Add a storage API method to pull an OCI image from a registry using skopeo.
Signed-off-by: Filip Schauer <[email protected]> --- Introduced in v5. debian/control | 1 + src/PVE/API2/Storage/Status.pm | 70 ++++++++++++++++++++++++++++++++++ 2 files changed, 71 insertions(+) diff --git a/debian/control b/debian/control index 5341317..6bd55a2 100644 --- a/debian/control +++ b/debian/control @@ -54,6 +54,7 @@ Depends: bzip2, ${misc:Depends}, ${perl:Depends}, Recommends: pve-esxi-import-tools (>= 0.6.0), + skopeo, zfs-zed, Description: Proxmox VE storage management library This package contains the storage management library used by Proxmox VE. diff --git a/src/PVE/API2/Storage/Status.pm b/src/PVE/API2/Storage/Status.pm index 7bde4ec..12b7341 100644 --- a/src/PVE/API2/Storage/Status.pm +++ b/src/PVE/API2/Storage/Status.pm @@ -265,6 +265,7 @@ __PACKAGE__->register_method({ { subdir => 'download-url' }, { subdir => 'file-restore' }, { subdir => 'import-metadata' }, + { subdir => 'oci-registry-pull' }, { subdir => 'prunebackups' }, { subdir => 'rrd' }, { subdir => 'rrddata' }, @@ -864,6 +865,75 @@ __PACKAGE__->register_method({ }, }); +__PACKAGE__->register_method({ + name => 'oci_registry_pull', + path => '{storage}/oci-registry-pull', + method => 'POST', + description => "Pull an OCI image from a registry.", + proxyto => 'node', + permissions => { + check => [ + 'and', + ['perm', '/storage/{storage}', ['Datastore.AllocateTemplate']], + ['perm', '/nodes/{node}', ['Sys.AccessNetwork']], + ], + }, + protected => 1, + parameters => { + additionalProperties => 0, + properties => { + node => get_standard_option('pve-node'), + storage => get_standard_option('pve-storage-id'), + reference => { + description => "The reference to the OCI image to download.", + type => 'string', + pattern => + '^(?:(?:[a-zA-Z\d]|[a-zA-Z\d][a-zA-Z\d-]*[a-zA-Z\d])' + . '(?:\.(?:[a-zA-Z\d]|[a-zA-Z\d][a-zA-Z\d-]*[a-zA-Z\d]))*(?::\d+)?/)?[a-z\d]+' + . '(?:/[a-z\d]+(?:(?:(?:[._]|__|[-]*)[a-z\d]+)+)?)*:\w[\w.-]{0,127}$', + }, + }, + }, + returns => { + type => "string", + }, + code => sub { + my ($param) = @_; + + die "Install 'skopeo' to pull OCI images from registries.\n" if (!-f '/usr/bin/skopeo'); + + my $rpcenv = PVE::RPCEnvironment::get(); + my $user = $rpcenv->get_user(); + + my $cfg = PVE::Storage::config(); + + my ($node, $storage) = $param->@{qw(node storage)}; + my $scfg = PVE::Storage::storage_check_enabled($cfg, $storage, $node); + + die "can't upload to storage type '$scfg->{type}', not a file based storage!\n" + if !defined($scfg->{path}); + + my $reference = $param->{reference}; + + die "storage '$storage' is not configured for content-type 'vztmpl'\n" + if !$scfg->{content}->{vztmpl}; + + my $filename = PVE::Storage::normalize_content_filename($reference); + my $path = PVE::Storage::get_vztmpl_dir($cfg, $storage); + PVE::Storage::activate_storage($cfg, $storage); + + my $worker = sub { + PVE::Tools::run_command( + ["skopeo", "copy", "docker://$reference", "oci-archive:$path/$filename.tar"], + ); + }; + + my $worker_id = PVE::Tools::encode_text($filename); # must not pass : or the like as w-ID + + return $rpcenv->fork_worker('ociregistrypull', $worker_id, $user, $worker); + }, +}); + __PACKAGE__->register_method({ name => 'get_import_metadata', path => '{storage}/import-metadata', -- 2.47.3 _______________________________________________ pve-devel mailing list [email protected] https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
