mirror of
https://github.com/quay/quay.git
synced 2026-01-27 18:42:52 +03:00
* Remove V3_UPGRADE_MODE * Remove tag backfill worker and all callers to tag backfill and upgrades * Change initdb to create all test data via the manifest builder, rather than manually via legacy images * Convert various code paths to use the registry_model where we previously did not do so * Convert the GC test suite to build via the manifest builder * Delete an old, unused tool * Delete the Pre OCI registry model * Add additional error handling to the manifest creation code path * Add additional error handling to the OCI tag creation code path * Change how we respond to invalid manifest content types to better handle unknowns * Change legacy secscan test suite to use the registry model * Change the repo build badge to use the registry model (also fixes a bug) * Delete now-unused data model code * Remove old model adjustment code from OCI model * Mark older data models as deprecated which will prevent new rows from being inserted * Remove references to old registry test suite from various testing files * Remove tag backfill worker (again; got re-added during rebase) * Move all deprecated model checks into a central function * Make data_migration more Pythonic * Small requested fixes to Tag module styling * Have tag backfill worker fail to migrate if there are TagManifest's Since this backfill should only be called in future releases for empty models, this should catch someone attempting to upgrade from a too-old version * Remove labelbackfillworker as it is no longer needed * Remove unused invalid import * Reimplement the tag test for the remaining method used
520 lines
17 KiB
Python
520 lines
17 KiB
Python
from abc import ABCMeta, abstractmethod
|
|
from six import add_metaclass
|
|
|
|
|
|
@add_metaclass(ABCMeta)
|
|
class RegistryDataInterface(object):
|
|
"""
|
|
Interface for code to work with the registry data model.
|
|
|
|
The registry data model consists of all tables that store registry-specific information, such as
|
|
Manifests, Blobs, Images, and Labels.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def supports_schema2(self, namespace_name):
|
|
"""
|
|
Returns whether the implementation of the data interface supports schema 2 format manifests.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_tag_legacy_image_id(self, repository_ref, tag_name, storage):
|
|
"""
|
|
Returns the legacy image ID for the tag with a legacy images in the repository.
|
|
|
|
Returns None if None.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_legacy_tags_map(self, repository_ref, storage):
|
|
"""
|
|
Returns a map from tag name to its legacy image ID, for all tags with legacy images in the
|
|
repository.
|
|
|
|
Note that this can be a *very* heavy operation.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def find_matching_tag(self, repository_ref, tag_names):
|
|
"""
|
|
Finds an alive tag in the repository matching one of the given tag names and returns it or
|
|
None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_most_recent_tag(self, repository_ref):
|
|
"""
|
|
Returns the most recently pushed alive tag in the repository, if any.
|
|
|
|
If none, returns None.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def lookup_repository(self, namespace_name, repo_name, kind_filter=None):
|
|
"""
|
|
Looks up and returns a reference to the repository with the given namespace and name, or
|
|
None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_manifest_for_tag(self, tag, backfill_if_necessary=False, include_legacy_image=False):
|
|
"""
|
|
Returns the manifest associated with the given tag.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def lookup_manifest_by_digest(
|
|
self,
|
|
repository_ref,
|
|
manifest_digest,
|
|
allow_dead=False,
|
|
include_legacy_image=False,
|
|
require_available=False,
|
|
):
|
|
"""
|
|
Looks up the manifest with the given digest under the given repository and returns it or
|
|
None if none.
|
|
|
|
If allow_dead is True, manifests pointed to by dead tags will also be returned. If
|
|
require_available is True, a temporary tag will be added onto the returned manifest (before
|
|
it is returned) to ensure it is available until another tagging or manifest operation is
|
|
taken.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def create_manifest_and_retarget_tag(
|
|
self, repository_ref, manifest_interface_instance, tag_name, storage, raise_on_error=False
|
|
):
|
|
"""
|
|
Creates a manifest in a repository, adding all of the necessary data in the model.
|
|
|
|
The `manifest_interface_instance` parameter must be an instance of the manifest
|
|
interface as returned by the image/docker package.
|
|
|
|
Note that all blobs referenced by the manifest must exist under the repository or this
|
|
method will fail and return None.
|
|
|
|
Returns a reference to the (created manifest, tag) or (None, None) on error.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_legacy_images(self, repository_ref):
|
|
"""
|
|
Returns an iterator of all the LegacyImage's defined in the matching repository.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_legacy_image(
|
|
self, repository_ref, docker_image_id, include_parents=False, include_blob=False
|
|
):
|
|
"""
|
|
Returns the matching LegacyImages under the matching repository, if any.
|
|
|
|
If none, returns None.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def create_manifest_label(self, manifest, key, value, source_type_name, media_type_name=None):
|
|
"""
|
|
Creates a label on the manifest with the given key and value.
|
|
|
|
Can raise InvalidLabelKeyException or InvalidMediaTypeException depending on the validation
|
|
errors.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def batch_create_manifest_labels(self, manifest):
|
|
"""
|
|
Returns a context manager for batch creation of labels on a manifest.
|
|
|
|
Can raise InvalidLabelKeyException or InvalidMediaTypeException depending on the validation
|
|
errors.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def list_manifest_labels(self, manifest, key_prefix=None):
|
|
"""
|
|
Returns all labels found on the manifest.
|
|
|
|
If specified, the key_prefix will filter the labels returned to those keys that start with
|
|
the given prefix.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_manifest_label(self, manifest, label_uuid):
|
|
"""
|
|
Returns the label with the specified UUID on the manifest or None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def delete_manifest_label(self, manifest, label_uuid):
|
|
"""
|
|
Delete the label with the specified UUID on the manifest.
|
|
|
|
Returns the label deleted or None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def lookup_cached_active_repository_tags(
|
|
self, model_cache, repository_ref, start_pagination_id, limit
|
|
):
|
|
"""
|
|
Returns a page of active tags in a repository.
|
|
|
|
Note that the tags returned by this method are ShallowTag objects, which only contain the
|
|
tag name. This method will automatically cache the result and check the cache before making
|
|
a call.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def lookup_active_repository_tags(self, repository_ref, start_pagination_id, limit):
|
|
"""
|
|
Returns a page of active tags in a repository.
|
|
|
|
Note that the tags returned by this method are ShallowTag objects, which only contain the
|
|
tag name.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def list_all_active_repository_tags(self, repository_ref, include_legacy_images=False):
|
|
"""
|
|
Returns a list of all the active tags in the repository.
|
|
|
|
Note that this is a *HEAVY* operation on repositories with a lot of tags, and should only be
|
|
used for testing or where other more specific operations are not possible.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def list_repository_tag_history(
|
|
self,
|
|
repository_ref,
|
|
page=1,
|
|
size=100,
|
|
specific_tag_name=None,
|
|
active_tags_only=False,
|
|
since_time_ms=None,
|
|
):
|
|
"""
|
|
Returns the history of all tags in the repository (unless filtered).
|
|
|
|
This includes tags that have been made in-active due to newer versions of those tags coming
|
|
into service.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_most_recent_tag_lifetime_start(self, repository_refs):
|
|
"""
|
|
Returns a map from repository ID to the last modified time ( seconds from epoch, UTC) for
|
|
each repository in the given repository reference list.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_repo_tag(self, repository_ref, tag_name, include_legacy_image=False):
|
|
"""
|
|
Returns the latest, *active* tag found in the repository, with the matching name or None if
|
|
none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def has_expired_tag(self, repository_ref, tag_name):
|
|
"""
|
|
Returns true if and only if the repository contains a tag with the given name that is
|
|
expired.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def retarget_tag(
|
|
self,
|
|
repository_ref,
|
|
tag_name,
|
|
manifest_or_legacy_image,
|
|
storage,
|
|
legacy_manifest_key,
|
|
is_reversion=False,
|
|
):
|
|
"""
|
|
Creates, updates or moves a tag to a new entry in history, pointing to the manifest or
|
|
legacy image specified.
|
|
|
|
If is_reversion is set to True, this operation is considered a reversion over a previous tag
|
|
move operation. Returns the updated Tag or None on error.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def delete_tag(self, repository_ref, tag_name):
|
|
"""
|
|
Deletes the latest, *active* tag with the given name in the repository.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def delete_tags_for_manifest(self, manifest):
|
|
"""
|
|
Deletes all tags pointing to the given manifest, making the manifest inaccessible for
|
|
pulling.
|
|
|
|
Returns the tags deleted, if any. Returns None on error.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def change_repository_tag_expiration(self, tag, expiration_date):
|
|
"""
|
|
Sets the expiration date of the tag under the matching repository to that given.
|
|
|
|
If the expiration date is None, then the tag will not expire. Returns a tuple of the
|
|
previous expiration timestamp in seconds (if any), and whether the operation succeeded.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_legacy_images_owned_by_tag(self, tag):
|
|
"""
|
|
Returns all legacy images *solely owned and used* by the given tag.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_security_status(self, manifest_or_legacy_image):
|
|
"""
|
|
Returns the security status for the given manifest or legacy image or None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def reset_security_status(self, manifest_or_legacy_image):
|
|
"""
|
|
Resets the security status for the given manifest or legacy image, ensuring that it will get
|
|
re-indexed.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def backfill_manifest_for_tag(self, tag):
|
|
"""
|
|
Backfills a manifest for the V1 tag specified. If a manifest already exists for the tag,
|
|
returns that manifest.
|
|
|
|
NOTE: This method will only be necessary until we've completed the backfill, at which point
|
|
it should be removed.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def is_existing_disabled_namespace(self, namespace_name):
|
|
"""
|
|
Returns whether the given namespace exists and is disabled.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def is_namespace_enabled(self, namespace_name):
|
|
"""
|
|
Returns whether the given namespace exists and is enabled.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_manifest_local_blobs(self, manifest, include_placements=False):
|
|
"""
|
|
Returns the set of local blobs for the given manifest or None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def list_manifest_layers(self, manifest, storage, include_placements=False):
|
|
"""
|
|
Returns an *ordered list* of the layers found in the manifest, starting at the base and
|
|
working towards the leaf, including the associated Blob and its placements (if specified).
|
|
|
|
The layer information in `layer_info` will be of type
|
|
`image.docker.types.ManifestImageLayer`. Should not be called for a manifest list.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def list_parsed_manifest_layers(
|
|
self, repository_ref, parsed_manifest, storage, include_placements=False
|
|
):
|
|
"""
|
|
Returns an *ordered list* of the layers found in the parsed manifest, starting at the base
|
|
and working towards the leaf, including the associated Blob and its placements (if
|
|
specified).
|
|
|
|
The layer information in `layer_info` will be of type
|
|
`image.docker.types.ManifestImageLayer`. Should not be called for a manifest list.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def lookup_derived_image(
|
|
self, manifest, verb, storage, varying_metadata=None, include_placements=False
|
|
):
|
|
"""
|
|
Looks up the derived image for the given manifest, verb and optional varying metadata and
|
|
returns it or None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def lookup_or_create_derived_image(
|
|
self,
|
|
manifest,
|
|
verb,
|
|
storage_location,
|
|
storage,
|
|
varying_metadata=None,
|
|
include_placements=False,
|
|
):
|
|
"""
|
|
Looks up the derived image for the given maniest, verb and optional varying metadata and
|
|
returns it.
|
|
|
|
If none exists, a new derived image is created.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_derived_image_signature(self, derived_image, signer_name):
|
|
"""
|
|
Returns the signature associated with the derived image and a specific signer or None if
|
|
none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def set_derived_image_signature(self, derived_image, signer_name, signature):
|
|
"""
|
|
Sets the calculated signature for the given derived image and signer to that specified.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def delete_derived_image(self, derived_image):
|
|
"""
|
|
Deletes a derived image and all of its storage.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def set_derived_image_size(self, derived_image, compressed_size):
|
|
"""
|
|
Sets the compressed size on the given derived image.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_torrent_info(self, blob):
|
|
"""
|
|
Returns the torrent information associated with the given blob or None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def set_torrent_info(self, blob, piece_length, pieces):
|
|
"""
|
|
Sets the torrent infomation associated with the given blob to that specified.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_repo_blob_by_digest(self, repository_ref, blob_digest, include_placements=False):
|
|
"""
|
|
Returns the blob in the repository with the given digest, if any or None if none.
|
|
|
|
Note that there may be multiple records in the same repository for the same blob digest, so
|
|
the return value of this function may change.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def create_blob_upload(self, repository_ref, upload_id, location_name, storage_metadata):
|
|
"""
|
|
Creates a new blob upload and returns a reference.
|
|
|
|
If the blob upload could not be created, returns None.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def lookup_blob_upload(self, repository_ref, blob_upload_id):
|
|
"""
|
|
Looks up the blob upload with the given ID under the specified repository and returns it or
|
|
None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def update_blob_upload(
|
|
self,
|
|
blob_upload,
|
|
uncompressed_byte_count,
|
|
piece_hashes,
|
|
piece_sha_state,
|
|
storage_metadata,
|
|
byte_count,
|
|
chunk_count,
|
|
sha_state,
|
|
):
|
|
"""
|
|
Updates the fields of the blob upload to match those given.
|
|
|
|
Returns the updated blob upload or None if the record does not exists.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def delete_blob_upload(self, blob_upload):
|
|
"""
|
|
Deletes a blob upload record.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def commit_blob_upload(self, blob_upload, blob_digest_str, blob_expiration_seconds):
|
|
"""
|
|
Commits the blob upload into a blob and sets an expiration before that blob will be GCed.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def mount_blob_into_repository(self, blob, target_repository_ref, expiration_sec):
|
|
"""
|
|
Mounts the blob from another repository into the specified target repository, and adds an
|
|
expiration before that blob is automatically GCed.
|
|
|
|
This function is useful during push operations if an existing blob from another repository
|
|
is being pushed. Returns False if the mounting fails. Note that this function does *not*
|
|
check security for mounting the blob and the caller is responsible for doing this check (an
|
|
example can be found in endpoints/v2/blob.py).
|
|
"""
|
|
|
|
@abstractmethod
|
|
def set_tags_expiration_for_manifest(self, manifest, expiration_sec):
|
|
"""
|
|
Sets the expiration on all tags that point to the given manifest to that specified.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_schema1_parsed_manifest(self, manifest, namespace_name, repo_name, tag_name, storage):
|
|
"""
|
|
Returns the schema 1 version of this manifest, or None if none.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def create_manifest_with_temp_tag(
|
|
self, repository_ref, manifest_interface_instance, expiration_sec, storage
|
|
):
|
|
"""
|
|
Creates a manifest under the repository and sets a temporary tag to point to it.
|
|
|
|
Returns the manifest object created or None on error.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def get_cached_namespace_region_blacklist(self, model_cache, namespace_name):
|
|
"""
|
|
Returns a cached set of ISO country codes blacklisted for pulls for the namespace or None if
|
|
the list could not be loaded.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def convert_manifest(
|
|
self, manifest, namespace_name, repo_name, tag_name, allowed_mediatypes, storage
|
|
):
|
|
"""
|
|
Attempts to convert the specified into a parsed manifest with a media type in the
|
|
allowed_mediatypes set.
|
|
|
|
If not possible, or an error occurs, returns None.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def yield_tags_for_vulnerability_notification(self, layer_id_pairs):
|
|
"""
|
|
Yields tags that contain one (or more) of the given layer ID pairs, in repositories which
|
|
have been registered for vulnerability_found notifications.
|
|
|
|
Returns an iterator of LikelyVulnerableTag instances.
|
|
"""
|
|
|
|
@abstractmethod
|
|
def find_repository_with_garbage(self, limit_to_gc_policy_s):
|
|
""" Returns a repository reference to a repository that contains garbage for collection
|
|
or None if none.
|
|
"""
|