This commit is contained in:
parent
68137b31c1
commit
996c79e4b4
@ -28,7 +28,8 @@ steps:
|
|||||||
privileged: true
|
privileged: true
|
||||||
environment:
|
environment:
|
||||||
REGISTRY: code.pztrn.name
|
REGISTRY: code.pztrn.name
|
||||||
REGISTRY_USER: drone
|
REGISTRY_PROJECT: /containers/mirrors
|
||||||
|
REGISTRY_USERNAME: drone
|
||||||
REGISTRY_PASSWORD:
|
REGISTRY_PASSWORD:
|
||||||
from_secret: drone_secret
|
from_secret: drone_secret
|
||||||
commands:
|
commands:
|
||||||
|
203
mirror.sh
203
mirror.sh
@ -1,63 +1,38 @@
|
|||||||
#!/usr/bin/env bash
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
# The Docker Image Mirror script.
|
# The Docker Image Mirror script.
|
||||||
|
# Designed to mirror amd64 and arm64 images somewhere you want.
|
||||||
|
# Required environment variables:
|
||||||
|
#
|
||||||
|
# * REGISTRY: to which registry images should be sent. Should not contain protocols,
|
||||||
|
# should be the very same as you use 'docker login' with.
|
||||||
|
# * REGISTRY_USERNAME: user name to use for destination registry.
|
||||||
|
# * REGISTRY_PASSWORD: password to use for destination registry's user.
|
||||||
|
# * REGISTRY_PROJECT: path within registry (or it's part) where images will be push'd.
|
||||||
|
# Should start with '/'!
|
||||||
|
|
||||||
|
# What images we will mirror. Collected by executing scripts in "images" directory, see
|
||||||
|
# "collect_images" function.
|
||||||
WHAT_TO_MIRROR=()
|
WHAT_TO_MIRROR=()
|
||||||
DESTINATION_REGISTRY=${REGISTRY}
|
|
||||||
DESTINATION_PROJECT=${DESTINATION_REGISTRY}/containers/mirror
|
|
||||||
USER=${REGISTRY_USER}
|
|
||||||
PASSWORD=${REGISTRY_PASSWORD}
|
|
||||||
|
|
||||||
function mirror() {
|
# New tag for currently processing image as it will be used with 'docker push'.
|
||||||
|
# Updates for every image. Contains only path, image name and base tag from source.
|
||||||
|
REMOTE_IMAGE=""
|
||||||
|
|
||||||
|
# Is image multiarch? E.g. is we're successfully fetched not only amd64 image,
|
||||||
|
# but also an arm64? Updates for every image.
|
||||||
|
MULTIARCH=0
|
||||||
|
|
||||||
|
function cleanup() {
|
||||||
local image=$1
|
local image=$1
|
||||||
local os_and_arch=$2
|
|
||||||
image_name=$(echo "${image}" | cut -d":" -f 1)
|
|
||||||
image_version=$(echo "${image}" | cut -d":" -f 2)
|
|
||||||
|
|
||||||
echo -n "Mirroring ${image} for '${os_and_arch}'... "
|
|
||||||
|
|
||||||
|
|
||||||
if ! docker pull --platform="${os_and_arch}" "${image}" &> /dev/null; then
|
|
||||||
echo "PULL FAILED"
|
|
||||||
if [ "${os_and_arch/linux\/amd64//}" != "${os_and_arch}" ] ; then
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
# shellcheck disable=SC1083
|
|
||||||
image_hash=$(docker images -a | grep "^${image_name}" | grep "${image_version}" | awk {' print $3 '})
|
|
||||||
echo -n "${image_hash} for '${os_and_arch}' received, retag as '${DESTINATION_PROJECT}/${image}'... "
|
|
||||||
|
|
||||||
|
|
||||||
if ! docker tag "${image_hash}" "${DESTINATION_PROJECT}/${image}" &> /dev/null; then
|
|
||||||
echo "TAGGING FAILED"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo -n "pushing... "
|
|
||||||
if ! docker push "${DESTINATION_PROJECT}/${image}" &> /dev/null; then
|
|
||||||
echo "FAILED"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "OK"
|
|
||||||
|
|
||||||
docker image rm "${image}" &> /dev/null
|
docker image rm "${image}" &> /dev/null
|
||||||
docker image rm "${DESTINATION_PROJECT}/${image}" &> /dev/null
|
docker image rm "${REMOTE_IMAGE}" &> /dev/null
|
||||||
|
docker image rm "${REMOTE_IMAGE}"-amd64 &> /dev/null
|
||||||
|
docker image rm "${REMOTE_IMAGE}"-arm64 &> /dev/null
|
||||||
}
|
}
|
||||||
|
|
||||||
# Starting Docker daemon.
|
function collect_images() {
|
||||||
/usr/local/bin/dockerd --data-root=/var/lib/docker &
|
|
||||||
|
|
||||||
# Wait for it.
|
|
||||||
echo "Waiting for Docker daemon to start..."
|
|
||||||
while true; do
|
|
||||||
if docker ps &> /dev/null; then
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
# Load shell files and execute them to get list of mirrorred images.
|
# Load shell files and execute them to get list of mirrorred images.
|
||||||
MIRROR_CONFIGS=$(ls ./images/*.sh)
|
MIRROR_CONFIGS=$(ls ./images/*.sh)
|
||||||
# shellcheck disable=SC2068
|
# shellcheck disable=SC2068
|
||||||
@ -68,13 +43,129 @@ for file in ${MIRROR_CONFIGS[@]}; do
|
|||||||
done
|
done
|
||||||
|
|
||||||
echo "Images to mirror: ${WHAT_TO_MIRROR[*]}"
|
echo "Images to mirror: ${WHAT_TO_MIRROR[*]}"
|
||||||
|
}
|
||||||
|
|
||||||
|
function get_amd64_image() {
|
||||||
|
local image=$1
|
||||||
|
|
||||||
|
image_name=$(echo "${image}" | cut -d":" -f 1)
|
||||||
|
image_version=$(echo "${image}" | cut -d":" -f 2)
|
||||||
|
|
||||||
|
echo -ne "\t* Getting amd64 layers... "
|
||||||
|
|
||||||
|
# arm64 layers might be missing. So we just put "FAIL!" here and do nothing else.
|
||||||
|
if ! docker pull --platform=linux/amd64 "${image}" &> /dev/null; then
|
||||||
|
echo "FAIL!"
|
||||||
|
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo -n "Downloaded, "
|
||||||
|
|
||||||
|
image_hash=$(docker images -a | grep "^${image_name}" | grep "${image_version}" | awk {' print $3 '})
|
||||||
|
|
||||||
|
if ! docker tag "${image_hash}" "${REMOTE_IMAGE}-amd64" &> /dev/null; then
|
||||||
|
echo "but tagging failed!"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "tagged."
|
||||||
|
}
|
||||||
|
|
||||||
|
function get_arm64_image() {
|
||||||
|
local image=$1
|
||||||
|
|
||||||
|
image_name=$(echo "${image}" | cut -d":" -f 1)
|
||||||
|
image_version=$(echo "${image}" | cut -d":" -f 2)
|
||||||
|
|
||||||
|
echo -ne "\t* Getting arm64 layers... "
|
||||||
|
|
||||||
|
# arm64 layers might be missing. So we just put "FAIL!" here and do nothing else.
|
||||||
|
if ! docker pull --platform=linux/arm64 "${image}" &> /dev/null; then
|
||||||
|
echo "FAIL!"
|
||||||
|
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo -n "Downloaded, "
|
||||||
|
|
||||||
|
image_hash=$(docker images -a | grep "^${image_name}" | grep "${image_version}" | awk {' print $3 '})
|
||||||
|
|
||||||
|
if ! docker tag "${image_hash}" "${REMOTE_IMAGE}-arm64" &> /dev/null; then
|
||||||
|
echo "but tagging failed!"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "tagged."
|
||||||
|
|
||||||
|
MULTIARCH=1
|
||||||
|
}
|
||||||
|
|
||||||
|
function login_to_registry() {
|
||||||
# Login to registry.
|
# Login to registry.
|
||||||
echo "Logging into '${DESTINATION_REGISTRY}' as '${USER}'..."
|
echo "Logging into '${REGISTRY}' as '${USER}'..."
|
||||||
docker login -u "${USER}" -p "${PASSWORD}" "${DESTINATION_REGISTRY}"
|
docker login -u "${USER}" -p "${PASSWORD}" "${REGISTRY}"
|
||||||
|
}
|
||||||
|
|
||||||
# Mirror images.
|
function mirror() {
|
||||||
for image in "${WHAT_TO_MIRROR[@]}"; do
|
local image=$1
|
||||||
mirror "${image}" linux/amd64
|
image_name=$(echo "${image}" | cut -d":" -f 1)
|
||||||
#mirror "${image}" linux/arm64
|
image_version=$(echo "${image}" | cut -d":" -f 2)
|
||||||
|
|
||||||
|
echo "* Mirroring ${image}"
|
||||||
|
|
||||||
|
REMOTE_IMAGE="${REGISTRY}${REGISTRY_PROJECT}/${image}"
|
||||||
|
MULTIARCH=0
|
||||||
|
|
||||||
|
# We presumes that amd64 image should always be available.
|
||||||
|
if ! get_amd64_image "${image}"; then
|
||||||
|
echo "! Image mirroring failed! Cannot obtain amd64 image!"
|
||||||
|
fi
|
||||||
|
|
||||||
|
get_arm64_image "${image}"
|
||||||
|
push_multiarch_image "${image}"
|
||||||
|
cleanup "${image}"
|
||||||
|
}
|
||||||
|
|
||||||
|
function push_multiarch_image() {
|
||||||
|
local image=$1
|
||||||
|
|
||||||
|
if ! docker push "${REMOTE_IMAGE}"-amd64; then
|
||||||
|
echo -e "\t! amd64 image push failed!"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! docker push "${REMOTE_IMAGE}"-arm64; then
|
||||||
|
echo -e "\t! arm64 image push failed!"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ${MULTIARCH} -eq 1 ]; then
|
||||||
|
echo -e "\t* Image is multi-arch, creating and pushing a manifest..."
|
||||||
|
docker manifest create "${REMOTE_IMAGE}" \
|
||||||
|
--amend "${REMOTE_IMAGE}"-amd64 \
|
||||||
|
--amend "${REMOTE_IMAGE}"-arm64 \
|
||||||
|
&> /dev/null
|
||||||
|
|
||||||
|
docker manifest push "${REMOTE_IMAGE}" &> /dev/null
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
function start_docker_daemon() {
|
||||||
|
# Starting Docker daemon.
|
||||||
|
/usr/local/bin/dockerd --data-root=/var/lib/docker &
|
||||||
|
|
||||||
|
# Wait for it.
|
||||||
|
echo "Waiting for Docker daemon to start..."
|
||||||
|
while true; do
|
||||||
|
if docker ps &> /dev/null; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
start_docker_daemon
|
||||||
|
login_to_registry
|
||||||
|
collect_images
|
||||||
|
|
||||||
|
for package in "${WHAT_TO_MIRROR[@]}"; do
|
||||||
|
mirror "${package}"
|
||||||
done
|
done
|
||||||
|
Loading…
Reference in New Issue
Block a user