docker-engine-ruby 0.7.2 → 0.7.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cff37aa30011a27df0c003775bfcdad05a655e1d4fcc5e537a9e3d802211caa6
-  data.tar.gz: 80e03ef8dba5fcf1d501b08b5fabe388e8c6e9bd37d915a1d05b592c5d7aa905
+  metadata.gz: e73699711feb4aeef5afb77d55ee8fa7cd56a299be8055851902ae5f4a70ee0e
+  data.tar.gz: a1dfa1dc7a2ce60e4fd8a670419aed00e690ddf1d509c7661e0433b581c0b983
 SHA512:
-  metadata.gz: 5fb1dea729c8a8266fa41c017fc23000dcdbbec3170abbb1e24b5412671198fed1866405024f7f1c1f29cd419af483110f69337f8e71e0e567a33b7080c1c0a5
-  data.tar.gz: 964f96f9ffd40214d32bff6c60c4d99e0ee916ab3a1943bc49c14af1905cfeaafc17a214f01b99539862bafaab134c0e559efc3a2d9770643022fa34b8101127
+  metadata.gz: c1d20af5fec9dd9c9f21472cd2dd6fac13a9c457b5e8f1db22ce9e6fe81396d3b00e630c0214afffd408385db9c8ae1702c5dfdde56cfdb9a9e777844fedeb35
+  data.tar.gz: 282bb31fc5659dbea022fa5f8199304f3036b5739816182df8314ea337aebb066b3bdf8d60c5e0e00a977807603fe22ba3b877d66bb10b275e70511fdb17444a

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.7.3 (2026-02-24)
+
+Full Changelog: [v0.7.2...v0.7.3](https://github.com/Hexlet/docker-ruby/compare/v0.7.2...v0.7.3)
+
 ## 0.7.2 (2026-02-20)
 
 Full Changelog: [v0.7.1...v0.7.2](https://github.com/Hexlet/docker-ruby/compare/v0.7.1...v0.7.2)

data/README.md

@@ -17,7 +17,7 @@ To use this gem, install via Bundler by adding the following to your application
 <!-- x-release-please-start-version -->
 
 ```ruby
-gem "docker-engine-ruby", "~> 0.7.2"
+gem "docker-engine-ruby", "~> 0.7.3"
 ```
 
 <!-- x-release-please-end -->
@@ -132,6 +132,15 @@ docker = DockerEngineRuby::Client.new(
 )
 ```
 
+By default, peer verification is enabled. You can disable it explicitly:
+
+```ruby
+docker = DockerEngineRuby::Client.new(
+  base_url: "https://localhost:2376",
+  tls_verify_peer: false
+)
+```
+
 You can also configure these through environment variables:
 
 - `DOCKER_TLS_CA_CERT_PATH`

data/lib/docker_engine_ruby/client.rb

@@ -15,6 +15,9 @@ module DockerEngineRuby
     # Default max retry delay in seconds.
     DEFAULT_MAX_RETRY_DELAY = 8.0
 
+    # Whether to verify server TLS certificate chain.
+    DEFAULT_TLS_VERIFY_PEER = true
+
     # rubocop:disable Style/MutableConstant
     # @type [Hash{Symbol=>String}]
     ENVIRONMENTS = {production: "http://localhost:2375", production_tls: "https://localhost:2376"}
@@ -106,6 +109,8 @@ module DockerEngineRuby
     # @param initial_retry_delay [Float]
     #
     # @param max_retry_delay [Float]
+    #
+    # @param tls_verify_peer [Boolean] Whether to verify server TLS certificate chain.
     def initialize(
       tls_ca_cert_path: ENV["DOCKER_TLS_CA_CERT_PATH"],
       tls_client_cert_path: ENV["DOCKER_TLS_CLIENT_CERT_PATH"],
@@ -115,10 +120,12 @@ module DockerEngineRuby
       max_retries: self.class::DEFAULT_MAX_RETRIES,
       timeout: self.class::DEFAULT_TIMEOUT_IN_SECONDS,
       initial_retry_delay: self.class::DEFAULT_INITIAL_RETRY_DELAY,
-      max_retry_delay: self.class::DEFAULT_MAX_RETRY_DELAY
+      max_retry_delay: self.class::DEFAULT_MAX_RETRY_DELAY,
+      tls_verify_peer: self.class::DEFAULT_TLS_VERIFY_PEER
     )
       base_url ||= DockerEngineRuby::Client::ENVIRONMENTS.fetch(environment&.to_sym || :production) do
-        message = "environment must be one of #{DockerEngineRuby::Client::ENVIRONMENTS.keys}, got #{environment}"
+        message = "environment must be one of " \
+                  "#{DockerEngineRuby::Client::ENVIRONMENTS.keys}, got #{environment}"
         raise ArgumentError.new(message)
       end
 
@@ -132,6 +139,7 @@ module DockerEngineRuby
         max_retries: max_retries,
         initial_retry_delay: initial_retry_delay,
         max_retry_delay: max_retry_delay,
+        tls_verify_peer: tls_verify_peer,
         tls_ca_cert_path: @tls_ca_cert_path,
         tls_client_cert_path: @tls_client_cert_path,
         tls_client_key_path: @tls_client_key_path

data/lib/docker_engine_ruby/internal/transport/base_client.rb

@@ -197,6 +197,7 @@ module DockerEngineRuby
         # @param max_retry_delay [Float]
         # @param headers [Hash{String=>String, Integer, Array<String, Integer, nil>, nil}]
         # @param idempotency_header [String, nil]
+        # @param tls_verify_peer [Boolean]
         # @param tls_ca_cert_path [String, nil]
         # @param tls_client_cert_path [String, nil]
         # @param tls_client_key_path [String, nil]
@@ -208,6 +209,7 @@ module DockerEngineRuby
           max_retry_delay: 0.0,
           headers: {},
           idempotency_header: nil,
+          tls_verify_peer: true,
           tls_ca_cert_path: nil,
           tls_client_cert_path: nil,
           tls_client_key_path: nil
@@ -219,6 +221,7 @@ module DockerEngineRuby
           end
           @requester = DockerEngineRuby::Internal::Transport::PooledNetRequester.new(
             unix_socket_path: @unix_socket_path,
+            tls_verify_peer: tls_verify_peer,
             tls_ca_cert_path: tls_ca_cert_path,
             tls_client_cert_path: tls_client_cert_path,
             tls_client_key_path: tls_client_key_path

data/lib/docker_engine_ruby/internal/transport/pooled_net_requester.rb

@@ -37,10 +37,11 @@ module DockerEngineRuby
           # @param tls_cert [OpenSSL::X509::Certificate, nil]
           # @param tls_key [OpenSSL::PKey::PKey, nil]
           # @param unix_socket_path [String, nil]
+          # @param tls_verify_peer [Boolean]
           # @param url [URI::Generic]
           #
           # @return [Net::HTTP]
-          def connect(cert_store:, tls_cert:, tls_key:, unix_socket_path:, url:)
+          def connect(cert_store:, tls_cert:, tls_key:, unix_socket_path:, tls_verify_peer:, url:)
             if unix_socket_path
               return UnixSocketHTTP.new(unix_socket_path).tap do
                 _1.use_ssl = false
@@ -65,6 +66,7 @@ module DockerEngineRuby
                 _1.cert_store = cert_store
                 _1.cert = tls_cert if tls_cert
                 _1.key = tls_key if tls_key
+                _1.verify_mode = tls_verify_peer ? OpenSSL::SSL::VERIFY_PEER : OpenSSL::SSL::VERIFY_NONE
               end
             end
           end
@@ -141,6 +143,7 @@ module DockerEngineRuby
                   tls_cert: @tls_cert,
                   tls_key: @tls_key,
                   unix_socket_path: unix_socket_path,
+                  tls_verify_peer: @tls_verify_peer,
                   url: url
                 )
               end
@@ -236,9 +239,11 @@ module DockerEngineRuby
         # @param tls_client_cert_path [String, nil]
         # @param tls_client_key_path [String, nil]
         # @param unix_socket_path [String, nil]
+        # @param tls_verify_peer [Boolean]
         def initialize(
           size: self.class::DEFAULT_MAX_CONNECTIONS,
           unix_socket_path: nil,
+          tls_verify_peer: true,
           tls_ca_cert_path: nil,
           tls_client_cert_path: nil,
           tls_client_key_path: nil
@@ -246,12 +251,15 @@ module DockerEngineRuby
           @mutex = Mutex.new
           @size = size
           @default_unix_socket_path = unix_socket_path
+          @tls_verify_peer = tls_verify_peer
           @cert_store = OpenSSL::X509::Store.new.tap(&:set_default_paths)
           @cert_store.add_file(tls_ca_cert_path) if tls_ca_cert_path
 
           if tls_client_cert_path || tls_client_key_path
             if tls_client_cert_path.nil? || tls_client_key_path.nil?
-              raise ArgumentError.new("Both tls_client_cert_path and tls_client_key_path must be provided together.")
+              raise ArgumentError.new(
+                "Both tls_client_cert_path and tls_client_key_path must be provided together."
+              )
             end
 
             @tls_cert = OpenSSL::X509::Certificate.new(File.read(tls_client_cert_path))

data/lib/docker_engine_ruby/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DockerEngineRuby
-  VERSION = "0.7.2"
+  VERSION = "0.7.3"
 end

data/rbi/docker_engine_ruby/client.rbi

@@ -10,6 +10,8 @@ module DockerEngineRuby
 
     DEFAULT_MAX_RETRY_DELAY = T.let(8.0, Float)
 
+    DEFAULT_TLS_VERIFY_PEER = T.let(T.unsafe(nil), T::Boolean)
+
     ENVIRONMENTS =
       T.let(
         {
@@ -88,7 +90,8 @@ module DockerEngineRuby
         max_retries: Integer,
         timeout: Float,
         initial_retry_delay: Float,
-        max_retry_delay: Float
+        max_retry_delay: Float,
+        tls_verify_peer: T::Boolean
       ).returns(T.attached_class)
     end
     def self.new(
@@ -115,7 +118,8 @@ module DockerEngineRuby
       max_retries: DockerEngineRuby::Client::DEFAULT_MAX_RETRIES,
       timeout: DockerEngineRuby::Client::DEFAULT_TIMEOUT_IN_SECONDS,
       initial_retry_delay: DockerEngineRuby::Client::DEFAULT_INITIAL_RETRY_DELAY,
-      max_retry_delay: DockerEngineRuby::Client::DEFAULT_MAX_RETRY_DELAY
+      max_retry_delay: DockerEngineRuby::Client::DEFAULT_MAX_RETRY_DELAY,
+      tls_verify_peer: DockerEngineRuby::Client::DEFAULT_TLS_VERIFY_PEER
     )
     end
   end

data/rbi/docker_engine_ruby/internal/transport/base_client.rbi

@@ -166,6 +166,7 @@ module DockerEngineRuby
                 )
               ],
             idempotency_header: T.nilable(String),
+            tls_verify_peer: T::Boolean,
             tls_ca_cert_path: T.nilable(String),
             tls_client_cert_path: T.nilable(String),
             tls_client_key_path: T.nilable(String)
@@ -179,6 +180,7 @@ module DockerEngineRuby
           max_retry_delay: 0.0,
           headers: {},
           idempotency_header: nil,
+          tls_verify_peer: true,
           tls_ca_cert_path: nil,
           tls_client_cert_path: nil,
           tls_client_key_path: nil

data/rbi/docker_engine_ruby/internal/transport/pooled_net_requester.rbi

@@ -31,12 +31,13 @@ module DockerEngineRuby
               cert_store: OpenSSL::X509::Store,
               tls_cert: T.nilable(OpenSSL::X509::Certificate),
               tls_key: T.nilable(OpenSSL::PKey::PKey),
+              tls_verify_peer: T::Boolean,
               url: URI::Generic
             ).returns(
               Net::HTTP
             )
           end
-          def connect(cert_store:, tls_cert:, tls_key:, url:)
+          def connect(cert_store:, tls_cert:, tls_key:, tls_verify_peer:, url:)
           end
 
           # @api private
@@ -81,6 +82,7 @@ module DockerEngineRuby
         sig do
           params(
             size: Integer,
+            tls_verify_peer: T::Boolean,
             tls_ca_cert_path: T.nilable(String),
             tls_client_cert_path: T.nilable(String),
             tls_client_key_path: T.nilable(String)
@@ -88,6 +90,7 @@ module DockerEngineRuby
         end
         def self.new(
           size: DockerEngineRuby::Internal::Transport::PooledNetRequester::DEFAULT_MAX_CONNECTIONS,
+          tls_verify_peer: true,
           tls_ca_cert_path: nil,
           tls_client_cert_path: nil,
           tls_client_key_path: nil

data/sig/docker_engine_ruby/client.rbs

@@ -8,6 +8,8 @@ module DockerEngineRuby
 
     DEFAULT_MAX_RETRY_DELAY: Float
 
+    DEFAULT_TLS_VERIFY_PEER: bool
+
     ENVIRONMENTS: {
       production: "http://localhost:2375",
       production_tls: "https://localhost:2376"
@@ -58,7 +60,8 @@ module DockerEngineRuby
       ?max_retries: Integer,
       ?timeout: Float,
       ?initial_retry_delay: Float,
-      ?max_retry_delay: Float
+      ?max_retry_delay: Float,
+      ?tls_verify_peer: bool
     ) -> void
   end
 end

data/sig/docker_engine_ruby/internal/transport/base_client.rbs

@@ -83,6 +83,7 @@ module DockerEngineRuby
           | Integer
           | ::Array[(String | Integer)?])?],
           ?idempotency_header: String?,
+          ?tls_verify_peer: bool,
           ?tls_ca_cert_path: String?,
           ?tls_client_cert_path: String?,
           ?tls_client_key_path: String?

data/sig/docker_engine_ruby/internal/transport/pooled_net_requester.rbs

@@ -21,6 +21,7 @@ module DockerEngineRuby
           cert_store: OpenSSL::X509::Store,
           tls_cert: OpenSSL::X509::Certificate?,
           tls_key: OpenSSL::PKey::PKey?,
+          tls_verify_peer: bool,
           url: URI::Generic
         ) -> top
 
@@ -45,6 +46,7 @@ module DockerEngineRuby
 
         def initialize: (
           ?size: Integer,
+          ?tls_verify_peer: bool,
           ?tls_ca_cert_path: String?,
           ?tls_client_cert_path: String?,
           ?tls_client_key_path: String?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: docker-engine-ruby
 version: !ruby/object:Gem::Version
-  version: 0.7.2
+  version: 0.7.3
 platform: ruby
 authors:
 - Docker
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-02-20 00:00:00.000000000 Z
+date: 2026-02-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cgi