|
| 1 | +package container |
| 2 | + |
| 3 | +import ( |
| 4 | + "github.com/docker/cli/cli/command/completion" |
| 5 | + "github.com/docker/docker/api/types/container" |
| 6 | + "github.com/moby/sys/signal" |
| 7 | + "github.com/spf13/cobra" |
| 8 | +) |
| 9 | + |
| 10 | +// allLinuxCapabilities is a list of all known Linux capabilities. |
| 11 | +// |
| 12 | +// This list was based on the containerd pkg/cap package; |
| 13 | +// https://github.com/containerd/containerd/blob/v1.7.19/pkg/cap/cap_linux.go#L133-L181 |
| 14 | +// |
| 15 | +// TODO(thaJeztah): add descriptions, and enable descriptions for our completion scripts (cobra.CompletionOptions.DisableDescriptions is currently set to "true") |
| 16 | +var allLinuxCapabilities = []string{ |
| 17 | + "ALL", // magic value for "all capabilities" |
| 18 | + |
| 19 | + // caps35 is the caps of kernel 3.5 (37 entries) |
| 20 | + "CAP_CHOWN", // 2.2 |
| 21 | + "CAP_DAC_OVERRIDE", // 2.2 |
| 22 | + "CAP_DAC_READ_SEARCH", // 2.2 |
| 23 | + "CAP_FOWNER", // 2.2 |
| 24 | + "CAP_FSETID", // 2.2 |
| 25 | + "CAP_KILL", // 2.2 |
| 26 | + "CAP_SETGID", // 2.2 |
| 27 | + "CAP_SETUID", // 2.2 |
| 28 | + "CAP_SETPCAP", // 2.2 |
| 29 | + "CAP_LINUX_IMMUTABLE", // 2.2 |
| 30 | + "CAP_NET_BIND_SERVICE", // 2.2 |
| 31 | + "CAP_NET_BROADCAST", // 2.2 |
| 32 | + "CAP_NET_ADMIN", // 2.2 |
| 33 | + "CAP_NET_RAW", // 2.2 |
| 34 | + "CAP_IPC_LOCK", // 2.2 |
| 35 | + "CAP_IPC_OWNER", // 2.2 |
| 36 | + "CAP_SYS_MODULE", // 2.2 |
| 37 | + "CAP_SYS_RAWIO", // 2.2 |
| 38 | + "CAP_SYS_CHROOT", // 2.2 |
| 39 | + "CAP_SYS_PTRACE", // 2.2 |
| 40 | + "CAP_SYS_PACCT", // 2.2 |
| 41 | + "CAP_SYS_ADMIN", // 2.2 |
| 42 | + "CAP_SYS_BOOT", // 2.2 |
| 43 | + "CAP_SYS_NICE", // 2.2 |
| 44 | + "CAP_SYS_RESOURCE", // 2.2 |
| 45 | + "CAP_SYS_TIME", // 2.2 |
| 46 | + "CAP_SYS_TTY_CONFIG", // 2.2 |
| 47 | + "CAP_MKNOD", // 2.4 |
| 48 | + "CAP_LEASE", // 2.4 |
| 49 | + "CAP_AUDIT_WRITE", // 2.6.11 |
| 50 | + "CAP_AUDIT_CONTROL", // 2.6.11 |
| 51 | + "CAP_SETFCAP", // 2.6.24 |
| 52 | + "CAP_MAC_OVERRIDE", // 2.6.25 |
| 53 | + "CAP_MAC_ADMIN", // 2.6.25 |
| 54 | + "CAP_SYSLOG", // 2.6.37 |
| 55 | + "CAP_WAKE_ALARM", // 3.0 |
| 56 | + "CAP_BLOCK_SUSPEND", // 3.5 |
| 57 | + |
| 58 | + // caps316 is the caps of kernel 3.16 (38 entries) |
| 59 | + "CAP_AUDIT_READ", |
| 60 | + |
| 61 | + // caps58 is the caps of kernel 5.8 (40 entries) |
| 62 | + "CAP_PERFMON", |
| 63 | + "CAP_BPF", |
| 64 | + |
| 65 | + // caps59 is the caps of kernel 5.9 (41 entries) |
| 66 | + "CAP_CHECKPOINT_RESTORE", |
| 67 | +} |
| 68 | + |
| 69 | +// restartPolicies is a list of all valid restart-policies.. |
| 70 | +// |
| 71 | +// TODO(thaJeztah): add descriptions, and enable descriptions for our completion scripts (cobra.CompletionOptions.DisableDescriptions is currently set to "true") |
| 72 | +var restartPolicies = []string{ |
| 73 | + string(container.RestartPolicyDisabled), |
| 74 | + string(container.RestartPolicyAlways), |
| 75 | + string(container.RestartPolicyOnFailure), |
| 76 | + string(container.RestartPolicyUnlessStopped), |
| 77 | +} |
| 78 | + |
| 79 | +func completeLinuxCapabilityNames(cmd *cobra.Command, args []string, toComplete string) (names []string, _ cobra.ShellCompDirective) { |
| 80 | + return completion.FromList(allLinuxCapabilities...)(cmd, args, toComplete) |
| 81 | +} |
| 82 | + |
| 83 | +func completeRestartPolicies(cmd *cobra.Command, args []string, toComplete string) (names []string, _ cobra.ShellCompDirective) { |
| 84 | + return completion.FromList(restartPolicies...)(cmd, args, toComplete) |
| 85 | +} |
| 86 | + |
| 87 | +func completeSignals(cmd *cobra.Command, args []string, toComplete string) (names []string, _ cobra.ShellCompDirective) { |
| 88 | + // TODO(thaJeztah): do we want to provide the full list here, or a subset? |
| 89 | + signalNames := make([]string, 0, len(signal.SignalMap)) |
| 90 | + for k := range signal.SignalMap { |
| 91 | + signalNames = append(signalNames, k) |
| 92 | + } |
| 93 | + return completion.FromList(signalNames...)(cmd, args, toComplete) |
| 94 | +} |
0 commit comments