-
Notifications
You must be signed in to change notification settings - Fork 171
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Philip Laine <philip.laine@gmail.com>
- Loading branch information
1 parent
cf4e989
commit 41c0807
Showing
2 changed files
with
189 additions
and
7 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,164 @@ | ||
| // SPDX-License-Identifier: Apache-2.0 | ||
| // SPDX-FileCopyrightText: 2021-Present The Zarf Authors | ||
|
|
||
| // Package packager2 is the new implementation for packager. | ||
| package packager2 | ||
|
|
||
| import ( | ||
| "context" | ||
| "errors" | ||
| "fmt" | ||
| "io" | ||
| "net/http" | ||
| "net/url" | ||
| "os" | ||
| "path/filepath" | ||
|
|
||
| "github.com/defenseunicorns/pkg/helpers/v2" | ||
| "github.com/defenseunicorns/pkg/oci" | ||
| goyaml "github.com/goccy/go-yaml" | ||
| "github.com/mholt/archiver/v3" | ||
|
|
||
| "github.com/zarf-dev/zarf/src/api/v1alpha1" | ||
| "github.com/zarf-dev/zarf/src/config" | ||
| "github.com/zarf-dev/zarf/src/pkg/layout" | ||
| "github.com/zarf-dev/zarf/src/pkg/packager/filters" | ||
| "github.com/zarf-dev/zarf/src/pkg/utils" | ||
| "github.com/zarf-dev/zarf/src/pkg/zoci" | ||
| ) | ||
|
|
||
| // Fetch fetches the Zarf package from the given sources. | ||
| func Fetch(ctx context.Context, src, tarPath, shasum string, filter filters.ComponentFilterStrategy) error { | ||
| u, err := url.Parse(src) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if u.Scheme == "" { | ||
| return errors.New("scheme cannot be empty") | ||
| } | ||
| if u.Host == "" { | ||
| return errors.New("scheme cannot be empty") | ||
| } | ||
| switch u.Scheme { | ||
| case "oci": | ||
| err := fetchOCI(ctx, src, tarPath, shasum, filter) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| case "http", "https": | ||
| err := fetchHTTP(ctx, src, tarPath, shasum) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| default: | ||
| return fmt.Errorf("unknown scheme %s", u.Scheme) | ||
| } | ||
|
|
||
| // Minimal effort to verify that this is a Zarf package. | ||
| // TODO (phillebaba): Expand in the future to include more package verification. | ||
| err = archiver.Walk(tarPath, func(f archiver.File) error { | ||
| if f.Name() == layout.ZarfYAML { | ||
| b, err := io.ReadAll(f) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| var pkg v1alpha1.ZarfPackage | ||
| err = goyaml.Unmarshal(b, &pkg) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| } | ||
| return nil | ||
| }) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| return nil | ||
| } | ||
|
|
||
| func fetchOCI(ctx context.Context, src, tarPath, shasum string, filter filters.ComponentFilterStrategy) error { | ||
| tmpDir, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| defer os.Remove(tmpDir) | ||
| if shasum != "" { | ||
| src = fmt.Sprintf("%s@sha256:%s", src, shasum) | ||
| } | ||
| arch := config.GetArch() | ||
| remote, err := zoci.NewRemote(src, oci.PlatformForArch(arch)) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| pkg, err := remote.FetchZarfYAML(ctx) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| pkg.Components, err = filter.Apply(pkg) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| layersToPull, err := remote.LayersFromRequestedComponents(ctx, pkg.Components) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| _, err = remote.PullPackage(ctx, tmpDir, config.CommonOptions.OCIConcurrency, layersToPull...) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| allTheLayers, err := filepath.Glob(filepath.Join(tmpDir, "*")) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| err = os.Remove(tarPath) | ||
| if err != nil && !errors.Is(err, os.ErrNotExist) { | ||
| return err | ||
| } | ||
| err = archiver.Archive(allTheLayers, tarPath) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| return nil | ||
| } | ||
|
|
||
| func fetchHTTP(ctx context.Context, src, tarPath, shasum string) error { | ||
| if !config.CommonOptions.Insecure && shasum == "" { | ||
| return errors.New("remote package provided without shasum while insecure is not enabled") | ||
| } | ||
| f, err := os.Create(tarPath) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| defer f.Close() | ||
| req, err := http.NewRequestWithContext(ctx, http.MethodGet, src, nil) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| resp, err := http.DefaultClient.Do(req) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| defer resp.Body.Close() | ||
| if resp.StatusCode != http.StatusOK { | ||
| _, err := io.Copy(io.Discard, resp.Body) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| return fmt.Errorf("unexpected http response status code %s for source %s", resp.Status, src) | ||
| } | ||
| _, err = io.Copy(f, resp.Body) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| // Check checksum if src included one. | ||
| if shasum != "" { | ||
| received, err := helpers.GetSHA256OfFile(tarPath) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if received != shasum { | ||
| return fmt.Errorf("shasum mismatch for file %s, expected %s bu got %s ", tarPath, shasum, received) | ||
| } | ||
| } | ||
| return nil | ||
| } |