Hello. I am integrating with Portainer</co

This is not related to hbm. <a class="issue-link js-issue-link" data-error-text="F

Integrating with Portainer. about hbm HOT 3 CLOSED

kassisol commented on June 18, 2024

Integrating with Portainer.

from hbm.

Comments (3)

odg0318 commented on June 18, 2024

Addition

Empty Plugin

I implemented an empty authorization plugin and dumped request to check RequestBody and flow.

package main

import (
        "fmt"

        "github.com/docker/go-plugins-helpers/authorization"
)

type Plugin struct {
}

func (p Plugin) AuthZReq(req authorization.Request) authorization.Response {
        fmt.Printf("%+v\n", req)
        return authorization.Response{Allow: true}
}

func (p Plugin) AuthZRes(req authorization.Request) authorization.Response {
        return authorization.Response{Allow: true}
}

func main() {
        p := Plugin{}
        h := authorization.NewHandler(p)
        h.ServeTCP("0.0.0.0", ":9999", "", nil)
}

{User:client UserAuthNMethod:TLS RequestMethod:GET RequestURI:/containers/json?all=1&filters=%7B%22name%22:%5B%22%5E%2Ftest$%22%5D%7D RequestBody:[] RequestHeaders:map[X-Forwarded-For:10.2.0.2 Accept:application/json, text/plain, */* Accept-Encoding:gzip, deflate, br Accept-Language:ko-KR,ko;q=0.9,en-US;q=0.8,en;q=0.7 Cookie:_ga=GA1.1.734966946.1509693905; _gid=GA1.1.1988790202.1522732951; __lnkrntdmcvrd=-1 Referer:http://127.0.0.1:9000/ User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36] RequestPeerCertificates:[0xc420349b80] ResponseStatusCode:0 ResponseBody:[] ResponseHeaders:map[]}
{User:client UserAuthNMethod:TLS RequestMethod:POST RequestURI:/images/create?fromImage=alpine&tag=3.7 RequestBody:[] RequestHeaders:map[Content-Length:34 Content-Type:application/json;charset=UTF-8 Cookie:_ga=GA1.1.734966946.1509693905; _gid=GA1.1.1988790202.1522732951; __lnkrntdmcvrd=-1 Origin:http://127.0.0.1:9000 Referer:http://127.0.0.1:9000/ X-Forwarded-For:10.2.0.2 Accept-Encoding:gzip, deflate, br Accept-Language:ko-KR,ko;q=0.9,en-US;q=0.8,en;q=0.7 User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 Accept:application/json, text/plain, */*] RequestPeerCertificates:[0xc42034b180] ResponseStatusCode:0 ResponseBody:[] ResponseHeaders:map[]}
{User:client UserAuthNMethod:TLS RequestMethod:POST RequestURI:/containers/create?name=test RequestBody:[] RequestHeaders:map[Accept-Encoding:gzip, deflate, br Content-Type:application/json;charset=UTF-8 Origin:http://127.0.0.1:9000 X-Forwarded-For:10.2.0.2 Accept:application/json, text/plain, */* Accept-Language:ko-KR,ko;q=0.9,en-US;q=0.8,en;q=0.7 Content-Length:413 Cookie:_ga=GA1.1.734966946.1509693905; _gid=GA1.1.1988790202.1522732951; __lnkrntdmcvrd=-1 Referer:http://127.0.0.1:9000/ User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36] RequestPeerCertificates:[0xc42036cb00] ResponseStatusCode:0 ResponseBody:[] ResponseHeaders:map[]}
{User:client UserAuthNMethod:TLS RequestMethod:POST RequestURI:/containers/339dbdaa6364ec95900d19682adc42c94e612182b8b368b9ea94def5eb8a56b3/start RequestBody:[] RequestHeaders:map[Accept:application/json, text/plain, */* Accept-Encoding:gzip, deflate, br Content-Length:2 Content-Type:application/json;charset=UTF-8 Cookie:_ga=GA1.1.734966946.1509693905; _gid=GA1.1.1988790202.1522732951; __lnkrntdmcvrd=-1 User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 X-Forwarded-For:10.2.0.2 Accept-Language:ko-KR,ko;q=0.9,en-US;q=0.8,en;q=0.7 Origin:http://127.0.0.1:9000 Referer:http://127.0.0.1:9000/] RequestPeerCertificates:[0xc42036e100] ResponseStatusCode:0 ResponseBody:[] ResponseHeaders:map[]}
{User:client UserAuthNMethod:TLS RequestMethod:GET RequestURI:/containers/json?all=1 RequestBody:[] RequestHeaders:map[Accept:application/json, text/plain, */* Accept-Encoding:gzip, deflate, br Accept-Language:ko-KR,ko;q=0.9,en-US;q=0.8,en;q=0.7 Cookie:_ga=GA1.1.734966946.1509693905; _gid=GA1.1.1988790202.1522732951; __lnkrntdmcvrd=-1 Referer:http://127.0.0.1:9000/ User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 X-Forwarded-For:10.2.0.2] RequestPeerCertificates:[0xc42036f700] ResponseStatusCode:0 ResponseBody:[] ResponseHeaders:map[]}

I found that RequestBody is also empty in empty plugin.

docker cli over TLS

I tried to execute docker cli over TLS.

docker --tlsverify --tlscacert=/etc/docker/certs/ca.crt --tlscert=/etc/docker/certs/client/client.crt --tlskey=/etc/docker/certs/client/client.key-H 127.0.0.1:2376 run -itd --name=test library/alpine:3.7

In this case, RequestBody is not empty and it works fine.

from hbm.

commented on June 18, 2024

quick like that, could you try to update hbm to 0.9.5. What is the Docker API that Portainer uses?

from hbm.

odg0318 commented on June 18, 2024

This is not related to hbm.
portainer/portainer#1785
moby/moby#36778

I will close this issue.

from hbm.

Integrating with Portainer. about hbm HOT 3 CLOSED

Comments (3)

Addition

Empty Plugin

docker cli over TLS

Related Issues (20)

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent