Andrey Smirnov b3c3ef29bd
feat: install system extensions
Fixes #4815

This implements the following steps:

* machine configuration updates
* pulling and unpacking system extension images
* validating, listing system extensions
* re-packing system extensions
* preserving installed extensions in `/etc/extensions.yaml`

Once extension is enabled, raw information can be queried with:

```
$ talosctl -n 172.20.0.2 cat /etc/extensions.yaml
layers:
    - image: 000.ghcr.io-smira-gvisor-c927b54-dirty.sqsh
      metadata:
        name: gvisor
        version: 20220117.0-v1.0.0
        author: Andrew Rynhard
        description: |
            This system extension provides gVisor using containerd's runtime handler.
        compatibility:
            talos:
                version: '> v0.15.0-alpha.1'
```

This was tested with the `gvisor` system extension.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-01-26 16:24:28 +03:00

74 lines
1.6 KiB
Go

// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
package extensions
import (
"fmt"
"os"
"path/filepath"
"gopkg.in/yaml.v3"
"github.com/talos-systems/talos/pkg/machinery/extensions"
)
// Load extension from the filesystem.
//
// This performs initial validation of the extension file structure.
func Load(path string) (*Extension, error) {
extension := &Extension{
directory: filepath.Base(path),
}
items, err := os.ReadDir(path)
if err != nil {
return nil, err
}
for _, item := range items {
switch item.Name() {
case "manifest.yaml":
if err = extension.loadManifest(filepath.Join(path, item.Name())); err != nil {
return nil, err
}
case "rootfs":
extension.rootfsPath = filepath.Join(path, item.Name())
default:
return nil, fmt.Errorf("unexpected file %q", item.Name())
}
}
var zeroManifest extensions.Manifest
if extension.Manifest == zeroManifest {
return nil, fmt.Errorf("extension manifest is missing")
}
if extension.rootfsPath == "" {
return nil, fmt.Errorf("extension rootfs is missing")
}
return extension, nil
}
func (ext *Extension) loadManifest(path string) error {
f, err := os.Open(path)
if err != nil {
return err
}
defer f.Close() //nolint:errcheck
if err = yaml.NewDecoder(f).Decode(&ext.Manifest); err != nil {
return err
}
if ext.Manifest.Version != "v1alpha1" {
return fmt.Errorf("unsupported manifest version: %q", ext.Manifest.Version)
}
return nil
}