package main import ( "fmt" "os/exec" "regexp" "strings" "github.com/docker/docker/utils" "github.com/go-check/check" ) var ( repoName = fmt.Sprintf("%v/dockercli/busybox-by-dgst", privateRegistryURL) digestRegex = regexp.MustCompile("Digest: ([^\n]+)") ) func setupImage() (string, error) { return setupImageWithTag("latest") } func setupImageWithTag(tag string) (string, error) { containerName := "busyboxbydigest" cmd := exec.Command(dockerBinary, "run", "-d", "-e", "digest=1", "--name", containerName, "busybox") if _, err := runCommand(cmd); err != nil { return "", err } // tag the image to upload it to the private registry repoAndTag := utils.ImageReference(repoName, tag) cmd = exec.Command(dockerBinary, "commit", containerName, repoAndTag) if out, _, err := runCommandWithOutput(cmd); err != nil { return "", fmt.Errorf("image tagging failed: %s, %v", out, err) } // delete the container as we don't need it any more if err := deleteContainer(containerName); err != nil { return "", err } // push the image cmd = exec.Command(dockerBinary, "push", repoAndTag) out, _, err := runCommandWithOutput(cmd) if err != nil { return "", fmt.Errorf("pushing the image to the private registry has failed: %s, %v", out, err) } // delete our local repo that we previously tagged cmd = exec.Command(dockerBinary, "rmi", repoAndTag) if out, _, err := runCommandWithOutput(cmd); err != nil { return "", fmt.Errorf("error deleting images prior to real test: %s, %v", out, err) } // the push output includes "Digest: ", so find that matches := digestRegex.FindStringSubmatch(out) if len(matches) != 2 { return "", fmt.Errorf("unable to parse digest from push output: %s", out) } pushDigest := matches[1] return pushDigest, nil } func (s *DockerRegistrySuite) TestPullByTagDisplaysDigest(c *check.C) { pushDigest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } // pull from the registry using the tag cmd := exec.Command(dockerBinary, "pull", repoName) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by tag: %s, %v", out, err) } // the pull output includes "Digest: ", so find that matches := digestRegex.FindStringSubmatch(out) if len(matches) != 2 { c.Fatalf("unable to parse digest from pull output: %s", out) } pullDigest := matches[1] // make sure the pushed and pull digests match if pushDigest != pullDigest { c.Fatalf("push digest %q didn't match pull digest %q", pushDigest, pullDigest) } } func (s *DockerRegistrySuite) TestPullByDigest(c *check.C) { pushDigest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } // pull from the registry using the @ reference imageReference := fmt.Sprintf("%s@%s", repoName, pushDigest) cmd := exec.Command(dockerBinary, "pull", imageReference) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // the pull output includes "Digest: ", so find that matches := digestRegex.FindStringSubmatch(out) if len(matches) != 2 { c.Fatalf("unable to parse digest from pull output: %s", out) } pullDigest := matches[1] // make sure the pushed and pull digests match if pushDigest != pullDigest { c.Fatalf("push digest %q didn't match pull digest %q", pushDigest, pullDigest) } } func (s *DockerRegistrySuite) TestPullByDigestNoFallback(c *check.C) { // pull from the registry using the @ reference imageReference := fmt.Sprintf("%s@sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", repoName) cmd := exec.Command(dockerBinary, "pull", imageReference) out, _, err := runCommandWithOutput(cmd) if err == nil || !strings.Contains(out, "pulling with digest reference failed from v2 registry") { c.Fatalf("expected non-zero exit status and correct error message when pulling non-existing image: %s", out) } } func (s *DockerRegistrySuite) TestCreateByDigest(c *check.C) { pushDigest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference := fmt.Sprintf("%s@%s", repoName, pushDigest) containerName := "createByDigest" cmd := exec.Command(dockerBinary, "create", "--name", containerName, imageReference) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error creating by digest: %s, %v", out, err) } res, err := inspectField(containerName, "Config.Image") if err != nil { c.Fatalf("failed to get Config.Image: %s, %v", out, err) } if res != imageReference { c.Fatalf("unexpected Config.Image: %s (expected %s)", res, imageReference) } } func (s *DockerRegistrySuite) TestRunByDigest(c *check.C) { pushDigest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference := fmt.Sprintf("%s@%s", repoName, pushDigest) containerName := "runByDigest" cmd := exec.Command(dockerBinary, "run", "--name", containerName, imageReference, "sh", "-c", "echo found=$digest") out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error run by digest: %s, %v", out, err) } foundRegex := regexp.MustCompile("found=([^\n]+)") matches := foundRegex.FindStringSubmatch(out) if len(matches) != 2 { c.Fatalf("error locating expected 'found=1' output: %s", out) } if matches[1] != "1" { c.Fatalf("Expected %q, got %q", "1", matches[1]) } res, err := inspectField(containerName, "Config.Image") if err != nil { c.Fatalf("failed to get Config.Image: %s, %v", out, err) } if res != imageReference { c.Fatalf("unexpected Config.Image: %s (expected %s)", res, imageReference) } } func (s *DockerRegistrySuite) TestRemoveImageByDigest(c *check.C) { digest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference := fmt.Sprintf("%s@%s", repoName, digest) // pull from the registry using the @ reference cmd := exec.Command(dockerBinary, "pull", imageReference) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // make sure inspect runs ok if _, err := inspectField(imageReference, "Id"); err != nil { c.Fatalf("failed to inspect image: %v", err) } // do the delete if err := deleteImages(imageReference); err != nil { c.Fatalf("unexpected error deleting image: %v", err) } // try to inspect again - it should error this time if _, err := inspectField(imageReference, "Id"); err == nil { c.Fatalf("unexpected nil err trying to inspect what should be a non-existent image") } else if !strings.Contains(err.Error(), "No such image") { c.Fatalf("expected 'No such image' output, got %v", err) } } func (s *DockerRegistrySuite) TestBuildByDigest(c *check.C) { digest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference := fmt.Sprintf("%s@%s", repoName, digest) // pull from the registry using the @ reference cmd := exec.Command(dockerBinary, "pull", imageReference) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // get the image id imageID, err := inspectField(imageReference, "Id") if err != nil { c.Fatalf("error getting image id: %v", err) } // do the build name := "buildbydigest" _, err = buildImage(name, fmt.Sprintf( `FROM %s CMD ["/bin/echo", "Hello World"]`, imageReference), true) if err != nil { c.Fatal(err) } // get the build's image id res, err := inspectField(name, "Config.Image") if err != nil { c.Fatal(err) } // make sure they match if res != imageID { c.Fatalf("Image %s, expected %s", res, imageID) } } func (s *DockerRegistrySuite) TestTagByDigest(c *check.C) { digest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference := fmt.Sprintf("%s@%s", repoName, digest) // pull from the registry using the @ reference cmd := exec.Command(dockerBinary, "pull", imageReference) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // tag it tag := "tagbydigest" cmd = exec.Command(dockerBinary, "tag", imageReference, tag) if _, err := runCommand(cmd); err != nil { c.Fatalf("unexpected error tagging: %v", err) } expectedID, err := inspectField(imageReference, "Id") if err != nil { c.Fatalf("error getting original image id: %v", err) } tagID, err := inspectField(tag, "Id") if err != nil { c.Fatalf("error getting tagged image id: %v", err) } if tagID != expectedID { c.Fatalf("expected image id %q, got %q", expectedID, tagID) } } func (s *DockerRegistrySuite) TestListImagesWithoutDigests(c *check.C) { digest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference := fmt.Sprintf("%s@%s", repoName, digest) // pull from the registry using the @ reference cmd := exec.Command(dockerBinary, "pull", imageReference) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } cmd = exec.Command(dockerBinary, "images") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error listing images: %s, %v", out, err) } if strings.Contains(out, "DIGEST") { c.Fatalf("list output should not have contained DIGEST header: %s", out) } } func (s *DockerRegistrySuite) TestListImagesWithDigests(c *check.C) { // setup image1 digest1, err := setupImageWithTag("tag1") if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference1 := fmt.Sprintf("%s@%s", repoName, digest1) c.Logf("imageReference1 = %s", imageReference1) // pull image1 by digest cmd := exec.Command(dockerBinary, "pull", imageReference1) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // list images cmd = exec.Command(dockerBinary, "images", "--digests") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error listing images: %s, %v", out, err) } // make sure repo shown, tag=, digest = $digest1 re1 := regexp.MustCompile(`\s*` + repoName + `\s*\s*` + digest1 + `\s`) if !re1.MatchString(out) { c.Fatalf("expected %q: %s", re1.String(), out) } // setup image2 digest2, err := setupImageWithTag("tag2") if err != nil { c.Fatalf("error setting up image: %v", err) } imageReference2 := fmt.Sprintf("%s@%s", repoName, digest2) c.Logf("imageReference2 = %s", imageReference2) // pull image1 by digest cmd = exec.Command(dockerBinary, "pull", imageReference1) out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // pull image2 by digest cmd = exec.Command(dockerBinary, "pull", imageReference2) out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // list images cmd = exec.Command(dockerBinary, "images", "--digests") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error listing images: %s, %v", out, err) } // make sure repo shown, tag=, digest = $digest1 if !re1.MatchString(out) { c.Fatalf("expected %q: %s", re1.String(), out) } // make sure repo shown, tag=, digest = $digest2 re2 := regexp.MustCompile(`\s*` + repoName + `\s*\s*` + digest2 + `\s`) if !re2.MatchString(out) { c.Fatalf("expected %q: %s", re2.String(), out) } // pull tag1 cmd = exec.Command(dockerBinary, "pull", repoName+":tag1") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling tag1: %s, %v", out, err) } // list images cmd = exec.Command(dockerBinary, "images", "--digests") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error listing images: %s, %v", out, err) } // make sure image 1 has repo, tag, AND repo, , digest reWithTag1 := regexp.MustCompile(`\s*` + repoName + `\s*tag1\s*\s`) reWithDigest1 := regexp.MustCompile(`\s*` + repoName + `\s*\s*` + digest1 + `\s`) if !reWithTag1.MatchString(out) { c.Fatalf("expected %q: %s", reWithTag1.String(), out) } if !reWithDigest1.MatchString(out) { c.Fatalf("expected %q: %s", reWithDigest1.String(), out) } // make sure image 2 has repo, , digest if !re2.MatchString(out) { c.Fatalf("expected %q: %s", re2.String(), out) } // pull tag 2 cmd = exec.Command(dockerBinary, "pull", repoName+":tag2") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling tag2: %s, %v", out, err) } // list images cmd = exec.Command(dockerBinary, "images", "--digests") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error listing images: %s, %v", out, err) } // make sure image 1 has repo, tag, digest if !reWithTag1.MatchString(out) { c.Fatalf("expected %q: %s", re1.String(), out) } // make sure image 2 has repo, tag, digest reWithTag2 := regexp.MustCompile(`\s*` + repoName + `\s*tag2\s*\s`) reWithDigest2 := regexp.MustCompile(`\s*` + repoName + `\s*\s*` + digest2 + `\s`) if !reWithTag2.MatchString(out) { c.Fatalf("expected %q: %s", reWithTag2.String(), out) } if !reWithDigest2.MatchString(out) { c.Fatalf("expected %q: %s", reWithDigest2.String(), out) } // list images cmd = exec.Command(dockerBinary, "images", "--digests") out, _, err = runCommandWithOutput(cmd) if err != nil { c.Fatalf("error listing images: %s, %v", out, err) } // make sure image 1 has repo, tag, digest if !reWithTag1.MatchString(out) { c.Fatalf("expected %q: %s", re1.String(), out) } // make sure image 2 has repo, tag, digest if !reWithTag2.MatchString(out) { c.Fatalf("expected %q: %s", re2.String(), out) } // make sure busybox has tag, but not digest busyboxRe := regexp.MustCompile(`\s*busybox\s*latest\s*\s`) if !busyboxRe.MatchString(out) { c.Fatalf("expected %q: %s", busyboxRe.String(), out) } } func (s *DockerRegistrySuite) TestDeleteImageByIDOnlyPulledByDigest(c *check.C) { pushDigest, err := setupImage() if err != nil { c.Fatalf("error setting up image: %v", err) } // pull from the registry using the @ reference imageReference := fmt.Sprintf("%s@%s", repoName, pushDigest) cmd := exec.Command(dockerBinary, "pull", imageReference) out, _, err := runCommandWithOutput(cmd) if err != nil { c.Fatalf("error pulling by digest: %s, %v", out, err) } // just in case... imageID, err := inspectField(imageReference, ".Id") if err != nil { c.Fatalf("error inspecting image id: %v", err) } cmd = exec.Command(dockerBinary, "rmi", imageID) if _, err := runCommand(cmd); err != nil { c.Fatalf("error deleting image by id: %v", err) } }