90 lines
2.2 KiB
Go
90 lines
2.2 KiB
Go
// Command dogama-agent runs the restricted same-host Docker agent.
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"log/slog"
|
|
"net/http"
|
|
"os"
|
|
"os/signal"
|
|
"syscall"
|
|
"time"
|
|
|
|
catalogdata "git.zaynet.fr/DoGaMa/DoGaMa-serv/catalog"
|
|
"git.zaynet.fr/DoGaMa/DoGaMa-serv/internal/agent"
|
|
"git.zaynet.fr/DoGaMa/DoGaMa-serv/internal/catalog"
|
|
)
|
|
|
|
var (
|
|
version = "dev"
|
|
commit = "unknown"
|
|
)
|
|
|
|
func main() {
|
|
logger := slog.New(slog.NewJSONHandler(os.Stdout, nil))
|
|
if err := run(logger); err != nil {
|
|
logger.Error("agent stopped", "event", "agent.failed", "error", err)
|
|
os.Exit(1)
|
|
}
|
|
}
|
|
|
|
func run(logger *slog.Logger) error {
|
|
config, err := agent.LoadConfig()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
paths, err := agent.NewPathPolicy(config.AllowedRoots)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
registry, err := agent.OpenRegistry(config.RegistryPath, config.Secret)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
snapshots, err := catalog.LoadFS(catalogdata.Files, ".")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
plans, err := agent.NewPlanPolicy(snapshots, catalogdata.Files)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
authenticator, err := agent.NewAuthenticator(config.Secret)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
docker, err := agent.NewDockerRuntime(config.DockerSocket, config.DockerNetwork)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
handler := agent.NewHandler(authenticator, paths, plans, registry, docker, logger)
|
|
server := &http.Server{
|
|
Addr: config.ListenAddress,
|
|
Handler: handler,
|
|
ReadHeaderTimeout: 3 * time.Second,
|
|
ReadTimeout: 5 * time.Second,
|
|
WriteTimeout: 15 * time.Minute,
|
|
IdleTimeout: 30 * time.Second,
|
|
MaxHeaderBytes: 16 << 10,
|
|
}
|
|
ctx, stop := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGTERM)
|
|
defer stop()
|
|
errCh := make(chan error, 1)
|
|
go func() {
|
|
logger.Info("agent listening", "event", "agent.started", "address", config.ListenAddress, "allowed_root_count", paths.RootCount(), "version", version, "commit", commit)
|
|
errCh <- server.ListenAndServe()
|
|
}()
|
|
select {
|
|
case err := <-errCh:
|
|
if errors.Is(err, http.ErrServerClosed) {
|
|
return nil
|
|
}
|
|
return err
|
|
case <-ctx.Done():
|
|
shutdownCtx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
|
|
defer cancel()
|
|
return server.Shutdown(shutdownCtx)
|
|
}
|
|
}
|