mirror of
https://github.com/project-zot/zot.git
synced 2024-12-30 22:34:13 -05:00
aaee0220e4
when a client pushes an image zot's inline dedupe will try to find the blob path corresponding with the blob digest that it's currently pushed and if it's found in the cache then zot will make a symbolic link to that cache entry and report to the client that the blob already exists on the location. Before this patch authorization was not applied on this process meaning that a user could copy blobs without having permissions on the source repo. Added a rule which says that the client should have read permissions on the source repo before deduping, otherwise just Stat() the blob and return the corresponding status code. Signed-off-by: Petu Eusebiu <peusebiu@cisco.com> Co-authored-by: Petu Eusebiu <peusebiu@cisco.com>
27 lines
695 B
Go
27 lines
695 B
Go
package cache
|
|
|
|
import (
|
|
godigest "github.com/opencontainers/go-digest"
|
|
)
|
|
|
|
type Cache interface {
|
|
// Returns the human-readable "name" of the driver.
|
|
Name() string
|
|
|
|
// Retrieves the blob matching provided digest.
|
|
GetBlob(digest godigest.Digest) (string, error)
|
|
|
|
GetAllBlobs(digest godigest.Digest) ([]string, error)
|
|
|
|
// Uploads blob to cachedb.
|
|
PutBlob(digest godigest.Digest, path string) error
|
|
|
|
// Check if blob exists in cachedb.
|
|
HasBlob(digest godigest.Digest, path string) bool
|
|
|
|
// Delete a blob from the cachedb.
|
|
DeleteBlob(digest godigest.Digest, path string) error
|
|
|
|
// UsesRelativePaths returns if cache is storing blobs relative to cache rootDir
|
|
UsesRelativePaths() bool
|
|
}
|