/* Copyright 2018 Google LLC Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ package commands import ( "fmt" "os" "os/exec" "os/user" "strings" "syscall" "github.com/GoogleContainerTools/kaniko/pkg/constants" "github.com/GoogleContainerTools/kaniko/pkg/dockerfile" "github.com/GoogleContainerTools/kaniko/pkg/util" v1 "github.com/google/go-containerregistry/pkg/v1" "github.com/moby/buildkit/frontend/dockerfile/instructions" "github.com/pkg/errors" "github.com/sirupsen/logrus" ) type RunCommand struct { BaseCommand cmd *instructions.RunCommand } // for testing var ( userLookup = user.Lookup ) func (r *RunCommand) ExecuteCommand(config *v1.Config, buildArgs *dockerfile.BuildArgs) error { var newCommand []string if r.cmd.PrependShell { // This is the default shell on Linux var shell []string if len(config.Shell) > 0 { shell = config.Shell } else { shell = append(shell, "/bin/sh", "-c") } newCommand = append(shell, strings.Join(r.cmd.CmdLine, " ")) } else { newCommand = r.cmd.CmdLine } logrus.Infof("cmd: %s", newCommand[0]) logrus.Infof("args: %s", newCommand[1:]) cmd := exec.Command(newCommand[0], newCommand[1:]...) cmd.Dir = config.WorkingDir cmd.Stdout = os.Stdout cmd.Stderr = os.Stderr replacementEnvs := buildArgs.ReplacementEnvs(config.Env) cmd.SysProcAttr = &syscall.SysProcAttr{Setpgid: true} var userStr string // If specified, run the command as a specific user if config.User != "" { uid, gid, err := util.GetUIDAndGIDFromString(config.User, false) if err != nil { return err } cmd.SysProcAttr.Credential = &syscall.Credential{Uid: uid, Gid: gid} } cmd.Env = addDefaultHOME(userStr, replacementEnvs) if err := cmd.Start(); err != nil { return errors.Wrap(err, "starting command") } pgid, err := syscall.Getpgid(cmd.Process.Pid) if err != nil { return errors.Wrap(err, "getting group id for process") } if err := cmd.Wait(); err != nil { return errors.Wrap(err, "waiting for process to exit") } //it's not an error if there are no grandchildren if err := syscall.Kill(-pgid, syscall.SIGKILL); err != nil && err.Error() != "no such process" { return err } return nil } // addDefaultHOME adds the default value for HOME if it isn't already set func addDefaultHOME(u string, envs []string) []string { for _, env := range envs { split := strings.SplitN(env, "=", 2) if split[0] == constants.HOME { return envs } } // If user isn't set, set default value of HOME if u == "" || u == constants.RootUser { return append(envs, fmt.Sprintf("%s=%s", constants.HOME, constants.DefaultHOMEValue)) } // If user is set to username, set value of HOME to /home/${user} // Otherwise the user is set to uid and HOME is / home := "/" userObj, err := userLookup(u) if err == nil { if userObj.HomeDir != "" { home = userObj.HomeDir } else { home = fmt.Sprintf("/home/%s", userObj.Username) } } return append(envs, fmt.Sprintf("%s=%s", constants.HOME, home)) } // String returns some information about the command for the image config func (r *RunCommand) String() string { return r.cmd.String() } func (r *RunCommand) FilesToSnapshot() []string { return nil } // CacheCommand returns true since this command should be cached func (r *RunCommand) CacheCommand(img v1.Image) DockerCommand { return &CachingRunCommand{ img: img, cmd: r.cmd, extractFn: util.ExtractFile, } } func (r *RunCommand) MetadataOnly() bool { return false } func (r *RunCommand) RequiresUnpackedFS() bool { return true } func (r *RunCommand) ShouldCacheOutput() bool { return true } type CachingRunCommand struct { BaseCommand caching img v1.Image extractedFiles []string cmd *instructions.RunCommand extractFn util.ExtractFunction } func (cr *CachingRunCommand) ExecuteCommand(config *v1.Config, buildArgs *dockerfile.BuildArgs) error { logrus.Infof("Found cached layer, extracting to filesystem") var err error if cr.img == nil { return errors.New(fmt.Sprintf("command image is nil %v", cr.String())) } layers, err := cr.img.Layers() if err != nil { return errors.Wrap(err, "retrieving image layers") } if len(layers) != 1 { return errors.New(fmt.Sprintf("expected %d layers but got %d", 1, len(layers))) } cr.layer = layers[0] cr.readSuccess = true cr.extractedFiles, err = util.GetFSFromLayers( constants.RootDir, layers, util.ExtractFunc(cr.extractFn), util.IncludeWhiteout(), ) if err != nil { return errors.Wrap(err, "extracting fs from image") } return nil } func (cr *CachingRunCommand) FilesToSnapshot() []string { f := cr.extractedFiles logrus.Debugf("files extracted from caching run command %s", f) return f } func (cr *CachingRunCommand) String() string { if cr.cmd == nil { return "nil command" } return cr.cmd.String() }