forked from toolshed/abra
sixsmith
eaec0cc733
- formatter.RemoveSha - make pindigests TRUE by default - more strict matching of digests - unit and integration tests
63 lines
2.0 KiB
Go
63 lines
2.0 KiB
Go
package client
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
|
|
"coopcloud.tech/abra/pkg/i18n"
|
|
"github.com/containers/image/docker"
|
|
"github.com/containers/image/types"
|
|
"github.com/distribution/reference"
|
|
"github.com/regclient/regclient"
|
|
"github.com/regclient/regclient/types/ref"
|
|
)
|
|
|
|
// GetRegistryTags retrieves all tags of an image from a container registry.
|
|
func GetRegistryTags(img reference.Named) ([]string, error) {
|
|
var tags []string
|
|
|
|
ref, err := docker.ParseReference(fmt.Sprintf("//%s", img))
|
|
if err != nil {
|
|
return tags, errors.New(i18n.G("failed to parse image %s, saw: %s", img, err.Error()))
|
|
}
|
|
|
|
ctx := context.Background()
|
|
tags, err = docker.GetRepositoryTags(ctx, &types.SystemContext{}, ref)
|
|
if err != nil {
|
|
return tags, err
|
|
}
|
|
|
|
return tags, nil
|
|
}
|
|
|
|
// GetImageDigest resolves the content digest (sha256:...) for a specific
|
|
// image:tag reference by querying the registry manifest. This gives us a
|
|
// digest to pin to while keeping support for multi-arch deployments
|
|
// See: https://docs.docker.com/build/building/multi-platform/#why-multi-platform-builds
|
|
// and: https://docs.docker.com/dhi/explore/security-concepts/digests/#multi-platform-images-and-manifests
|
|
func GetImageMultiplatformDigest(img reference.Named, tag string) (string, error) {
|
|
tagged, err := reference.WithTag(reference.TrimNamed(img), tag)
|
|
if err != nil {
|
|
return "", errors.New(i18n.G("failed to parse image %s:%s, saw: %s", img.Name(), tag, err.Error()))
|
|
}
|
|
r, err := ref.New(tagged.String())
|
|
if err != nil {
|
|
return "", errors.New(i18n.G("failed to parse image %s:%s, saw: %s", img.Name(), tag, err.Error()))
|
|
}
|
|
|
|
rc := regclient.New(regclient.WithDockerCreds())
|
|
|
|
m, err := rc.ManifestHead(context.Background(), r)
|
|
if err != nil {
|
|
return "", errors.New(i18n.G("failed to fetch manifest for %s:%s, saw: %s", img.Name(), tag, err.Error()))
|
|
}
|
|
|
|
digest := m.GetDescriptor().Digest.String()
|
|
if digest == "" {
|
|
return "", errors.New(i18n.G("registry did not return a digest for %s:%s", img.Name(), tag))
|
|
}
|
|
|
|
return digest, nil
|
|
}
|