mirror of
https://github.com/siderolabs/talos.git
synced 2025-08-10 00:27:05 +02:00
e899fb37fd
Implement SELinux labeling support in EtcFileController, label both squashfs and runtime-created files in /etc and /system/etc. Add corresponding test cases. Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
64 lines
2.1 KiB
Go
64 lines
2.1 KiB
Go
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
package files
|
|
|
|
import (
|
|
"io/fs"
|
|
|
|
"github.com/cosi-project/runtime/pkg/resource"
|
|
"github.com/cosi-project/runtime/pkg/resource/meta"
|
|
"github.com/cosi-project/runtime/pkg/resource/protobuf"
|
|
"github.com/cosi-project/runtime/pkg/resource/typed"
|
|
|
|
"github.com/siderolabs/talos/pkg/machinery/proto"
|
|
)
|
|
|
|
//go:generate deep-copy -type EtcFileSpecSpec -type EtcFileStatusSpec -header-file ../../../../hack/boilerplate.txt -o deep_copy.generated.go .
|
|
|
|
// EtcFileSpecType is type of EtcFile resource.
|
|
const EtcFileSpecType = resource.Type("EtcFileSpecs.files.talos.dev")
|
|
|
|
// EtcFileSpec resource holds contents of the file which should be put to `/etc` directory.
|
|
type EtcFileSpec = typed.Resource[EtcFileSpecSpec, EtcFileSpecExtension]
|
|
|
|
// EtcFileSpecSpec describes status of rendered secrets.
|
|
//
|
|
//gotagsrewrite:gen
|
|
type EtcFileSpecSpec struct {
|
|
Contents []byte `yaml:"contents" protobuf:"1"`
|
|
Mode fs.FileMode `yaml:"mode" protobuf:"2"`
|
|
SelinuxLabel string `yaml:"selinux_label" protobuf:"3"`
|
|
}
|
|
|
|
// NewEtcFileSpec initializes a EtcFileSpec resource.
|
|
func NewEtcFileSpec(namespace resource.Namespace, id resource.ID) *EtcFileSpec {
|
|
return typed.NewResource[EtcFileSpecSpec, EtcFileSpecExtension](
|
|
resource.NewMetadata(namespace, EtcFileSpecType, id, resource.VersionUndefined),
|
|
EtcFileSpecSpec{},
|
|
)
|
|
}
|
|
|
|
// EtcFileSpecExtension provides auxiliary methods for EtcFileSpec.
|
|
type EtcFileSpecExtension struct{}
|
|
|
|
// ResourceDefinition implements meta.ResourceDefinitionProvider interface.
|
|
func (EtcFileSpecExtension) ResourceDefinition() meta.ResourceDefinitionSpec {
|
|
return meta.ResourceDefinitionSpec{
|
|
Type: EtcFileSpecType,
|
|
Aliases: []resource.Type{},
|
|
DefaultNamespace: NamespaceName,
|
|
PrintColumns: []meta.PrintColumn{},
|
|
}
|
|
}
|
|
|
|
func init() {
|
|
proto.RegisterDefaultTypes()
|
|
|
|
err := protobuf.RegisterDynamic[EtcFileSpecSpec](EtcFileSpecType, &EtcFileSpec{})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
}
|