podman handler: Work in progress.

Signed-off-by: Paweł Szulik <pawel.szulik@intel.com>

cmd/go.mod

@@ -19,12 +19,11 @@ require (
  github.com/garyburd/redigo v0.0.0-20150301180006-535138d7bcd7
  github.com/influxdb/influxdb v0.9.6-0.20151125225445-9eab56311373
  github.com/mesos/mesos-go v0.0.7-0.20180413204204-29de6ff97b48
- github.com/pquerna/ffjson v0.0.0-20171002144729-d49c2bc1aa13 // indirect
  github.com/prometheus/client_golang v1.8.0
  github.com/stretchr/testify v1.7.0
- golang.org/x/oauth2 v0.0.0-20200902213428-5d25da1a8d43
- google.golang.org/api v0.34.0
+ golang.org/x/oauth2 v0.0.0-20210402161424-2e8d93401602
+ google.golang.org/api v0.44.0
  gopkg.in/olivere/elastic.v2 v2.0.12
- k8s.io/klog/v2 v2.4.0
+ k8s.io/klog/v2 v2.9.0
  k8s.io/utils v0.0.0-20201110183641-67b214c5f920
 )

cmd/internal/container/install/install.go

@@ -21,5 +21,6 @@ import (
  _ "github.com/google/cadvisor/container/containerd/install"
  _ "github.com/google/cadvisor/container/crio/install"
  _ "github.com/google/cadvisor/container/docker/install"
+ _ "github.com/google/cadvisor/container/podman/install"
  _ "github.com/google/cadvisor/container/systemd/install"
 )

cmd/internal/pages/pages.go

@@ -99,6 +99,12 @@ func dockerHandler(containerManager manager.Manager) auth.AuthenticatedHandlerFu
  }
 }
 
+func podmanHandlerNoAuth(containerManager manager.Manager) http.HandlerFunc {
+ return func(w http.ResponseWriter, r *http.Request) {
+ servePodmanPage(containerManager, w, r.URL)
+ }
+}
+
 // Register http handlers
 func RegisterHandlersDigest(mux httpmux.Mux, containerManager manager.Manager, authenticator *auth.DigestAuth, urlBasePrefix string) error {
  // Register the handler for the containers page.
@@ -127,9 +133,11 @@ func RegisterHandlersBasic(mux httpmux.Mux, containerManager manager.Manager, au
  if authenticator != nil {
  mux.HandleFunc(ContainersPage, authenticator.Wrap(containerHandler(containerManager)))
  mux.HandleFunc(DockerPage, authenticator.Wrap(dockerHandler(containerManager)))
+ // TODO (Creatone): Add Podman.
  } else {
  mux.HandleFunc(ContainersPage, containerHandlerNoAuth(containerManager))
  mux.HandleFunc(DockerPage, dockerHandlerNoAuth(containerManager))
+ mux.HandleFunc(PodmanPage, podmanHandlerNoAuth(containerManager))
  }
 
  if ContainersPage[len(ContainersPage)-1] == '/' {

cmd/internal/pages/podman.go

@@ -0,0 +1,138 @@
+// Copyright 2021 Google Inc. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package pages
+
+import (
+ "fmt"
+ "net/http"
+ "net/url"
+ "path"
+ "time"
+
+ "github.com/google/cadvisor/container/podman"
+ info "github.com/google/cadvisor/info/v1"
+ "github.com/google/cadvisor/manager"
+
+ "k8s.io/klog/v2"
+)
+
+const PodmanPage = "/podman/"
+
+func servePodmanPage(m manager.Manager, w http.ResponseWriter, u *url.URL) {
+ start := time.Now()
+
+ containerName := u.Path[len(PodmanPage)-1:]
+ rootDir := getRootDir(containerName)
+
+ var data *pageData
+
+ if containerName == "/" {
+ // Scenario for all containers.
+ reqParams := info.ContainerInfoRequest{
+ NumStats: 0,
+ }
+ conts, err := m.AllPodmanContainers(&reqParams)
+ if err != nil {
+ http.Error(w, fmt.Sprintf("failed to get container %q with error: %v", containerName, err), http.StatusNotFound)
+ return
+ }
+ subcontainers := make([]link, 0, len(conts))
+ for _, cont := range conts {
+ subcontainers = append(subcontainers, link{
+ Text: getContainerDisplayName(cont.ContainerReference),
+ Link: path.Join(rootDir, PodmanPage, podman.ContainerNameToPodmanID(cont.ContainerReference.Name)),
+ })
+ }
+
+ // Get Podman status
+ status, err := podman.Status()
+ if err != nil {
+ http.Error(w, fmt.Sprintf("failed to get docker info: %v", err), http.StatusInternalServerError)
+ return
+ }
+
+ podmanStatus, driverStatus := toStatusKV(info.DockerStatus(status))
+ // Get Podman Images
+ images, err := podman.Images()
+ if err != nil {
+ http.Error(w, fmt.Sprintf("failed to get podman images: %v", err), http.StatusInternalServerError)
+ return
+ }
+
+ podmanContainerText := "Podman Containers"
+ data = &pageData{
+ DisplayName: podmanContainerText,
+ ParentContainers: []link{
+ {
+ Text: podmanContainerText,
+ Link: path.Join(rootDir, PodmanPage),
+ }},
+ Subcontainers: subcontainers,
+ Root: rootDir,
+ DockerStatus: podmanStatus,
+ DockerDriverStatus: driverStatus,
+ DockerImages: images,
+ }
+ } else {
+ // Scenario for specific container.
+ reqParams := info.ContainerInfoRequest{
+ NumStats: 60,
+ }
+ cont, err := m.PodmanContainer(containerName[1:], &reqParams)
+ if err != nil {
+ http.Error(w, fmt.Sprintf("failed to get container %v with error: %v", containerName, err), http.StatusNotFound)
+ return
+ }
+ displayName := getContainerDisplayName(cont.ContainerReference)
+
+ var parentContainers []link
+ parentContainers = append(parentContainers, link{
+ Text: "Podman Containers",
+ Link: path.Join(rootDir, PodmanPage),
+ })
+ parentContainers = append(parentContainers, link{
+ Text: displayName,
+ Link: path.Join(rootDir, PodmanPage, podman.ContainerNameToPodmanID(cont.Name)),
+ })
+
+ machineInfo, err := m.GetMachineInfo()
+ if err != nil {
+ http.Error(w, fmt.Sprintf("failed to get machine info: %v", err), http.StatusInternalServerError)
+ return
+ }
+ data = &pageData{
+ DisplayName: displayName,
+ ContainerName: escapeContainerName(cont.Name),
+ ParentContainers: parentContainers,
+ Spec: cont.Spec,
+ Stats: cont.Stats,
+ MachineInfo: machineInfo,
+ ResourcesAvailable: cont.Spec.HasCpu || cont.Spec.HasMemory || cont.Spec.HasNetwork,
+ CpuAvailable: cont.Spec.HasCpu,
+ MemoryAvailable: cont.Spec.HasMemory,
+ NetworkAvailable: cont.Spec.HasNetwork,
+ FsAvailable: cont.Spec.HasFilesystem,
+ CustomMetricsAvailable: cont.Spec.HasCustomMetrics,
+ Root: rootDir,
+ }
+ }
+
+ err := pageTemplate.Execute(w, data)
+ if err != nil {
+ klog.Errorf("Failed to apply template: %s", err)
+ }
+
+ klog.V(5).Infof("Request took %s", time.Since(start))
+}

container/docker/handler.go

@@ -23,6 +23,8 @@ import (
  "strings"
  "time"
 
+ "github.com/opencontainers/runc/libcontainer/cgroups"
+
  "github.com/google/cadvisor/container"
  "github.com/google/cadvisor/container/common"
  dockerutil "github.com/google/cadvisor/container/docker/utils"
@@ -31,7 +33,6 @@ import (
  "github.com/google/cadvisor/fs"
  info "github.com/google/cadvisor/info/v1"
  "github.com/google/cadvisor/zfs"
- "github.com/opencontainers/runc/libcontainer/cgroups"
 
  dockercontainer "github.com/docker/docker/api/types/container"
  docker "github.com/docker/docker/client"

container/podman/client.go

@@ -0,0 +1,25 @@
+// Copyright 2021 Google Inc. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package podman
+
+import (
+ "context"
+
+ "github.com/containers/podman/v3/pkg/bindings"
+)
+
+func Client() (context.Context, error) {
+ return bindings.NewConnection(context.Background(), *endpointFlag)
+}

container/podman/factory.go

@@ -0,0 +1,103 @@
+// Copyright 2021 Google Inc. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package podman
+
+import (
+ "flag"
+ "path"
+ "regexp"
+ "strings"
+ "sync"
+ "time"
+
+ "github.com/google/cadvisor/container"
+)
+
+const (
+ rootDirRetries = 5
+ rootDirRetryPeriod = time.Second
+)
+
+var (
+ rootDirFlag = flag.String("podman_root", "/var/lib/podman", "podman diretory")
+ endpointFlag = flag.String("podman", "unix:///var/run/podman/podman.sock", "podman endpoint")
+)
+
+var (
+ cgroupRegexp = regexp.MustCompile(`([a-z0-9]{64})`)
+ podmanRootDir string
+ podmanRootDirOnce sync.Once
+)
+
+func RootDir() string {
+ podmanRootDirOnce.Do(func() {
+ for i := 0; i < rootDirRetries; i++ {
+ status, err := Status()
+ if err != nil && status.RootDir != "" {
+ podmanRootDir = status.RootDir
+ break
+ } else {
+ time.Sleep(rootDirRetryPeriod)
+ }
+ }
+ if podmanRootDir == "" {
+ podmanRootDir = *rootDirFlag
+ }
+ })
+ return podmanRootDir
+}
+
+type podmanFactory struct {
+ // Information about the mounted cgroup subsystems.
+ cgroupSubsystem map[string]string
+}
+
+func isContainerName(name string) bool {
+ if strings.HasSuffix(name, ".mount") {
+ return false
+ }
+
+ return cgroupRegexp.MatchString(path.Base(name))
+}
+
+func (f *podmanFactory) CanHandleAndAccept(name string) (handle bool, accept bool, err error) {
+ if !isContainerName(name) {
+ return false, false, nil
+ }
+
+ return true, true, nil
+}
+
+func (f *podmanFactory) DebugInfo() map[string][]string {
+ return map[string][]string{}
+}
+
+func (f *podmanFactory) String() string {
+ return "podman"
+}
+
+func (f *podmanFactory) NewContainerHandler(name string, metadataEnvAllowList []string, inHostNamespace bool) (container.ContainerHandler, error) {
+ return newPodmanContainerHandler(name, f.cgroupSubsystem)
+}
+
+func ContainerNameToPodmanID(name string) string {
+ id := path.Base(name)
+
+ if matches := cgroupRegexp.FindStringSubmatch(id); matches != nil {
+ return matches[1]
+ }
+
+ return id
+}