86 lines
2.6 KiB
Go
86 lines
2.6 KiB
Go
package mirror
|
|
|
|
import (
|
|
"fmt"
|
|
"log"
|
|
"os"
|
|
|
|
"github.com/docker/attest/internal/embed"
|
|
"github.com/docker/attest/pkg/tuf"
|
|
"github.com/google/go-containerregistry/pkg/authn"
|
|
"github.com/google/go-containerregistry/pkg/name"
|
|
v1 "github.com/google/go-containerregistry/pkg/v1"
|
|
"github.com/google/go-containerregistry/pkg/v1/empty"
|
|
"github.com/google/go-containerregistry/pkg/v1/layout"
|
|
"github.com/google/go-containerregistry/pkg/v1/remote"
|
|
)
|
|
|
|
func NewTufMirror(root []byte, tufPath, metadataURL, targetsURL string, versionChecker tuf.VersionChecker) (*TufMirror, error) {
|
|
if root == nil {
|
|
root = embed.DefaultRoot
|
|
}
|
|
tufClient, err := tuf.NewTufClient(root, tufPath, metadataURL, targetsURL, versionChecker)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to create TUF client: %w", err)
|
|
}
|
|
return &TufMirror{TufClient: tufClient, tufPath: tufPath, metadataURL: metadataURL, targetsURL: targetsURL}, nil
|
|
}
|
|
|
|
func PushImageToRegistry(image v1.Image, imageName string) error {
|
|
// Parse the image name
|
|
ref, err := name.ParseReference(imageName)
|
|
if err != nil {
|
|
log.Fatalf("Failed to parse image name: %v", err)
|
|
}
|
|
// Get the authenticator from the default Docker keychain
|
|
auth, err := authn.DefaultKeychain.Resolve(ref.Context())
|
|
if err != nil {
|
|
log.Fatalf("Failed to get authenticator: %v", err)
|
|
}
|
|
// Push the image to the registry
|
|
return remote.Write(ref, image, remote.WithAuth(auth))
|
|
}
|
|
|
|
func PushIndexToRegistry(image v1.ImageIndex, imageName string) error {
|
|
// Parse the index name
|
|
ref, err := name.ParseReference(imageName)
|
|
if err != nil {
|
|
log.Fatalf("Failed to parse image name: %v", err)
|
|
}
|
|
// Get the authenticator from the default Docker keychain
|
|
auth, err := authn.DefaultKeychain.Resolve(ref.Context())
|
|
if err != nil {
|
|
log.Fatalf("Failed to get authenticator: %v", err)
|
|
}
|
|
// Push the index to the registry
|
|
return remote.WriteIndex(ref, image, remote.WithAuth(auth))
|
|
}
|
|
|
|
func SaveImageAsOCILayout(image v1.Image, path string) error {
|
|
// Save the image to the local filesystem
|
|
err := os.MkdirAll(path, os.FileMode(0777))
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create directory: %w", err)
|
|
}
|
|
index := empty.Index
|
|
l, err := layout.Write(path, index)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create index: %w", err)
|
|
}
|
|
return l.AppendImage(image)
|
|
}
|
|
|
|
func SaveIndexAsOCILayout(image v1.ImageIndex, path string) error {
|
|
// Save the index to the local filesystem
|
|
err := os.MkdirAll(path, os.FileMode(0777))
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create directory: %w", err)
|
|
}
|
|
|
|
_, err = layout.Write(path, image)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create index: %w", err)
|
|
}
|
|
return nil
|
|
}
|