mirror of
https://github.com/containers/podman.git
synced 2026-11-02 14:14:20 -05:00
renovate[bot]
73ac4d256d
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
119 lines
3.5 KiB
Go
119 lines
3.5 KiB
Go
package client
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"net/url"
|
|
"path"
|
|
"slices"
|
|
"strings"
|
|
|
|
cerrdefs "github.com/containerd/errdefs"
|
|
"github.com/moby/moby/api/types/container"
|
|
ocispec "github.com/opencontainers/image-spec/specs-go/v1"
|
|
)
|
|
|
|
// ContainerCreate creates a new container based on the given configuration.
|
|
// It can be associated with a name, but it's not mandatory.
|
|
func (cli *Client) ContainerCreate(ctx context.Context, options ContainerCreateOptions) (ContainerCreateResult, error) {
|
|
cfg := options.Config
|
|
|
|
if cfg == nil {
|
|
cfg = &container.Config{}
|
|
}
|
|
|
|
if options.Image != "" {
|
|
if cfg.Image != "" {
|
|
return ContainerCreateResult{}, cerrdefs.ErrInvalidArgument.WithMessage("either Image or config.Image should be set")
|
|
}
|
|
newCfg := *cfg
|
|
newCfg.Image = options.Image
|
|
cfg = &newCfg
|
|
}
|
|
|
|
if cfg.Image == "" {
|
|
return ContainerCreateResult{}, cerrdefs.ErrInvalidArgument.WithMessage("config.Image or Image is required")
|
|
}
|
|
|
|
query := url.Values{}
|
|
if options.Platform != nil {
|
|
if p := formatPlatform(*options.Platform); p != "unknown" {
|
|
query.Set("platform", p)
|
|
}
|
|
}
|
|
|
|
if options.Name != "" {
|
|
query.Set("name", options.Name)
|
|
}
|
|
|
|
resp, err := cli.post(ctx, "/containers/create", query, nil, container.CreateRequest{
|
|
Config: cfg,
|
|
HostConfig: normalizeHostConfig(options.HostConfig),
|
|
NetworkingConfig: options.NetworkingConfig,
|
|
})
|
|
defer ensureReaderClosed(resp)
|
|
if err != nil {
|
|
return ContainerCreateResult{}, err
|
|
}
|
|
|
|
var response container.CreateResponse
|
|
err = json.NewDecoder(resp.Body).Decode(&response)
|
|
return ContainerCreateResult{ID: response.ID, Warnings: response.Warnings}, err
|
|
}
|
|
|
|
// formatPlatform returns a formatted string representing platform (e.g., "linux/arm/v7").
|
|
//
|
|
// It is a fork of [platforms.Format], and does not yet support "os.version",
|
|
// as [platforms.FormatAll] does.
|
|
//
|
|
// [platforms.Format]: https://github.com/containerd/platforms/blob/v1.0.0-rc.1/platforms.go#L309-L316
|
|
// [platforms.FormatAll]: https://github.com/containerd/platforms/blob/v1.0.0-rc.1/platforms.go#L318-L330
|
|
func formatPlatform(platform ocispec.Platform) string {
|
|
if platform.OS == "" {
|
|
return "unknown"
|
|
}
|
|
return path.Join(platform.OS, platform.Architecture, platform.Variant)
|
|
}
|
|
|
|
// allCapabilities is a magic value for "all capabilities"
|
|
const allCapabilities = "ALL"
|
|
|
|
// normalizeCap normalizes a capability to its canonical format by upper-casing
|
|
// and adding a "CAP_" prefix (if not yet present). It also accepts the "ALL"
|
|
// magic-value.
|
|
func normalizeCap(c string) string {
|
|
c = strings.ToUpper(c)
|
|
if c != allCapabilities && !strings.HasPrefix(c, "CAP_") {
|
|
c = "CAP_" + c
|
|
}
|
|
return c
|
|
}
|
|
|
|
// normalizeCapabilities normalizes capabilities to their canonical form,
|
|
// removes duplicates, and sorts the results.
|
|
//
|
|
// It is similar to [caps.NormalizeLegacyCapabilities],
|
|
// but performs no validation based on supported capabilities.
|
|
//
|
|
// [caps.NormalizeLegacyCapabilities]: https://github.com/moby/moby/blob/v28.3.2/oci/caps/utils.go#L56
|
|
func normalizeCapabilities(caps []string) []string {
|
|
normalized := slices.Clone(caps)
|
|
for i, c := range normalized {
|
|
normalized[i] = normalizeCap(c)
|
|
}
|
|
slices.Sort(normalized)
|
|
return slices.Compact(normalized)
|
|
}
|
|
|
|
// normalizeHostConfig returns a shallow copy of hostConfig with capabilities normalized.
|
|
func normalizeHostConfig(hostConfig *container.HostConfig) *container.HostConfig {
|
|
if hostConfig == nil {
|
|
return nil
|
|
}
|
|
|
|
normalized := *hostConfig
|
|
normalized.CapAdd = normalizeCapabilities(hostConfig.CapAdd)
|
|
normalized.CapDrop = normalizeCapabilities(hostConfig.CapDrop)
|
|
return &normalized
|
|
}
|