mirror of
https://github.com/apple/container.git
synced 2026-07-13 04:57:08 +00:00
Aditya Ramani
0846bb6640
Its a bit weird to have to pass `--http` when pulling / pushing images if we are trying to do so from a local registry This PR adds a `RequestScheme` enum type which tries to detect if the connection to the registry should be over http or https. This auto detection is the default behavior and can be overridden by passing the `--scheme http/https` flag to the `run` ,`pull`, `push` `login` and `registry default` command The auto detection works by looking at the hostname / IP. HTTP is used in the following cases - If the hostname starts with `localhost` or is `127.x.x.x` - if the host looks like an IP from the private address space - If the host ends with the current default dns domain name Also in this PR: - Removing some used CLI flag groups and TODOs - Better error messages when registry credentials are not found for a host Signed-off-by: Aditya Ramani <a_ramani@apple.com>
74 lines
2.7 KiB
Swift
74 lines
2.7 KiB
Swift
//===----------------------------------------------------------------------===//
|
|
// Copyright © 2025 Apple Inc. and the container project authors. All rights reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
import ContainerizationError
|
|
|
|
/// The URL scheme to be used for a HTTP request.
|
|
public enum RequestScheme: String, Sendable {
|
|
case http = "http"
|
|
case https = "https"
|
|
|
|
case auto = "auto"
|
|
|
|
public init(_ rawValue: String) throws {
|
|
switch rawValue {
|
|
case RequestScheme.http.rawValue:
|
|
self = .http
|
|
case RequestScheme.https.rawValue:
|
|
self = .https
|
|
case RequestScheme.auto.rawValue:
|
|
self = .auto
|
|
default:
|
|
throw ContainerizationError(.invalidArgument, message: "Unsupported scheme \(rawValue)")
|
|
}
|
|
}
|
|
|
|
/// Returns the prescribed protocol to use while making a HTTP request to a webserver
|
|
/// - Parameter host: The domain or IP address of the webserver
|
|
/// - Returns: RequestScheme
|
|
package func schemeFor(host: String) throws -> Self {
|
|
guard host.count > 0 else {
|
|
throw ContainerizationError(.invalidArgument, message: "Host cannot be empty")
|
|
}
|
|
switch self {
|
|
case .http, .https:
|
|
return self
|
|
case .auto:
|
|
return Self.isInternalHost(host: host) ? .http : .https
|
|
}
|
|
}
|
|
|
|
/// Checks if the given `host` string is a private IP address
|
|
/// or a domain typically reachable only on the local system.
|
|
private static func isInternalHost(host: String) -> Bool {
|
|
if host.hasPrefix("localhost") || host.hasPrefix("127.") {
|
|
return true
|
|
}
|
|
if host.hasPrefix("192.168.") || host.hasPrefix("10.") {
|
|
return true
|
|
}
|
|
let regex = "(^172\\.1[6-9]\\.)|(^172\\.2[0-9]\\.)|(^172\\.3[0-1]\\.)"
|
|
if host.range(of: regex, options: .regularExpression) != nil {
|
|
return true
|
|
}
|
|
let dnsDomain = ClientDefaults.get(key: .defaultDNSDomain)
|
|
if host.hasSuffix(".\(dnsDomain)") {
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
}
|