Project

Profile

Help

Actions
Send by e-mail Copy link

Story #3857

closed

As a user, i want Crane to be able to serve Docker registry content directly as well as be alble to use redirects

Added by dag almost 6 years ago. Updated about 5 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
dag
Sprint/Milestone:
Pulp - 2.18.0
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
2.18.0
Target Release - Crane:
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

Problem

Pulp allows to distribute Docker content via rsync to a remote server. There is a possible scenario where a Crane instance is running on this remote server to provide a local Docker registry.

Currently in this scenario Crane would serve 302 redirects to the actual files served by a web server on the same machine.

This creates a problem when trying to restrict access to these files:

  • The Docker client is able to handle basic authentication, when accessing a registry. However when the Docker client follows a redirect it seems to forget any authentication data. Thus with Crane it is possible to restrict access to the 302 redirects but not to the actual files.

Solution

  • Add an option to Crane to either serve Files locally or provide redirects.
  • Use "X-Sendfile" support of flask when serving locally.
  • Support V1 and V2 Docker API versions
Actions
Copy link
 #1

Updated by dag almost 6 years ago

Here is the corresponding pull request https://github.com/pulp/crane/pull/93

Actions
Copy link
 #2

Updated by dkliban@redhat.com over 5 years ago

  • Status changed from NEW to POST
  • Assignee set to dag

Added by dag over 5 years ago

Revision 03fc5ad0 | View on GitHub

Implement option to serve local content

Implement option to send Docker files directly from local paths instead of creating a HTTP redirects. The local paths can be created by a Pulp Docker web distributor or by a rsync distributor.

Example crane.conf:

[general]
debug: true
data_dir: /var/www/pub/docker/
endpoint: localhost:5000

[serve_content]
enable: true

closes #3857 https://pulp.plan.io/issues/3857

Actions
Copy link
 #3

Updated by dag over 5 years ago

  • Status changed from POST to MODIFIED
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by dkliban@redhat.com over 5 years ago

  • Sprint/Milestone set to 2.18.0
Actions
Copy link
 #5

Updated by dkliban@redhat.com over 5 years ago

  • Platform Release set to 2.18.0
Actions
Copy link
 #6

Updated by dkliban@redhat.com over 5 years ago

  • Project changed from Docker Support to Crane
Actions
Copy link
 #7

Updated by ttereshc over 5 years ago

  • Status changed from MODIFIED to 5
Actions
Copy link
 #8

Updated by ttereshc over 5 years ago

  • Status changed from 5 to CLOSED - CURRENTRELEASE
Actions
Copy link
 #9

Updated by bmbouter about 5 years ago

  • Tags Pulp 2 added
Actions
Send by e-mail Copy link

Also available in: Atom PDF