package docker import ( "context" "encoding/json" "errors" "github.com/docker/docker/api/types" "github.com/docker/docker/api/types/container" "github.com/docker/docker/api/types/filters" "github.com/docker/docker/api/types/image" "github.com/docker/docker/api/types/network" "github.com/docker/docker/client" ocispec "github.com/opencontainers/image-spec/specs-go/v1" "google.golang.org/grpc" "google.golang.org/grpc/codes" "google.golang.org/grpc/status" "google.golang.org/protobuf/types/known/emptypb" "io" "github.com/psviderski/uncloud/internal/machine/api/pb" ) // Server implements the gRPC Docker service that proxies requests to the Docker daemon. type Server struct { pb.UnimplementedDockerServer client *client.Client } // NewServer creates a new Docker gRPC server with the provided Docker client. func NewServer(cli *client.Client) *Server { return &Server{client: cli} } // CreateContainer creates a new container based on the given configuration. func (s *Server) CreateContainer(ctx context.Context, req *pb.CreateContainerRequest) (*pb.CreateContainerResponse, error) { var config container.Config var hostConfig container.HostConfig var networkConfig network.NetworkingConfig var platform ocispec.Platform // Unmarshal configurations from the request. if err := json.Unmarshal(req.Config, &config); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal container config: %v", err) } if err := json.Unmarshal(req.HostConfig, &hostConfig); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal host config: %v", err) } if err := json.Unmarshal(req.NetworkConfig, &networkConfig); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal network config: %v", err) } if err := json.Unmarshal(req.Platform, &platform); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal platform: %v", err) } resp, err := s.client.ContainerCreate(ctx, &config, &hostConfig, &networkConfig, &platform, req.Name) if err != nil { if client.IsErrNotFound(err) { return nil, status.Errorf(codes.NotFound, err.Error()) } return nil, status.Errorf(codes.Internal, err.Error()) } respBytes, err := json.Marshal(resp) if err != nil { return nil, status.Errorf(codes.Internal, "marshal response: %v", err) } return &pb.CreateContainerResponse{Response: respBytes}, nil } // InspectContainer returns the container information for the given container ID. func (s *Server) InspectContainer(ctx context.Context, req *pb.InspectContainerRequest) (*pb.InspectContainerResponse, error) { resp, err := s.client.ContainerInspect(ctx, req.Id) if err != nil { if client.IsErrNotFound(err) { return nil, status.Errorf(codes.NotFound, err.Error()) } return nil, status.Errorf(codes.Internal, err.Error()) } respBytes, err := json.Marshal(resp) if err != nil { return nil, status.Errorf(codes.Internal, "marshal response: %v", err) } return &pb.InspectContainerResponse{Response: respBytes}, nil } // StartContainer starts a container with the given ID and options. func (s *Server) StartContainer(ctx context.Context, req *pb.StartContainerRequest) (*emptypb.Empty, error) { var opts container.StartOptions if len(req.Options) > 0 { if err := json.Unmarshal(req.Options, &opts); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal options: %v", err) } } if err := s.client.ContainerStart(ctx, req.Id, opts); err != nil { if client.IsErrNotFound(err) { return nil, status.Errorf(codes.NotFound, err.Error()) } return nil, status.Errorf(codes.Internal, err.Error()) } return &emptypb.Empty{}, nil } // StopContainer stops a container with the given ID and options. func (s *Server) StopContainer(ctx context.Context, req *pb.StopContainerRequest) (*emptypb.Empty, error) { var opts container.StopOptions if len(req.Options) > 0 { if err := json.Unmarshal(req.Options, &opts); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal options: %v", err) } } if err := s.client.ContainerStop(ctx, req.Id, opts); err != nil { if client.IsErrNotFound(err) { return nil, status.Errorf(codes.NotFound, err.Error()) } return nil, status.Errorf(codes.Internal, err.Error()) } return &emptypb.Empty{}, nil } func (s *Server) ListContainers(ctx context.Context, req *pb.ListContainersRequest) (*pb.ListContainersResponse, error) { var opts container.ListOptions if len(req.Options) > 0 { if err := json.Unmarshal(req.Options, &opts); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal options: %v", err) } // Handle filters separately because they implement custom JSON unmarshalling. var raw map[string]json.RawMessage if err := json.Unmarshal(req.Options, &raw); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal options to raw map: %v", err) } if filtersBytes, ok := raw["Filters"]; ok { args, err := filters.FromJSON(string(filtersBytes)) if err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal filters: %v", err) } opts.Filters = args } } containerSummaries, err := s.client.ContainerList(ctx, opts) if err != nil { return nil, status.Errorf(codes.Internal, err.Error()) } containers := make([]types.ContainerJSON, 0, len(containerSummaries)) for _, cs := range containerSummaries { c, err := s.client.ContainerInspect(ctx, cs.ID) if err != nil { if client.IsErrNotFound(err) { // The listed container may have been removed while we were inspecting other containers. continue } return nil, status.Errorf(codes.Internal, "inspect container %s: %v", cs.ID, err) } containers = append(containers, c) } containersBytes, err := json.Marshal(containers) if err != nil { return nil, status.Errorf(codes.Internal, "marshal containers: %v", err) } return &pb.ListContainersResponse{ Messages: []*pb.MachineContainers{ { Containers: containersBytes, }, }, }, nil } // RemoveContainer stops (kills after grace period) and removes a container with the given ID. func (s *Server) RemoveContainer(ctx context.Context, req *pb.RemoveContainerRequest) (*emptypb.Empty, error) { var opts container.RemoveOptions if len(req.Options) > 0 { if err := json.Unmarshal(req.Options, &opts); err != nil { return nil, status.Errorf(codes.InvalidArgument, "unmarshal options: %v", err) } } if err := s.client.ContainerRemove(ctx, req.Id, opts); err != nil { if client.IsErrNotFound(err) { return nil, status.Errorf(codes.NotFound, err.Error()) } return nil, status.Errorf(codes.Internal, err.Error()) } return &emptypb.Empty{}, nil } func (s *Server) PullImage(req *pb.PullImageRequest, stream grpc.ServerStreamingServer[pb.JSONMessage]) error { ctx := stream.Context() // TODO: replace with another JSON serializable type (PullOptions.PrivilegeFunc is not serializable). var opts image.PullOptions if len(req.Options) > 0 { if err := json.Unmarshal(req.Options, &opts); err != nil { return status.Errorf(codes.InvalidArgument, "unmarshal options: %v", err) } } respBody, err := s.client.ImagePull(ctx, req.Image, opts) if err != nil { return status.Errorf(codes.Internal, err.Error()) } defer respBody.Close() decoder := json.NewDecoder(respBody) errCh := make(chan error, 1) go func() { var raw json.RawMessage for { if err = decoder.Decode(&raw); err != nil { if errors.Is(err, io.EOF) { errCh <- nil return } errCh <- status.Errorf(codes.Internal, "decode image pull message: %v", err) return } if err = stream.Send(&pb.JSONMessage{Message: raw}); err != nil { errCh <- status.Errorf(codes.Internal, "send image pull message to stream: %v", err) return } } }() for { select { case err = <-errCh: return err case <-ctx.Done(): return status.Errorf(codes.Canceled, ctx.Err().Error()) } } } // InspectImage returns the image information for the given image ID. func (s *Server) InspectImage(ctx context.Context, req *pb.InspectImageRequest) (*pb.InspectImageResponse, error) { resp, _, err := s.client.ImageInspectWithRaw(ctx, req.Id) if err != nil { if client.IsErrNotFound(err) { return nil, status.Errorf(codes.NotFound, err.Error()) } return nil, status.Errorf(codes.Internal, err.Error()) } respBytes, err := json.Marshal(resp) if err != nil { return nil, status.Errorf(codes.Internal, "marshal response: %v", err) } return &pb.InspectImageResponse{ Messages: []*pb.Image{ { Image: respBytes, }, }, }, nil }