Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OCI layout extensions #2633

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Conversation

vrothberg
Copy link
Member

@vrothberg vrothberg commented Nov 14, 2024

Taken over from #2567 but:

  • Added tests for the three commits
  • Use reflinks when adding a file

@vrothberg
Copy link
Member Author

In draft for now.

oci/layout/oci_dest.go Outdated Show resolved Hide resolved
Copy link
Collaborator

@mtrmac mtrmac left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a quick skim; I’m afraid I didn’t read the added tests yet.

oci/layout/oci_dest.go Outdated Show resolved Hide resolved
oci/layout/oci_dest.go Outdated Show resolved Hide resolved
oci/layout/oci_dest.go Outdated Show resolved Hide resolved
@vrothberg vrothberg force-pushed the layout-list branch 3 times, most recently from ae7457e to 234b45f Compare November 19, 2024 09:41
@vrothberg
Copy link
Member Author

I'd love to have some explicit test condition on Linux to make sure that the reflinking works. We're using the function from c/storage which is e2e tested. The unit tests run on tmp, so we have to create the test dirs in $HOME ... not sure we should though.

@vrothberg vrothberg marked this pull request as ready for review November 19, 2024 12:11
Images in the index can now be referenced via the @sourceIndex syntax.

Signed-off-by: Miloslav Trmač <[email protected]>
Signed-off-by: Valentin Rothberg <[email protected]>
The new API allows for listing all manifests in an OCI layout's index.

Signed-off-by: Miloslav Trmač <[email protected]>
Signed-off-by: Valentin Rothberg <[email protected]>
Try to reflink the file and restort to copying it in case of failure.
Also add an Options struct to be future proof.

Signed-off-by: Miloslav Trmač <[email protected]>
Signed-off-by: Valentin Rothberg <[email protected]>
Copy link
Collaborator

@mtrmac mtrmac left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actual detailed review still pending, I’m afraid.

@@ -18,10 +18,12 @@ import (
"github.com/containers/image/v5/internal/private"
"github.com/containers/image/v5/internal/putblobdigest"
"github.com/containers/image/v5/types"
reflinkCopy "github.com/containers/storage/drivers/copy"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This drags in quite a few dependencies:

+github.com/containers/storage/drivers/copy
+github.com/containers/storage/pkg/archive
+github.com/containers/storage/pkg/chrootarchive
+github.com/containers/storage/pkg/idtools
+github.com/containers/storage/pkg/ioutils
+github.com/containers/storage/pkg/longpath
+github.com/containers/storage/pkg/mount
+github.com/containers/storage/pkg/pools
+github.com/containers/storage/pkg/promise
+github.com/containers/storage/pkg/reexec
+github.com/containers/storage/pkg/system
+github.com/containers/storage/pkg/unshare
+# github.com/docker/go-units v0.5.0
+## explicit
+github.com/docker/go-units
+# github.com/json-iterator/go v1.1.12
+## explicit; go 1.12
+github.com/json-iterator/go
+# github.com/klauspost/compress v1.17.11
+## explicit; go 1.21
+github.com/klauspost/compress
+github.com/klauspost/compress/flate
+github.com/klauspost/compress/fse
+github.com/klauspost/compress/huff0
+github.com/klauspost/compress/internal/cpuinfo
+github.com/klauspost/compress/internal/snapref
+github.com/klauspost/compress/zstd
+github.com/klauspost/compress/zstd/internal/xxhash
+# github.com/klauspost/pgzip v1.2.6
+## explicit
+github.com/klauspost/pgzip
+# github.com/moby/sys/capability v0.3.0
+## explicit; go 1.21
+github.com/moby/sys/capability
+# github.com/moby/sys/mountinfo v0.7.2
+## explicit; go 1.17
+github.com/moby/sys/mountinfo
+# github.com/moby/sys/user v0.3.0
+## explicit; go 1.17
+github.com/moby/sys/user
+# github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
+## explicit
+github.com/modern-go/concurrent
+# github.com/modern-go/reflect2 v1.0.2
+## explicit; go 1.12
+github.com/modern-go/reflect2
+# github.com/opencontainers/runtime-spec v1.2.0
+## explicit
+github.com/opencontainers/runtime-spec/specs-go
+# github.com/ulikunitz/xz v0.5.12
+## explicit; go 1.12
+github.com/ulikunitz/xz
+github.com/ulikunitz/xz/internal/hash
+github.com/ulikunitz/xz/internal/xlog
+github.com/ulikunitz/xz/lzma

Podman itself does not care, but podman-remote might, and out-of-Podman OCI-specific utilities probably do.
Can only the relevant code be split into a subpackage in c/storage?

}

// PutBlobFromLocalFileOptions is unused but may receive functionality in the future.
type PutBlobFromLocalFileOptions struct{}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good idea, but please use functional options so that presence/absence, and error reporting, is explicit.

Modeling after signature/sigstore, the minimum might be

type PutBlobFromLocalFileOption struct{} // to later become an alias to a private, maybe function, type

func PutBlobFromLocalFile(…, opts ... PutBlobFromLocalFileOption)

Copy link
Collaborator

@mtrmac mtrmac left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A full review now.

@@ -71,13 +71,15 @@ An image stored in the docker daemon's internal storage.
The image must be specified as a _docker-reference_ or in an alternative _algo_`:`_digest_ format when being used as an image source.
The _algo_`:`_digest_ refers to the image ID reported by docker-inspect(1).

### **oci:**_path_[`:`_reference_]
### **oci:**_path_[`:`_reference_|@source-index}]_
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
### **oci:**_path_[`:`_reference_|@source-index}]_
### **oci:**_path_[`:`{_reference_|`@`_source-index_}]

@@ -178,3 +178,41 @@ func putTestManifest(t *testing.T, ociRef ociReference, tmpDir string) {
digest := digest.FromBytes(data).Encoded()
assert.Contains(t, paths, filepath.Join(tmpDir, "blobs", "sha256", digest), "The OCI directory does not contain the new manifest data")
}

func TestPutbloFromLocalFile(t *testing.T) {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
func TestPutbloFromLocalFile(t *testing.T) {
func TestPutblobFromLocalFile(t *testing.T) {

//
// If sourceIndex==-1, the index will not be valid to point out the source image, only image will be used.
// NewReference returns an OCI reference for a directory and a image.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This line no longer belongs here and can be deleted.

@@ -148,11 +148,17 @@ func testParseReference(t *testing.T, fn func(string) (types.ImageReference, err
"relativepath",
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Holding the line at “all of *_transport.go should have test coverage”, please port the two test cases added to TestGetManifestDescriptor from #1677 (and then see if more need to be added).

@@ -253,12 +329,12 @@ func TestReferenceStringWithinTransport(t *testing.T) {
}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TestReferenceStringWithinTransport should have a @sourceIndex test case (one exists in #1677 ).

Comment on lines +13 to +14
// This file is named reader.go for consistency with other transports
// handling of “image containers”, but we don’t actually need a stateful reader object.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
// This file is named reader.go for consistency with other transports
// handling of “image containers”, but we don’t actually need a stateful reader object.
// This file is named reader.go for consistency with other transports
// handling of “image containers”, but we don’t actually need a stateful reader object.


results, err := List("fixtures/i_do_not_exist")
require.Error(t, err)
require.Nil(t, results)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This value is conceptually “undefined” so I don’t think we need to test for it, but it also doesn’t really hurt.

require.Equal(t, test.digests[i], res.ManifestDescriptor.Digest.String())
require.Equal(t, test.names[i], ociRef.image)
if test.names[i] != "" {
require.True(t, strings.HasSuffix(res.Reference.StringWithinTransport(), test.names[i]))
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
require.True(t, strings.HasSuffix(res.Reference.StringWithinTransport(), test.names[i]))
require.True(t, strings.HasSuffix(res.Reference.StringWithinTransport(), ":"+ test.names[i]))

require.Equal(t, test.names[i], ociRef.image)
if test.names[i] != "" {
require.True(t, strings.HasSuffix(res.Reference.StringWithinTransport(), test.names[i]))
}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

else test that res.Reference is a sourceIndex reference with the right index?

Or, alternatively, use the returned reference to read a manifest and verify that it matches res.ManifestDescriptor.Digest.

}
blobName := blobFile.Name()

copyRange := false
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a reason we would not want to use this?

@mtrmac
Copy link
Collaborator

mtrmac commented Dec 3, 2024

I'd love to have some explicit test condition on Linux to make sure that the reflinking works.

The unit tests run on tmp, so we have to create the test dirs in $HOME ... not sure we should though.

Tests writing to non-test directories , and possibly leaving them around on aborts/failures, seems rather unexpected to me, some might consider it (or, at least, be worried that it is) hostile. So I’d prefer to leave this to e2e tests, maybe the future tests of the Podman artifact CLI.

(Just because I was looking it up, Google says reflinks don’t work on ext4. That’s not really a blocker, we could gate this behind a filesystem type check.)

vrothberg added a commit to vrothberg/libpod that referenced this pull request Dec 10, 2024
Vendor containers/image/pull/2633 and update the code so we can start
testing it.

Signed-off-by: Valentin Rothberg <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants