1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
|
package deployer
import (
"context"
"fmt"
"log/slog"
"strconv"
"time"
"github.com/moby/moby/client"
)
type Instance struct {
ChallengeName string
DeployKey string
Address string
AddressFormat string
ExpiresAt time.Time
}
func (d *DockerDeployer) GetTeamInstances(ctx context.Context, team string) ([]Instance, error) {
filters := client.Filters{}
filters.Add("label", ContainerLabelForTeam+"="+team)
containers, err := d.client.ContainerList(ctx, client.ContainerListOptions{
All: true,
Filters: filters,
})
if err != nil {
return []Instance{}, err
}
var instances []Instance
for _, c := range containers.Items {
expiresAt, err := strconv.Atoi(c.Labels[ContainerLabelExpiresAt])
if err != nil {
slog.Error("container has invalid expiry", "container", c.ID, "expiry", c.Labels[ContainerLabelExpiresAt])
continue
}
instances = append(instances, Instance{
ChallengeName: c.Labels[ContainerLabelChallenge],
DeployKey: c.Labels[ContainerLabelDeployKey],
Address: c.Labels[ContainerLabelAddress],
AddressFormat: c.Labels[ContainerLabelAddressFormat],
ExpiresAt: time.Unix(int64(expiresAt), 0),
})
}
return instances, nil
}
func (d *DockerDeployer) StopInstance(ctx context.Context, deployKey, team string) error {
if deployKey == "" || team == "" {
return fmt.Errorf("deploy key/team is invalid")
}
filters := client.Filters{}
filters.Add("label", ContainerLabelForTeam+"="+team)
filters.Add("label", ContainerLabelDeployKey+"="+deployKey)
containers, err := d.client.ContainerList(ctx, client.ContainerListOptions{
All: true,
Filters: filters,
})
if err != nil {
return fmt.Errorf("docker error")
}
if len(containers.Items) == 0 {
return fmt.Errorf("no such instance")
}
for _, c := range containers.Items {
_, err := d.client.ContainerRemove(ctx, c.ID, client.ContainerRemoveOptions{
Force: true,
})
if err != nil {
slog.Error("failed to remove container", "container", c.ID, "cause", err)
return fmt.Errorf("docker error")
}
slog.Info("container removed early", "container", c.ID)
}
networks, err := d.client.NetworkList(ctx, client.NetworkListOptions{
Filters: filters,
})
if err != nil {
return fmt.Errorf("docker error")
}
for _, n := range networks.Items {
if err = d.forceRemoveNetwork(ctx, n.ID); err != nil {
slog.Warn("failed to remove network", "network", n.ID, "cause", err)
continue
}
slog.Info("network removed early", "network", n.ID)
}
return nil
}
func (d *DockerDeployer) RemoveExpiredResources(ctx context.Context) error {
filters := client.Filters{}
filters.Add("label", ContainerLabelManaged+"=yes")
containers, err := d.client.ContainerList(ctx, client.ContainerListOptions{
All: true,
Filters: filters,
})
if err != nil {
return err
}
for _, c := range containers.Items {
expiry, err := strconv.ParseInt(c.Labels[ContainerLabelExpiresAt], 10, 64)
if err != nil {
slog.Warn("invalid timestamp on container label", "container", c.ID, "timestamp", c.Labels[ContainerLabelExpiresAt])
continue
}
if expiry > time.Now().Unix() {
continue
}
_, err = d.client.ContainerRemove(ctx, c.ID, client.ContainerRemoveOptions{
Force: true,
})
if err != nil {
return err
}
slog.Info("expired container removed", "container", c.ID)
}
networks, err := d.client.NetworkList(ctx, client.NetworkListOptions{
Filters: filters,
})
if err != nil {
return err
}
for _, n := range networks.Items {
expiry, err := strconv.ParseInt(n.Labels[ContainerLabelExpiresAt], 10, 64)
if err != nil {
slog.Warn("invalid timestamp on network label", "network", n.ID, "timestamp", n.Labels[ContainerLabelExpiresAt])
continue
}
if expiry > time.Now().Unix() {
continue
}
if err = d.forceRemoveNetwork(ctx, n.ID); err != nil {
return err
}
slog.Info("expired network removed", "network", n.ID)
}
return nil
}
func (d *DockerDeployer) forceRemoveNetwork(ctx context.Context, networkID string) error {
_, _ = d.client.NetworkDisconnect(ctx, networkID, client.NetworkDisconnectOptions{
Container: d.proxyContainerName,
Force: true,
})
_, err := d.client.NetworkRemove(ctx, networkID, client.NetworkRemoveOptions{})
if err != nil {
return err
}
return nil
}
|