-
Notifications
You must be signed in to change notification settings - Fork 20
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
utils: add process and command funcs
- that we can drop some dependency Signed-off-by: Vicente Cheng <[email protected]>
- Loading branch information
1 parent
7f597b0
commit f241f55
Showing
4 changed files
with
161 additions
and
7 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,83 @@ | ||
package utils | ||
|
||
import ( | ||
"bytes" | ||
"os/exec" | ||
"path/filepath" | ||
"time" | ||
|
||
"github.com/pkg/errors" | ||
) | ||
|
||
const ( | ||
NSBinary = "nsenter" | ||
cmdTimeoutDefault = 180 * time.Second // 3 minutes by default | ||
cmdTimeoutNone = 0 * time.Second // no timeout | ||
) | ||
|
||
type Executor struct { | ||
namespace string | ||
cmdTimeout time.Duration | ||
} | ||
|
||
func NewExecutor() *Executor { | ||
return &Executor{ | ||
namespace: "", | ||
cmdTimeout: cmdTimeoutDefault, | ||
} | ||
} | ||
|
||
func NewExecutorWithNS(ns string) (*Executor, error) { | ||
exec := NewExecutor() | ||
exec.namespace = ns | ||
|
||
// test if nsenter is available | ||
if _, err := execute(NSBinary, []string{"-V"}, cmdTimeoutNone); err != nil { | ||
return nil, errors.Wrap(err, "cannot find nsenter for namespace switching") | ||
} | ||
return exec, nil | ||
} | ||
|
||
func (exec *Executor) SetTimeout(timeout time.Duration) { | ||
exec.cmdTimeout = timeout | ||
} | ||
|
||
func (exec *Executor) Execute(cmd string, args []string) (string, error) { | ||
command := cmd | ||
cmdArgs := args | ||
if exec.namespace != "" { | ||
cmdArgs = []string{ | ||
"--mount=" + filepath.Join(exec.namespace, "mnt"), | ||
"--net=" + filepath.Join(exec.namespace, "net"), | ||
"--ipc=" + filepath.Join(exec.namespace, "ipc"), | ||
cmd, | ||
} | ||
command = NSBinary | ||
cmdArgs = append(cmdArgs, args...) | ||
} | ||
return execute(command, cmdArgs, exec.cmdTimeout) | ||
} | ||
|
||
func execute(command string, args []string, timeout time.Duration) (string, error) { | ||
cmd := exec.Command(command, args...) | ||
|
||
var output, stderr bytes.Buffer | ||
cmd.Stdout = &output | ||
cmd.Stderr = &stderr | ||
|
||
timer := &time.Timer{} | ||
if timeout != cmdTimeoutNone { | ||
// add timer to kill the process if timeout | ||
timer = time.AfterFunc(timeout, func() { | ||
cmd.Process.Kill() | ||
}) | ||
} | ||
defer timer.Stop() | ||
|
||
if err := cmd.Run(); err != nil { | ||
return "", errors.Wrapf(err, "failed to execute: %v %v, output %s, stderr %s", | ||
command, args, output.String(), stderr.String()) | ||
} | ||
|
||
return output.String(), nil | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,73 @@ | ||
package utils | ||
|
||
import ( | ||
"fmt" | ||
|
||
"github.com/prometheus/procfs" | ||
) | ||
|
||
const ( | ||
DockerdProcess = "dockerd" | ||
ContainerdProcess = "containerd" | ||
ContainerdProcessShim = "containerd-shim" | ||
) | ||
|
||
func getPidProc(hostProcPath string, pid int) (*procfs.Proc, error) { | ||
fs, err := procfs.NewFS(hostProcPath) | ||
if err != nil { | ||
return nil, err | ||
} | ||
proc, err := fs.Proc(pid) | ||
if err != nil { | ||
return nil, err | ||
} | ||
return &proc, nil | ||
} | ||
|
||
func getSelfProc(hostProcPath string) (*procfs.Proc, error) { | ||
fs, err := procfs.NewFS(hostProcPath) | ||
if err != nil { | ||
return nil, err | ||
} | ||
proc, err := fs.Self() | ||
if err != nil { | ||
return nil, err | ||
} | ||
return &proc, nil | ||
} | ||
|
||
func findAncestorByName(hostProcPath string, ancestorProcess string) (*procfs.Proc, error) { | ||
proc, err := getSelfProc(hostProcPath) | ||
if err != nil { | ||
return nil, err | ||
} | ||
|
||
for { | ||
st, err := proc.Stat() | ||
if err != nil { | ||
return nil, err | ||
} | ||
if st.Comm == ancestorProcess { | ||
return proc, nil | ||
} | ||
if st.PPID == 0 { | ||
break | ||
} | ||
proc, err = getPidProc(hostProcPath, st.PPID) | ||
if err != nil { | ||
return nil, err | ||
} | ||
} | ||
return nil, fmt.Errorf("failed to find the ancestor process: %s", ancestorProcess) | ||
} | ||
|
||
func GetHostNamespacePath(hostProcPath string) string { | ||
containerNames := []string{DockerdProcess, ContainerdProcess, ContainerdProcessShim} | ||
for _, name := range containerNames { | ||
proc, err := findAncestorByName(hostProcPath, name) | ||
if err == nil { | ||
return fmt.Sprintf("%s/%d/ns/", hostProcPath, proc.PID) | ||
} | ||
} | ||
return fmt.Sprintf("%s/%d/ns/", hostProcPath, 1) | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters