twoliter: add support for crane

Cargo.toml

@@ -5,6 +5,7 @@ members = [
     "tools/bottlerocket-variant",
     "tools/buildsys",
     "tools/buildsys-config",
+    "tools/oci-cli-wrapper",
     "tools/parse-datetime",
     "tools/pubsys",
     "tools/pubsys-config",

tools/oci-cli-wrapper/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "oci-cli-wrapper"
+version = "0.1.0"
+authors = ["Jarrett Tierney <[email protected]>"]
+license = "Apache-2.0 OR MIT"
+edition = "2021"
+publish = false
+
+[dependencies]
+async-trait = "0.1"
+serde = { version = "1", features = ["derive"]}
+serde_json = "1"
+snafu = "0.8"
+tar = "0.4"
+tempfile = "3"
+tokio = { version = "1.32", features = ["process"] }
+which = "6"

tools/oci-cli-wrapper/src/cli.rs

@@ -0,0 +1,51 @@
+use snafu::{ensure, ResultExt};
+use std::path::PathBuf;
+use tokio::process::Command;
+
+use crate::{error, Result};
+
+pub(crate) struct CommandLine {
+    pub(crate) path: PathBuf,
+}
+
+impl CommandLine {
+    pub(crate) async fn output(&self, args: &[&str], error_msg: String) -> Result<Vec<u8>> {
+        let output = Command::new(&self.path)
+            .args(args)
+            .output()
+            .await
+            .context(error::CommandFailedSnafu { message: error_msg })?;
+        ensure!(
+            output.status.success(),
+            error::OperationFailedSnafu {
+                message: String::from_utf8_lossy(&output.stderr),
+                program: self.path.clone(),
+                args: args.iter().map(|x| x.to_string()).collect::<Vec<_>>()
+            }
+        );
+        Ok(output.stdout)
+    }
+
+    pub(crate) async fn spawn(&self, args: &[&str], error_msg: String) -> Result<()> {
+        let status = Command::new(&self.path)
+            .args(args)
+            .spawn()
+            .context(error::CommandFailedSnafu {
+                message: error_msg.clone(),
+            })?
+            .wait()
+            .await
+            .context(error::CommandFailedSnafu {
+                message: error_msg.clone(),
+            })?;
+        ensure!(
+            status.success(),
+            error::OperationFailedSnafu {
+                message: error_msg.clone(),
+                program: self.path.clone(),
+                args: args.iter().map(|x| x.to_string()).collect::<Vec<_>>()
+            }
+        );
+        Ok(())
+    }
+}

tools/oci-cli-wrapper/src/crane.rs

@@ -0,0 +1,46 @@
+use std::path::Path;
+
+use async_trait::async_trait;
+use snafu::ResultExt;
+
+use crate::{cli::CommandLine, error, ConfigView, ImageTool, ImageView, Result};
+
+pub struct CraneCLI {
+    pub(crate) cli: CommandLine,
+}
+
+#[async_trait]
+impl ImageTool for CraneCLI {
+    async fn pull_oci_image(&self, path: &Path, uri: &str) -> Result<()> {
+        let archive_path = path.to_string_lossy();
+        self.cli
+            .spawn(
+                &["pull", "--format", "oci", uri, archive_path.as_ref()],
+                format!("failed to pull image archive from {}", uri),
+            )
+            .await?;
+        Ok(())
+    }
+
+    async fn get_manifest(&self, uri: &str) -> Result<Vec<u8>> {
+        self.cli
+            .output(
+                &["manifest", uri],
+                format!("failed to fetch manifest for resource at {}", uri),
+            )
+            .await
+    }
+
+    async fn get_config(&self, uri: &str) -> Result<ConfigView> {
+        let bytes = self
+            .cli
+            .output(
+                &["config", uri],
+                format!("failed to fetch image config from {}", uri),
+            )
+            .await?;
+        let image_view: ImageView =
+            serde_json::from_slice(bytes.as_slice()).context(error::ConfigDeserializeSnafu)?;
+        Ok(image_view.config)
+    }
+}

tools/oci-cli-wrapper/src/docker.rs

@@ -0,0 +1,71 @@
+use std::path::Path;
+
+use async_trait::async_trait;
+use snafu::ResultExt;
+use std::fs::File;
+use tar::Archive;
+use tempfile::NamedTempFile;
+
+use crate::cli::CommandLine;
+use crate::{error, ConfigView, ImageTool, Result};
+
+pub struct DockerCLI {
+    pub(crate) cli: CommandLine,
+}
+
+#[async_trait]
+impl ImageTool for DockerCLI {
+    async fn pull_oci_image(&self, path: &Path, uri: &str) -> Result<()> {
+        // First we pull the image to local daemon
+        self.cli
+            .spawn(
+                &["pull", uri],
+                format!("failed to pull image to local docker from {}", uri),
+            )
+            .await?;
+        // Now we can use docker save to save the archive to a temppath
+        let temp_file = NamedTempFile::new_in(path).context(crate::error::DockerTempSnafu)?;
+        let tmp_path = temp_file.path().to_string_lossy();
+        self.cli
+            .spawn(
+                &["save", uri, "-o", tmp_path.as_ref()],
+                format!("failed to save image archive from {} to {}", uri, tmp_path),
+            )
+            .await?;
+        let archive_file = File::open(temp_file.path()).context(crate::error::ArchiveReadSnafu)?;
+        let mut archive = Archive::new(archive_file);
+        archive
+            .unpack(path)
+            .context(crate::error::ArchiveExtractSnafu)?;
+        Ok(())
+    }
+
+    async fn get_manifest(&self, uri: &str) -> Result<Vec<u8>> {
+        self.cli
+            .output(
+                &["manifest", "inspect", uri],
+                format!("failed to inspect manifest of resource at {}", uri),
+            )
+            .await
+    }
+
+    async fn get_config(&self, uri: &str) -> Result<ConfigView> {
+        self.cli
+            .spawn(&["pull", uri], format!("failed to pull image from {}", uri))
+            .await?;
+        let bytes = self
+            .cli
+            .output(
+                &[
+                    "image",
+                    "inspect",
+                    uri,
+                    "--format",
+                    "\"{{ json .Config }}\"",
+                ],
+                format!("failed to fetch image config from {}", uri),
+            )
+            .await?;
+        serde_json::from_slice(bytes.as_slice()).context(error::ConfigDeserializeSnafu)
+    }
+}