169 lines
7.6 KiB
Python
169 lines
7.6 KiB
Python
from lib import config as config_module
|
|
from lib import logging as logging_lib
|
|
from lib import docker_interface
|
|
from lib import get_specs
|
|
import docker
|
|
from docker.types import EndpointConfig, NetworkingConfig
|
|
import os
|
|
|
|
client = docker_interface.client
|
|
config = config_module.config
|
|
log = logging_lib.log
|
|
|
|
def deploy(validated_containers):
|
|
local_images = docker_interface.get_local_images()
|
|
all_containers = docker_interface.get_containers(all=True)
|
|
|
|
is_hive = "hive" in get_specs.get_kernel()
|
|
|
|
# Deploy wireguard first
|
|
|
|
wireguard_containers = []
|
|
rest_containers = []
|
|
for container in validated_containers:
|
|
if not "name" in container or not "image" in container:
|
|
pass
|
|
elif "wireguard" in container:
|
|
wireguard_containers.append(container)
|
|
else:
|
|
rest_containers.append(container)
|
|
|
|
validated_containers = wireguard_containers+rest_containers
|
|
|
|
# Deploy wireguard first
|
|
|
|
needed_running_names = []
|
|
paused_names = []
|
|
|
|
created_container_names = []
|
|
for container in all_containers:
|
|
if type(container.name)==str:
|
|
created_container_names.append(container.name)
|
|
|
|
for validated_container in validated_containers:
|
|
try:
|
|
|
|
image_ready = False
|
|
for local_image in local_images:
|
|
if local_image.replace(':latest','')==validated_container["image"].replace(':latest',''):
|
|
image_ready = True
|
|
break
|
|
|
|
if "paused" in validated_container:
|
|
paused_names.append(validated_container["name"])
|
|
else:
|
|
needed_running_names.append(validated_container["name"])
|
|
|
|
container_options = {
|
|
'image': validated_container["image"],
|
|
'name': validated_container["name"],
|
|
'detach': True,
|
|
'tty': True,
|
|
'network_mode': 'clore-br0',
|
|
'cap_add': [],
|
|
'volumes': {},
|
|
'ports': {},
|
|
'device_requests': [],
|
|
'environment': validated_container["env"] if "env" in validated_container else {},
|
|
'log_config': docker.types.LogConfig(
|
|
type='json-file',
|
|
config={
|
|
'max-size': '5m',
|
|
'max-file': '1'
|
|
}
|
|
)
|
|
}
|
|
|
|
if "network" in validated_container:
|
|
container_options["network_mode"]=validated_container["network"]
|
|
if "ip" in validated_container:
|
|
del container_options["network_mode"]
|
|
|
|
if "gpus" in validated_container and type(validated_container["gpus"])==bool:
|
|
container_options["runtime"]="nvidia"
|
|
container_options["device_requests"].append(docker.types.DeviceRequest(count=-1, capabilities=[['gpu']]))
|
|
elif "gpus" in validated_container and type(validated_container["gpus"])==list:
|
|
container_options["runtime"]="nvidia"
|
|
container_options["device_requests"].append(docker.types.DeviceRequest(
|
|
count=-1,
|
|
capabilities=[['gpu']],
|
|
device_ids=validated_container["gpus"]
|
|
))
|
|
|
|
if "wireguard" in validated_container:
|
|
wg_conf_dir = os.path.join(config.wireguard_config_folder, validated_container["name"])
|
|
container_options["cap_add"].append('NET_ADMIN')
|
|
container_options["cap_add"].append('SYS_MODULE')
|
|
container_options["volumes"]["/lib/modules"] = {'bind': '/lib/modules', 'mode': 'ro'}
|
|
container_options["volumes"][wg_conf_dir] = {'bind': '/config', 'mode': 'rw'}
|
|
elif "allow_vpn" in validated_container:
|
|
container_options["cap_add"].append('NET_ADMIN')
|
|
container_options["cap_add"].append('SYS_MODULE')
|
|
container_options["volumes"]["/lib/modules"] = {'bind': '/lib/modules', 'mode': 'ro'}
|
|
|
|
if "limited_disk" in validated_container and type(validated_container["limited_disk"])==str:
|
|
container_options["storage_opt"]={'size':validated_container["limited_disk"]}
|
|
if "ports" in validated_container and type(validated_container["ports"])==list:
|
|
for port in validated_container["ports"]:
|
|
if type(port)==str and ':' in port:
|
|
is_udp = True if "/udp" in port else False
|
|
port=port.replace('/udp','')
|
|
container_options["ports"][f"{port.split(':')[0]}/{'udp' if is_udp else 'tcp'}"]=int(port.split(':')[1])
|
|
if "custom_entrypoint" in validated_container:
|
|
entrypoint_file_name = f"{validated_container["name"]}.sh"
|
|
entrypoint_full_path = os.path.join(config.entrypoints_folder, entrypoint_file_name)
|
|
container_options["volumes"][entrypoint_full_path] = {'bind': '/etc/order_entrypoint.sh', 'mode': 'ro'}
|
|
container_options["entrypoint"]='/etc/order_entrypoint.sh'
|
|
elif "entrypoint_command" in validated_container and type(validated_container["entrypoint_command"])==str and len(validated_container["entrypoint_command"])>0:
|
|
container_options["entrypoint"]=validated_container["entrypoint_command"]
|
|
|
|
if not validated_container["name"] in created_container_names and image_ready:
|
|
container = client.containers.create(**container_options)
|
|
if "ip" in validated_container:
|
|
client.networks.get(validated_container["network"] if "network" in validated_container else "clore-br0").connect(container, ipv4_address=validated_container["ip"])
|
|
client.networks.get("bridge").disconnect(container)
|
|
if not "paused" in validated_container:
|
|
container.start()
|
|
except Exception as e:
|
|
log.debug(f"Container creation issue | {e}")
|
|
pass
|
|
|
|
all_running_container_names = []
|
|
all_stopped_container_names = []
|
|
|
|
for container in all_containers:
|
|
if type(container.name)==str:
|
|
if container.status == "running":
|
|
all_running_container_names.append(container.name)
|
|
else:
|
|
all_stopped_container_names.append(container.name)
|
|
if container.name in needed_running_names and container.status != 'running':
|
|
try:
|
|
attached_networks = container.attrs['NetworkSettings']['Networks']
|
|
if "bridge" in attached_networks.keys() or len(attached_networks.keys())==0: # Ip was not attached, remove container
|
|
container.stop()
|
|
container.remove()
|
|
else:
|
|
container.start()
|
|
except Exception as e:
|
|
pass
|
|
elif container.name in paused_names and container.status == 'running':
|
|
try:
|
|
container.stop()
|
|
except Exception as e:
|
|
pass
|
|
elif container.name not in paused_names+needed_running_names and container.status == 'running':
|
|
try:
|
|
container.stop()
|
|
container.remove()
|
|
except Exception as e:
|
|
pass
|
|
elif container.name not in paused_names+needed_running_names:
|
|
try:
|
|
container.remove()
|
|
except Exception as e:
|
|
pass
|
|
|
|
return all_running_container_names, all_stopped_container_names
|
|
#print(validated_containers)
|
|
|