run(os.Args); err != nil {
|
|
|
|
log.Fatal(err)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func before(c *cli.Context) error {
|
|
|
|
if c.GlobalBool("debug") {
|
|
|
|
log.SetLevel(log.DebugLevel)
|
|
|
|
}
|
|
|
|
|
|
|
|
pollInterval = time.Duration(c.Int("interval")) * time.Second
|
2015-07-31 20:24:27 +02:00
|
|
|
cleanup = c.GlobalBool("cleanup")
|
2015-07-24 21:51:21 +02:00
|
|
|
|
|
|
|
// Set-up container client
|
2016-10-13 22:34:24 +02:00
|
|
|
_, err := tlsConfig(c)
|
2015-07-24 21:51:21 +02:00
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
2016-10-13 22:34:24 +02:00
|
|
|
client = container.NewClient(c.GlobalString("host"), !c.GlobalBool("no-pull"))
|
2016-10-13 23:57:08 +02:00
|
|
|
//login(c)
|
2015-07-24 21:51:21 +02:00
|
|
|
|
2015-07-13 23:41:04 +02:00
|
|
|
handleSignals()
|
2015-07-24 21:51:21 +02:00
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2016-10-13 19:16:24 +02:00
|
|
|
func login(c *cli.Context) {
|
|
|
|
registry := c.GlobalString("registry")
|
|
|
|
if registry != "" && registry != c.GlobalString("host") {
|
|
|
|
log.Debug("Logging into registry")
|
|
|
|
clint, err := dockerclient.NewEnvClient()
|
|
|
|
if err != nil {
|
|
|
|
panic(err)
|
|
|
|
}
|
|
|
|
regAuth := types.AuthConfig{
|
2016-10-13 22:40:16 +02:00
|
|
|
Username: "testuser",
|
|
|
|
Password: "testpassword",
|
|
|
|
ServerAddress: registry,
|
2016-10-13 19:16:24 +02:00
|
|
|
}
|
|
|
|
resp, err := clint.RegistryLogin(context.Background(), regAuth)
|
|
|
|
if err != nil {
|
|
|
|
panic(err)
|
|
|
|
}
|
|
|
|
log.Debugf("Authenticated client with registry %s, %s", registry, resp)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-08-04 18:32:01 +02:00
|
|
|
func start(c *cli.Context) {
|
|
|
|
names := c.Args()
|
|
|
|
|
2015-07-31 20:24:27 +02:00
|
|
|
if err := actions.CheckPrereqs(client, cleanup); err != nil {
|
2015-07-24 21:51:21 +02:00
|
|
|
log.Fatal(err)
|
|
|
|
}
|
|
|
|
|
|
|
|
for {
|
|
|
|
wg.Add(1)
|
2015-08-04 18:32:01 +02:00
|
|
|
if err := actions.Update(client, names, cleanup); err != nil {
|
2015-07-24 21:51:21 +02:00
|
|
|
fmt.Println(err)
|
|
|
|
}
|
|
|
|
wg.Done()
|
|
|
|
|
|
|
|
time.Sleep(pollInterval)
|
|
|
|
}
|
2015-07-13 23:41:04 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
func handleSignals() {
|
|
|
|
// Graceful shut-down on SIGINT/SIGTERM
|
|
|
|
c := make(chan os.Signal, 1)
|
|
|
|
signal.Notify(c, os.Interrupt)
|
|
|
|
signal.Notify(c, syscall.SIGTERM)
|
|
|
|
|
|
|
|
go func() {
|
|
|
|
<-c
|
|
|
|
wg.Wait()
|
|
|
|
os.Exit(1)
|
|
|
|
}()
|
|
|
|
}
|
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
// tlsConfig translates the command-line options into a tls.Config struct
|
|
|
|
func tlsConfig(c *cli.Context) (*tls.Config, error) {
|
|
|
|
var tlsConfig *tls.Config
|
|
|
|
var err error
|
|
|
|
caCertFlag := c.GlobalString("tlscacert")
|
|
|
|
certFlag := c.GlobalString("tlscert")
|
|
|
|
keyFlag := c.GlobalString("tlskey")
|
2015-07-22 23:58:16 +02:00
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
if c.GlobalBool("tls") || c.GlobalBool("tlsverify") {
|
|
|
|
tlsConfig = &tls.Config{
|
|
|
|
InsecureSkipVerify: !c.GlobalBool("tlsverify"),
|
|
|
|
}
|
2015-07-21 00:54:18 +02:00
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
// Load CA cert
|
|
|
|
if caCertFlag != "" {
|
|
|
|
var caCert []byte
|
2015-07-13 23:41:04 +02:00
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
if strings.HasPrefix(caCertFlag, "/") {
|
|
|
|
caCert, err = ioutil.ReadFile(caCertFlag)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
caCert = []byte(caCertFlag)
|
|
|
|
}
|
|
|
|
|
|
|
|
caCertPool := x509.NewCertPool()
|
|
|
|
caCertPool.AppendCertsFromPEM(caCert)
|
|
|
|
|
|
|
|
tlsConfig.RootCAs = caCertPool
|
2015-07-14 22:51:12 +02:00
|
|
|
}
|
2015-07-13 23:41:04 +02:00
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
// Load client certificate
|
|
|
|
if certFlag != "" && keyFlag != "" {
|
|
|
|
var cert tls.Certificate
|
|
|
|
|
|
|
|
if strings.HasPrefix(certFlag, "/") && strings.HasPrefix(keyFlag, "/") {
|
|
|
|
cert, err = tls.LoadX509KeyPair(certFlag, keyFlag)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
cert, err = tls.X509KeyPair([]byte(certFlag), []byte(keyFlag))
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
}
|
|
|
|
tlsConfig.Certificates = []tls.Certificate{cert}
|
|
|
|
}
|
2015-07-13 23:41:04 +02:00
|
|
|
}
|
2015-07-21 21:37:18 +02:00
|
|
|
|
2015-07-24 21:51:21 +02:00
|
|
|
return tlsConfig, nil
|
2015-07-21 21:37:18 +02:00
|
|
|
}
|