config

type CertPool ¶ added in v0.3.1

type CertPool struct {
	*x509.CertPool
	// contains filtered or unexported fields
}

CertPool is a wrapper around x509.CertPool, which can be unmarshalled and constructed from a list of filenames

func (cp *CertPool) UnmarshalJSON(b []byte) error

func (cp *CertPool) UnmarshalYAML(unmarshal func(interface{}) error) error

type HijackConfig ¶ added in v0.3.1

type HijackConfig struct {
	Cert  string        `yaml:"cert"`
	Key   string        `yaml:"key"`
	Hosts []*HijackHost `yaml:"hosts"`
}

HijackConfig represents how dfdaemon hijacks http requests

type HijackHost ¶ added in v0.3.1

type HijackHost struct {
	Regx  *Regexp   `yaml:"regx"`
	Certs *CertPool `yaml:"certs"`
}

HijackHost is a hijack rule for the hosts that matches Regx

type Properties ¶

type Properties struct {
	// Registry mirror settings
	RegistryMirror *RegistryMirror `yaml:"registry_mirror"`

	// Proxies is the list of rules for the transparent proxy. If no rules
	// are provided, all requests will be proxied directly. Request will be
	// proxied with the first matching rule.
	Proxies []*Proxy `yaml:"proxies"`

	// HijackHTTPS is the list of hosts whose https requests should be hijacked
	// by dfdaemon. Dfdaemon will be able to proxy requests from them with dfget
	// if the url matches the proxy rules. The first matched rule will be used.
	HijackHTTPS *HijackConfig `yaml:"hijack_https"`
}

Properties holds all configurable properties of dfdaemon. The default path is '/etc/dragonfly/dfdaemon.yml' For examples:

registry_mirror:
  # url for the registry mirror
  remote: https://index.docker.io
  # whether to ignore https certificate errors
  insecure: false
  # optional certificates if the remote server uses self-signed certificates
  certs: []

proxies:
# proxy all http image layer download requests with dfget
- regx: blob/sha256/.*
# change http requests to some-registry to https and proxy them with dfget
- regx: some-registry/
  use_https: true
# proxy requests directly, without dfget
- regx: no-proxy-reg
  direct: true

hijack_https:
  # key pair used to hijack https requests
  cert: df.crt
  key: df.key
  hosts:
  - regx: mirror.aliyuncs.com:443  # regexp to match request hosts
    # whether to ignore https certificate errors
    insecure: false
    # optional certificates if the host uses self-signed certificates
    certs: []

func NewProperties() *Properties

func (p *Properties) Load(path string) error

type Proxy ¶ added in v0.3.1

type Proxy struct {
	Regx     *Regexp `yaml:"regx"`
	UseHTTPS bool    `yaml:"use_https"`
	Direct   bool    `yaml:"direct"`
}

Proxy describe a regular expression matching rule for how to proxy a request

func NewProxy(regx string, useHTTPS bool, direct bool) (*Proxy, error)

func (r *Proxy) Match(url string) bool

type Regexp ¶ added in v0.3.1

type Regexp struct {
	*regexp.Regexp
}

Regexp is simple wrapper around regexp.Regexp to make it unmarshallable from a string

func NewRegexp(exp string) (*Regexp, error)

func (r *Regexp) MarshalJSON() ([]byte, error)

func (r *Regexp) UnmarshalJSON(b []byte) error

func (r *Regexp) UnmarshalYAML(unmarshal func(interface{}) error) error

type RegistryMirror ¶ added in v0.3.1

type RegistryMirror struct {
	// Remote url for the registry mirror, default is https://index.docker.io
	Remote *URL `yaml:"remote"`

	// Optional certificates if the mirror uses self-signed certificates
	Certs *CertPool `yaml:"certs"`

	// Whether to ignore certificates errors for the registry
	Insecure bool `yaml:"insecure"`
}

RegistryMirror configures the mirror of the official docker registry

func (r *RegistryMirror) TLSConfig() *tls.Config

type URL ¶ added in v0.3.1

type URL struct {
	*url.URL
}

URL is simple wrapper around url.URL to make it unmarshallable from a string

func NewURL(s string) (*URL, error)

func (u *URL) MarshalJSON() ([]byte, error)

func (u *URL) UnmarshalJSON(b []byte) error

func (u *URL) UnmarshalYAML(unmarshal func(interface{}) error) error