mirror of
https://github.com/rapid7/metasploitable3.git
synced 2024-07-07 20:22:21 +02:00
138 lines
4.1 KiB
Ruby
138 lines
4.1 KiB
Ruby
module DockerCookbook
|
|
class DockerBase < Chef::Resource
|
|
require 'docker'
|
|
require 'shellwords'
|
|
|
|
################
|
|
# Helper methods
|
|
################
|
|
|
|
def connection
|
|
@connection ||= begin
|
|
opts = {}
|
|
opts[:read_timeout] = read_timeout if read_timeout
|
|
opts[:write_timeout] = write_timeout if write_timeout
|
|
|
|
if host =~ /^tcp:/
|
|
opts[:scheme] = 'https' if tls || !tls_verify.nil?
|
|
opts[:ssl_ca_file] = tls_ca_cert if tls_ca_cert
|
|
opts[:client_cert] = tls_client_cert if tls_client_cert
|
|
opts[:client_key] = tls_client_key if tls_client_key
|
|
end
|
|
Docker::Connection.new(host || Docker.url, opts)
|
|
end
|
|
end
|
|
|
|
def with_retries(&_block)
|
|
tries = api_retries
|
|
begin
|
|
yield
|
|
# Only catch errors that can be fixed with retries.
|
|
rescue Docker::Error::ServerError, # 500
|
|
Docker::Error::UnexpectedResponseError, # 400
|
|
Docker::Error::TimeoutError,
|
|
Docker::Error::IOError
|
|
tries -= 1
|
|
retry if tries > 0
|
|
raise
|
|
end
|
|
end
|
|
|
|
def call_action(_action)
|
|
new_resource.run_action
|
|
end
|
|
|
|
#########
|
|
# Classes
|
|
#########
|
|
|
|
class UnorderedArray < Array
|
|
def ==(other)
|
|
# If I (desired env) am a subset of the current env, let == return true
|
|
other.is_a?(Array) && all? { |val| other.include?(val) }
|
|
end
|
|
end
|
|
|
|
class PartialHash < Hash
|
|
def ==(other)
|
|
other.is_a?(Hash) && all? { |key, val| other.key?(key) && other[key] == val }
|
|
end
|
|
end
|
|
|
|
################
|
|
# Type Constants
|
|
#
|
|
# These will be used when declaring resource property types in the
|
|
# docker_service, docker_container, and docker_image resource.
|
|
#
|
|
################
|
|
|
|
UnorderedArrayType = property_type(
|
|
is: [UnorderedArray, nil],
|
|
coerce: proc { |v| v.nil? ? nil : UnorderedArray.new(Array(v)) }
|
|
) unless defined?(UnorderedArrayType)
|
|
|
|
PartialHashType = property_type(
|
|
is: [PartialHash, nil],
|
|
coerce: proc { |v| v.nil? ? nil : PartialHash[v] }
|
|
) unless defined?(PartialHashType)
|
|
|
|
#####################
|
|
# Resource properties
|
|
#####################
|
|
|
|
property :api_retries, Integer,
|
|
default: 3,
|
|
desired_state: false
|
|
|
|
property :read_timeout, Integer,
|
|
default: 60,
|
|
desired_state: false
|
|
|
|
property :write_timeout, Integer,
|
|
desired_state: false
|
|
|
|
property :running_wait_time, Integer,
|
|
default: 20,
|
|
desired_state: false
|
|
|
|
property :tls, [TrueClass, FalseClass, nil],
|
|
default: lazy { ENV['DOCKER_TLS'] },
|
|
desired_state: false
|
|
|
|
property :tls_verify, [TrueClass, FalseClass, nil],
|
|
default: lazy { ENV['DOCKER_TLS_VERIFY'] },
|
|
desired_state: false
|
|
|
|
property :tls_ca_cert, [String, nil],
|
|
default: lazy { ENV['DOCKER_CERT_PATH'] ? "#{ENV['DOCKER_CERT_PATH']}/ca.pem" : nil },
|
|
desired_state: false
|
|
|
|
property :tls_server_cert, String,
|
|
desired_state: false
|
|
|
|
property :tls_server_key, String,
|
|
desired_state: false
|
|
|
|
property :tls_client_cert, [String, nil],
|
|
default: lazy { ENV['DOCKER_CERT_PATH'] ? "#{ENV['DOCKER_CERT_PATH']}/cert.pem" : nil },
|
|
desired_state: false
|
|
|
|
property :tls_client_key, [String, nil],
|
|
default: lazy { ENV['DOCKER_CERT_PATH'] ? "#{ENV['DOCKER_CERT_PATH']}/key.pem" : nil },
|
|
desired_state: false
|
|
|
|
alias_method :tlscacert, :tls_ca_cert
|
|
alias_method :tlscert, :tls_server_cert
|
|
alias_method :tlskey, :tls_server_key
|
|
alias_method :tlsverify, :tls_verify
|
|
|
|
declare_action_class.class_eval do
|
|
# https://github.com/docker/docker/blob/4fcb9ac40ce33c4d6e08d5669af6be5e076e2574/registry/auth.go#L231
|
|
def parse_registry_host(val)
|
|
val.sub(%r{https?://}, '').split('/').first
|
|
end
|
|
end
|
|
end
|
|
end
|