devchain-cli 0.23.4 → 0.24.0

package/dist/server/modules/core/controllers/docker-engine.client.js

@@ -0,0 +1,306 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerEngineClient = exports.DockerEngineError = void 0;
+exports.isDockerNotFound = isDockerNotFound;
+exports.dockerErrorCode = dockerErrorCode;
+exports.resolveDockerSocket = resolveDockerSocket;
+exports.assertSupportedDocker = assertSupportedDocker;
+exports.resolveDockerImageStore = resolveDockerImageStore;
+exports.negotiateDockerApi = negotiateDockerApi;
+exports.selectDockerApiVersion = selectDockerApiVersion;
+exports.optionalDockerJson = optionalDockerJson;
+exports.changeDockerContainerState = changeDockerContainerState;
+const node_child_process_1 = require("node:child_process");
+const promises_1 = require("node:fs/promises");
+const node_http_1 = require("node:http");
+const node_https_1 = require("node:https");
+const node_stream_1 = require("node:stream");
+const promises_2 = require("node:stream/promises");
+class DockerEngineError extends Error {
+    code;
+    status;
+    constructor(code, message, status) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = 'DockerEngineError';
+    }
+}
+exports.DockerEngineError = DockerEngineError;
+function isDockerNotFound(error) {
+    return error instanceof DockerEngineError && error.code === 'not-found';
+}
+function dockerErrorCode(code) {
+    return `DOCKER_${code.toUpperCase().replace(/-/g, '_')}`;
+}
+function contextHost() {
+    return new Promise((resolve, reject) => {
+        (0, node_child_process_1.execFile)('docker', ['context', 'inspect'], { timeout: 3000, maxBuffer: 1024 * 1024 }, (error, stdout) => {
+            if (error)
+                return resolve(undefined);
+            try {
+                const contexts = JSON.parse(stdout);
+                const host = contexts?.[0]?.Endpoints?.docker?.Host;
+                if (typeof host !== 'string')
+                    throw new Error();
+                resolve(host);
+            }
+            catch {
+                reject(new DockerEngineError('unsupported', 'Invalid Docker context endpoint'));
+            }
+        });
+    });
+}
+let processContextHost;
+function cachedContextHost() {
+    processContextHost ??= contextHost().then((host) => {
+        if (host === undefined)
+            processContextHost = undefined;
+        return host;
+    }, (error) => {
+        processContextHost = undefined;
+        throw error;
+    });
+    return processContextHost;
+}
+async function resolveDockerSocket(options = {}) {
+    const inspectContext = options.inspectContext ?? cachedContextHost;
+    const host = (options.env ?? process.env).DOCKER_HOST || (await inspectContext());
+    if (!host)
+        return '/var/run/docker.sock';
+    if (host.startsWith('tcp://') || host.startsWith('ssh://')) {
+        throw new DockerEngineError('unsupported', 'Docker tcp:// and ssh:// hosts are unsupported; use a local Unix socket');
+    }
+    if (!host.startsWith('unix:///') ||
+        host.includes('\0') ||
+        host.includes('?') ||
+        host.includes('#')) {
+        throw new DockerEngineError('unsupported', 'Docker requires an absolute unix:// socket endpoint');
+    }
+    return host.slice('unix://'.length);
+}
+function assertSupportedDocker(info) {
+    if (info.SecurityOptions?.some((option) => /(?:^|[=,])rootless(?:$|,)/i.test(option))) {
+        throw new DockerEngineError('unsupported', 'Rootless Docker engines are unsupported');
+    }
+    if (info.OperatingSystem?.includes('Docker Desktop')) {
+        throw new DockerEngineError('unsupported', 'Docker Desktop engines are unsupported');
+    }
+}
+async function resolveDockerImageStore(info, readConfig = () => (0, promises_1.readFile)('/etc/containerd/config.toml', 'utf8')) {
+    if (info.DriverStatus?.some(([key, value]) => key === 'driver-type' && value === 'io.containerd.snapshotter.v1')) {
+        let config;
+        try {
+            config = await readConfig();
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return '/var/lib/containerd';
+            throw new DockerEngineError('unavailable', 'Cannot read containerd image-store configuration');
+        }
+        const topLevel = config.split(/^\s*\[/m)[0];
+        const rootLine = topLevel.match(/^\s*root\s*=\s*(.*)$/m)?.[1];
+        if (!rootLine)
+            return '/var/lib/containerd';
+        const root = rootLine.match(/^(?:"([^"\\]*)"|'([^']*)')\s*(?:#.*)?$/);
+        const path = root?.[1] ?? root?.[2];
+        if (!path?.startsWith('/'))
+            throw new DockerEngineError('unsupported', 'Unsupported containerd root configuration');
+        return path;
+    }
+    if (info.Driver === 'overlay2' && info.DockerRootDir?.startsWith('/'))
+        return info.DockerRootDir;
+    throw new DockerEngineError('unsupported', 'Unsupported Docker image store');
+}
+function versionTuple(version) {
+    if (!/^\d+\.\d+$/.test(version))
+        throw new DockerEngineError('invalid-response', 'Invalid Docker API version');
+    return version.split('.').map(Number);
+}
+function compareVersions(a, b) {
+    const [am, an] = versionTuple(a);
+    const [bm, bn] = versionTuple(b);
+    return am - bm || an - bn;
+}
+async function negotiateDockerApi(a, b, signal) {
+    const [av, bv] = await Promise.all([a.version(signal), b.version(signal)]);
+    const max = selectDockerApiVersion(av, bv);
+    a.apiVersion = b.apiVersion = max;
+    return max;
+}
+function selectDockerApiVersion(av, bv) {
+    const max = compareVersions(av.ApiVersion, bv.ApiVersion) <= 0 ? av.ApiVersion : bv.ApiVersion;
+    if (compareVersions(max, av.MinAPIVersion) < 0 || compareVersions(max, bv.MinAPIVersion) < 0) {
+        throw new DockerEngineError('incompatible-api', 'Docker engines have no compatible API version');
+    }
+    return max;
+}
+function transportError(signal) {
+    return signal?.aborted
+        ? new DockerEngineError('cancelled', 'Docker request cancelled')
+        : new DockerEngineError('unavailable', 'Docker engine connection failed');
+}
+class DockerEngineClient {
+    socketPath;
+    baseUrl;
+    defaultHeaders;
+    tls;
+    apiVersion;
+    connectedInfo;
+    constructor(socketPath, baseUrl, defaultHeaders = {}, tls) {
+        this.socketPath = socketPath;
+        this.baseUrl = baseUrl;
+        this.defaultHeaders = defaultHeaders;
+        this.tls = tls;
+    }
+    static forHttp(baseUrl, tls, headers = {}) {
+        const url = new URL(baseUrl);
+        if (url.protocol !== 'https:')
+            throw new DockerEngineError('unsupported', 'Unsupported Docker transport protocol');
+        return new DockerEngineClient('', baseUrl.replace(/\/+$/, ''), headers, tls);
+    }
+    static async connect(signal) {
+        const client = new DockerEngineClient(await resolveDockerSocket());
+        client.connectedInfo = await client.info(signal);
+        return client;
+    }
+    stream(method, path, options = {}) {
+        return new Promise((resolve, reject) => {
+            let output;
+            let req;
+            let answered = false;
+            const fail = () => {
+                const error = transportError(options.signal);
+                if (output)
+                    output.destroy(error);
+                else
+                    reject(error);
+            };
+            try {
+                const url = this.baseUrl ? new URL(this.baseUrl) : undefined;
+                req = (url ? node_https_1.request : node_http_1.request)({
+                    ...(url
+                        ? {
+                            protocol: url.protocol,
+                            hostname: url.hostname.replace(/^\[(.*)\]$/, '$1'),
+                            port: url.port,
+                            ...this.tls,
+                        }
+                        : { socketPath: this.socketPath }),
+                    method,
+                    path: `${url ? url.pathname.replace(/\/+$/, '') : ''}${!options.unversioned && this.apiVersion ? `/v${this.apiVersion}` : ''}${path}`,
+                    headers: { ...this.defaultHeaders, ...options.headers },
+                    signal: options.signal,
+                    agent: false,
+                    timeout: 0,
+                }, (res) => {
+                    if (!res.statusCode || res.statusCode < 200 || res.statusCode >= 300) {
+                        const status = res.statusCode;
+                        const code = status === 404 ? 'not-found' : status === 409 ? 'conflict' : 'engine-error';
+                        reject(new DockerEngineError(code, `Docker engine request failed (HTTP ${status ?? 0})`, status));
+                        res.destroy();
+                        if (options.body instanceof node_stream_1.Readable)
+                            options.body.destroy();
+                        return;
+                    }
+                    answered = true;
+                    output = new node_stream_1.PassThrough();
+                    res.on('error', fail);
+                    if (options.onTrailers)
+                        res.on('end', () => options.onTrailers(res.trailers));
+                    output.on('close', () => {
+                        if (!res.complete)
+                            req?.destroy();
+                    });
+                    res.pipe(output);
+                    resolve(output);
+                });
+                req.on('error', fail);
+                if (options.body instanceof node_stream_1.Readable) {
+                    void (0, promises_2.pipeline)(options.body, req).catch(() => {
+                        if (!answered)
+                            fail();
+                    });
+                }
+                else
+                    req.end(options.body);
+            }
+            catch {
+                req?.destroy();
+                if (options.body instanceof node_stream_1.Readable)
+                    options.body.destroy();
+                fail();
+            }
+        });
+    }
+    async json(method, path, body, options = {}) {
+        const stream = await this.stream(method, path, {
+            ...options,
+            headers: {
+                ...(body === undefined ? {} : { 'Content-Type': 'application/json' }),
+                ...options.headers,
+            },
+            body: body === undefined ? undefined : JSON.stringify(body),
+        });
+        const chunks = [];
+        let bytes = 0;
+        for await (const chunk of stream) {
+            bytes += chunk.length;
+            if (bytes > 32 * 1024 * 1024) {
+                stream.destroy();
+                throw new DockerEngineError('invalid-response', 'Docker JSON response exceeds limit');
+            }
+            chunks.push(Buffer.from(chunk));
+        }
+        if (!bytes)
+            return undefined;
+        try {
+            return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        }
+        catch {
+            throw new DockerEngineError('invalid-response', 'Invalid Docker JSON response');
+        }
+    }
+    async version(signal) {
+        const value = await this.json('GET', '/version', undefined, {
+            signal,
+            unversioned: true,
+        });
+        if (!value || typeof value.ApiVersion !== 'string' || typeof value.MinAPIVersion !== 'string')
+            throw new DockerEngineError('invalid-response', 'Invalid Docker API version');
+        versionTuple(value.ApiVersion);
+        versionTuple(value.MinAPIVersion);
+        return { ApiVersion: value.ApiVersion, MinAPIVersion: value.MinAPIVersion };
+    }
+    async info(signal) {
+        const info = await this.json('GET', '/info', undefined, { signal });
+        assertSupportedDocker(info);
+        return info;
+    }
+    diskUsage(signal) {
+        return this.json('GET', '/system/df', undefined, { signal });
+    }
+}
+exports.DockerEngineClient = DockerEngineClient;
+async function optionalDockerJson(client, path, signal) {
+    try {
+        return await client.json('GET', path, undefined, { signal });
+    }
+    catch (error) {
+        if (isDockerNotFound(error))
+            return undefined;
+        throw error;
+    }
+}
+async function changeDockerContainerState(client, id, action, signal) {
+    try {
+        await client.json('POST', `/containers/${encodeURIComponent(id)}/${action}`, undefined, {
+            signal,
+        });
+    }
+    catch (error) {
+        if (!isDockerNotFound(error) && !(error instanceof DockerEngineError && error.status === 304))
+            throw error;
+    }
+}
+//# sourceMappingURL=docker-engine.client.js.map

package/dist/server/modules/core/controllers/docker-engine.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-engine.client.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/docker-engine.client.ts"],"names":[],"mappings":";;;AA6BA,4CAEC;AAED,0CAEC;AA+DD,kDA2BC;AAED,sDAOC;AAED,0DA+BC;AAaD,gDASC;AAED,wDASC;AA+KD,gDAWC;AAGD,gEAcC;AAnZD,2DAA8C;AAC9C,+CAA4C;AAC5C,yCAAwD;AACxD,2CAAqD;AAErD,6CAAoD;AACpD,mDAAgD;AAahD,MAAa,iBAAkB,SAAQ,KAAK;IAE/B;IAEA;IAHX,YACW,IAAqB,EAC9B,OAAe,EACN,MAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAiB;QAErB,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AATD,8CASC;AACD,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;AAC1E,CAAC;AAED,SAAgB,eAAe,CAAC,IAAqB;IACnD,OAAO,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC;AAuBD,SAAS,WAAW;IAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAA,6BAAQ,EACN,QAAQ,EACR,CAAC,SAAS,EAAE,SAAS,CAAC,EACtB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,EACzC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAChB,IAAI,KAAK;gBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;gBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,iBAAiB,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAKD,IAAI,kBAA2D,CAAC;AAEhE,SAAS,iBAAiB;IACxB,kBAAkB,KAAK,WAAW,EAAE,CAAC,IAAI,CACvC,CAAC,IAAI,EAAE,EAAE;QACP,IAAI,IAAI,KAAK,SAAS;YAAE,kBAAkB,GAAG,SAAS,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,kBAAkB,GAAG,SAAS,CAAC;QAC/B,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,UAGI,EAAE;IAEN,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,iBAAiB,CAAC;IACnE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,IAAI;QAAE,OAAO,sBAAsB,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CACzB,aAAa,EACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAClB,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,aAAa,EACb,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,qBAAqB,CAAC,IAAgB;IACpD,IAAI,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,IAAgB,EAChB,aAAoC,GAAG,EAAE,CAAC,IAAA,mBAAQ,EAAC,6BAA6B,EAAE,MAAM,CAAC;IAEzF,IACE,IAAI,CAAC,YAAY,EAAE,IAAI,CACrB,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,KAAK,KAAK,8BAA8B,CACpF,EACD,CAAC;QACD,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,qBAAqB,CAAC;YACrF,MAAM,IAAI,iBAAiB,CACzB,aAAa,EACb,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ;YAAE,OAAO,qBAAqB,CAAC;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC;IACjG,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,gCAAgC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7B,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;IAChF,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AACD,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,CAAqB,EACrB,CAAqB,EACrB,MAAoB;IAEpB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,sBAAsB,CAAC,EAAiB,EAAE,EAAiB;IACzE,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC;IAC/F,IAAI,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,iBAAiB,CACzB,kBAAkB,EAClB,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB;IAC1C,OAAO,MAAM,EAAE,OAAO;QACpB,CAAC,CAAC,IAAI,iBAAiB,CAAC,WAAW,EAAE,0BAA0B,CAAC;QAChE,CAAC,CAAC,IAAI,iBAAiB,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;AAC9E,CAAC;AAYD,MAAa,kBAAkB;IAKlB;IACQ;IACA;IACA;IAPnB,UAAU,CAAU;IAEpB,aAAa,CAAc;IAC3B,YACW,UAAkB,EACV,OAAgB,EAChB,iBAAyC,EAAE,EAC3C,GAAsB;QAH9B,eAAU,GAAV,UAAU,CAAQ;QACV,YAAO,GAAP,OAAO,CAAS;QAChB,mBAAc,GAAd,cAAc,CAA6B;QAC3C,QAAG,GAAH,GAAG,CAAmB;IACtC,CAAC;IAGJ,MAAM,CAAC,OAAO,CACZ,OAAe,EACf,GAAqB,EACrB,UAAkC,EAAE;QAEpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAC3B,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;QACtF,OAAO,IAAI,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAoB;QACvC,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,aAAa,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,UAAgC,EAAE;QACrE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,MAA+B,CAAC;YACpC,IAAI,GAA8B,CAAC;YACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,IAAI,GAAG,GAAG,EAAE;gBAChB,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,MAAM;oBAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;oBAC7B,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC7D,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAY,CAAC,CAAC,CAAC,mBAAO,CAAC,CAClC;oBACE,GAAG,CAAC,GAAG;wBACL,CAAC,CAAC;4BACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;4BACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC;4BAClD,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,GAAG,IAAI,CAAC,GAAG;yBACZ;wBACH,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpC,MAAM;oBACN,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE;oBACrI,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;oBACvD,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE,CAAC;iBACX,EACD,CAAC,GAAG,EAAE,EAAE;oBACN,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;wBAErE,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;wBAC9B,MAAM,IAAI,GACR,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;wBAC9E,MAAM,CACJ,IAAI,iBAAiB,CACnB,IAAI,EACJ,sCAAsC,MAAM,IAAI,CAAC,GAAG,EACpD,MAAM,CACP,CACF,CAAC;wBACF,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,IAAI,OAAO,CAAC,IAAI,YAAY,sBAAQ;4BAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;wBAC7D,OAAO;oBACT,CAAC;oBACD,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,GAAG,IAAI,yBAAW,EAAE,CAAC;oBAC3B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAEtB,IAAI,OAAO,CAAC,UAAU;wBAAE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC/E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;wBACtB,IAAI,CAAC,GAAG,CAAC,QAAQ;4BAAE,GAAG,EAAE,OAAO,EAAE,CAAC;oBACpC,CAAC,CAAC,CAAC;oBACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACjB,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC,CACF,CAAC;gBACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACtB,IAAI,OAAO,CAAC,IAAI,YAAY,sBAAQ,EAAE,CAAC;oBAGrC,KAAK,IAAA,mBAAQ,EAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBAC1C,IAAI,CAAC,QAAQ;4BAAE,IAAI,EAAE,CAAC;oBACxB,CAAC,CAAC,CAAC;gBACL,CAAC;;oBAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,EAAE,OAAO,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,IAAI,YAAY,sBAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7D,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAc,EACd,IAAY,EACZ,IAAc,EACd,UAA8C,EAAE;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;YAC7C,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBACrE,GAAG,OAAO,CAAC,OAAO;aACnB;YACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBAC7B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,SAAc,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgB,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE;YACzE,MAAM;YACN,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YAC3F,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;QAChF,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;IAC9E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAoB;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAa,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,SAAS,CAAC,MAAoB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;CACF;AA1JD,gDA0JC;AAGM,KAAK,UAAU,kBAAkB,CACtC,MAA0B,EAC1B,IAAY,EACZ,MAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,IAAI,CAAI,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,0BAA0B,CAC9C,MAA0B,EAC1B,EAAU,EACV,MAAwB,EACxB,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,EAAE,SAAS,EAAE;YACtF,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;YAC3F,MAAM,KAAK,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/server/modules/core/controllers/docker-runtime.d.ts

@@ -0,0 +1,144 @@
+import { z } from 'zod';
+export declare const DockerFilesystemSchema: z.ZodObject<{
+    path: z.ZodString;
+    filesystemId: z.ZodString;
+    freeBytes: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    filesystemId: string;
+    freeBytes: number;
+}, {
+    path: string;
+    filesystemId: string;
+    freeBytes: number;
+}>;
+export type DockerFilesystem = z.infer<typeof DockerFilesystemSchema>;
+export declare const DockerRuntimeSchema: z.ZodObject<{
+    installed: z.ZodBoolean;
+    engineVersion: z.ZodNullable<z.ZodString>;
+    composeVersion: z.ZodNullable<z.ZodString>;
+    userInGroup: z.ZodBoolean;
+    dataRootFreeBytes: z.ZodNullable<z.ZodNumber>;
+    capacity: z.ZodOptional<z.ZodObject<{
+        dockerRoot: z.ZodNullable<z.ZodObject<{
+            path: z.ZodString;
+            filesystemId: z.ZodString;
+            freeBytes: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        }, {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        }>>;
+        imageStore: z.ZodNullable<z.ZodObject<{
+            path: z.ZodString;
+            filesystemId: z.ZodString;
+            freeBytes: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        }, {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        }>>;
+        home: z.ZodNullable<z.ZodObject<{
+            path: z.ZodString;
+            filesystemId: z.ZodString;
+            freeBytes: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        }, {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        dockerRoot: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        imageStore: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        home: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+    }, {
+        dockerRoot: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        imageStore: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        home: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    installed: boolean;
+    engineVersion: string | null;
+    composeVersion: string | null;
+    userInGroup: boolean;
+    dataRootFreeBytes: number | null;
+    capacity?: {
+        dockerRoot: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        imageStore: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        home: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+    } | undefined;
+}, {
+    installed: boolean;
+    engineVersion: string | null;
+    composeVersion: string | null;
+    userInGroup: boolean;
+    dataRootFreeBytes: number | null;
+    capacity?: {
+        dockerRoot: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        imageStore: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+        home: {
+            path: string;
+            filesystemId: string;
+            freeBytes: number;
+        } | null;
+    } | undefined;
+}>;
+export type DockerRuntime = z.infer<typeof DockerRuntimeSchema>;
+export declare function readDockerRuntime(): Promise<DockerRuntime>;
+export declare function dockerFilesystem(path: string): Promise<DockerFilesystem | null>;

package/dist/server/modules/core/controllers/docker-runtime.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerRuntimeSchema = exports.DockerFilesystemSchema = void 0;
+exports.readDockerRuntime = readDockerRuntime;
+exports.dockerFilesystem = dockerFilesystem;
+const node_child_process_1 = require("node:child_process");
+const promises_1 = require("node:fs/promises");
+const node_http_1 = require("node:http");
+const node_os_1 = require("node:os");
+const zod_1 = require("zod");
+const docker_engine_client_1 = require("./docker-engine.client");
+exports.DockerFilesystemSchema = zod_1.z.object({
+    path: zod_1.z.string(),
+    filesystemId: zod_1.z.string(),
+    freeBytes: zod_1.z.number().nonnegative(),
+});
+exports.DockerRuntimeSchema = zod_1.z.object({
+    installed: zod_1.z.boolean(),
+    engineVersion: zod_1.z.string().nullable(),
+    composeVersion: zod_1.z.string().nullable(),
+    userInGroup: zod_1.z.boolean(),
+    dataRootFreeBytes: zod_1.z.number().nonnegative().nullable(),
+    capacity: zod_1.z
+        .object({
+        dockerRoot: exports.DockerFilesystemSchema.nullable(),
+        imageStore: exports.DockerFilesystemSchema.nullable(),
+        home: exports.DockerFilesystemSchema.nullable(),
+    })
+        .optional(),
+});
+const unavailable = {
+    installed: false,
+    engineVersion: null,
+    composeVersion: null,
+    userInGroup: false,
+    dataRootFreeBytes: null,
+};
+let versions;
+function version(command, args) {
+    return new Promise((resolve) => {
+        (0, node_child_process_1.execFile)(command, args, { timeout: 750, maxBuffer: 64 * 1024 }, (error, stdout) => {
+            resolve(error ? null : stdout.trim() || null);
+        });
+    });
+}
+function dockerGet(socketPath, path) {
+    return new Promise((resolve, reject) => {
+        const req = (0, node_http_1.request)({ socketPath, path, method: 'GET' }, (res) => {
+            let body = '';
+            res.setEncoding('utf8');
+            res.on('data', (chunk) => {
+                body += chunk;
+                if (body.length > 1024 * 1024)
+                    req.destroy(new Error('Docker response too large'));
+            });
+            res.on('error', reject);
+            res.on('end', () => res.statusCode === 200 ? resolve(body) : reject(new Error('Docker unavailable')));
+        });
+        const timeout = setTimeout(() => req.destroy(new Error('Docker timeout')), 750);
+        req.on('close', () => clearTimeout(timeout));
+        req.on('error', reject);
+        req.end();
+    });
+}
+async function readDockerRuntime() {
+    const result = {
+        ...unavailable,
+        capacity: { dockerRoot: null, imageStore: null, home: await dockerFilesystem((0, node_os_1.homedir)()) },
+    };
+    try {
+        versions ??= Promise.all([
+            version('dockerd', ['--version']).then((output) => output?.match(/Docker version ([^,\s]+)/)?.[1] ?? null),
+            version('docker', ['compose', 'version', '--short']),
+        ]).then(([engineVersion, composeVersion]) => ({ engineVersion, composeVersion }));
+        Object.assign(result, await versions);
+        const groups = await (0, promises_1.readFile)('/etc/group', 'utf8');
+        const gid = groups
+            .split('\n')
+            .find((line) => line.startsWith('docker:'))
+            ?.split(':')[2];
+        result.userInGroup = gid !== undefined && Boolean(process.getgroups?.().includes(Number(gid)));
+        const socketPath = await (0, docker_engine_client_1.resolveDockerSocket)();
+        if ((await dockerGet(socketPath, '/_ping')).trim() !== 'OK')
+            return result;
+        const info = JSON.parse(await dockerGet(socketPath, '/info'));
+        (0, docker_engine_client_1.assertSupportedDocker)(info);
+        result.installed = Boolean(result.engineVersion && result.composeVersion);
+        const parsed = zod_1.z.object({ DockerRootDir: zod_1.z.string().startsWith('/') }).safeParse(info);
+        if (parsed.success) {
+            result.capacity.dockerRoot = await dockerFilesystem(parsed.data.DockerRootDir);
+            result.dataRootFreeBytes = result.capacity.dockerRoot?.freeBytes ?? null;
+            try {
+                const imageStore = await (0, docker_engine_client_1.resolveDockerImageStore)(info);
+                result.capacity.imageStore =
+                    imageStore === parsed.data.DockerRootDir
+                        ? result.capacity.dockerRoot
+                        : await dockerFilesystem(imageStore);
+            }
+            catch {
+            }
+        }
+    }
+    catch {
+    }
+    return result;
+}
+async function dockerFilesystem(path) {
+    try {
+        const [space, identity] = await Promise.all([(0, promises_1.statfs)(path), (0, promises_1.stat)(path, { bigint: true })]);
+        return { path, filesystemId: identity.dev.toString(), freeBytes: space.bavail * space.bsize };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=docker-runtime.js.map

package/dist/server/modules/core/controllers/docker-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-runtime.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/docker-runtime.ts"],"names":[],"mappings":";;;AA0EA,8CA2CC;AAED,4CAOC;AA9HD,2DAA8C;AAC9C,+CAA0D;AAC1D,yCAAoC;AACpC,qCAAkC;AAClC,6BAAwB;AACxB,iEAKgC;AAEnB,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CACpC,CAAC,CAAC;AAGU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;IACtB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;IACxB,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACtD,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QACN,UAAU,EAAE,8BAAsB,CAAC,QAAQ,EAAE;QAC7C,UAAU,EAAE,8BAAsB,CAAC,QAAQ,EAAE;QAC7C,IAAI,EAAE,8BAAsB,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,MAAM,WAAW,GAAkB;IACjC,SAAS,EAAE,KAAK;IAChB,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,IAAI;IACpB,WAAW,EAAE,KAAK;IAClB,iBAAiB,EAAE,IAAI;CACxB,CAAC;AACF,IAAI,QAA8F,CAAC;AAEnG,SAAS,OAAO,CAAC,OAAe,EAAE,IAAc;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAA,6BAAQ,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAChF,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,IAAY;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC/D,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,IAAI,IAAI,KAAK,CAAC;gBACd,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;oBAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YACrF,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CACjF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAGM,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAkB;QAC5B,GAAG,WAAW;QACd,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC,IAAA,iBAAO,GAAE,CAAC,EAAE;KAC1F,CAAC;IACF,IAAI,CAAC;QACH,QAAQ,KAAK,OAAO,CAAC,GAAG,CAAC;YACvB,OAAO,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CACpC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CACnE;YACD,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;SACrD,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM;aACf,KAAK,CAAC,IAAI,CAAC;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3C,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,CAAC,WAAW,GAAG,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,UAAU,GAAG,MAAM,IAAA,0CAAmB,GAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAC3E,MAAM,IAAI,GAAe,IAAI,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1E,IAAA,4CAAqB,EAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,QAAS,CAAC,UAAU,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAChF,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,QAAS,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAA,8CAAuB,EAAC,IAAI,CAAC,CAAC;gBAEvD,MAAM,CAAC,QAAS,CAAC,UAAU;oBACzB,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,aAAa;wBACtC,CAAC,CAAC,MAAM,CAAC,QAAS,CAAC,UAAU;wBAC7B,CAAC,CAAC,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAA,iBAAM,EAAC,IAAI,CAAC,EAAE,IAAA,eAAI,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/server/modules/core/controllers/docker-settings.d.ts

@@ -0,0 +1,14 @@
+export type DockerSettings = Record<string, unknown>;
+export interface DockerContainerInspect extends DockerSettings {
+    Config: DockerSettings;
+    HostConfig: DockerSettings;
+    Image: string;
+    NetworkSettings?: {
+        Networks?: Record<string, DockerSettings>;
+    };
+}
+export declare const CONFIG_ALLOWLIST: readonly ["Hostname", "Domainname", "User", "AttachStdin", "AttachStdout", "AttachStderr", "ExposedPorts", "Tty", "OpenStdin", "StdinOnce", "Env", "Cmd", "Healthcheck", "ArgsEscaped", "Image", "Volumes", "WorkingDir", "Entrypoint", "NetworkDisabled", "OnBuild", "Labels", "StopSignal", "StopTimeout", "Shell"];
+export declare const HOST_CONFIG_ALLOWLIST: readonly ["Binds", "Mounts", "PortBindings", "RestartPolicy", "NetworkMode", "LogConfig", "AutoRemove", "VolumeDriver", "VolumesFrom", "ConsoleSize", "CapAdd", "CapDrop", "Dns", "DnsOptions", "DnsSearch", "ExtraHosts", "GroupAdd", "OomScoreAdj", "ReadonlyRootfs", "PublishAllPorts", "ShmSize", "Sysctls", "Tmpfs", "Ulimits", "Init", "Isolation", "MaskedPaths", "ReadonlyPaths", "CgroupnsMode", "CpuShares", "Memory", "NanoCpus", "CpuPeriod", "CpuQuota", "CpuRealtimePeriod", "CpuRealtimeRuntime", "CpusetCpus", "CpusetMems", "MemoryReservation", "MemorySwap", "MemorySwappiness", "OomKillDisable", "PidsLimit", "StorageOpt", "BlkioWeight"];
+export declare const CANNOT_MOVE_FIELDS: readonly ["Devices", "Binds", "Mounts", "NetworkMode", "Privileged", "DeviceRequests", "PidMode", "IpcMode", "UsernsMode", "Runtime", "CgroupParent", "SecurityOpt", "Links"];
+export declare const INSPECT_ONLY_FIELDS: readonly ["Id", "Created", "State", "Path", "Args", "ResolvConfPath", "HostnamePath", "HostsPath", "LogPath", "GraphDriver", "Storage", "Mounts", "NetworkSettings", "Size", "SizeRw", "SizeRootFs", "Name", "RestartCount", "Driver", "Platform", "AppArmorProfile", "ProcessLabel", "MountLabel", "ExecIDs", "ImageManifestDescriptor"];
+export declare function projectDockerCreate(inspect: DockerContainerInspect, socketPath?: string): DockerSettings;