60 lines
2.3 KiB
Ruby
60 lines
2.3 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module Projects
|
|
module ContainerRepository
|
|
class DeleteTagsService < BaseService
|
|
def execute(container_repository)
|
|
return error('access denied') unless can?(current_user, :destroy_container_image, project)
|
|
|
|
tag_names = params[:tags]
|
|
return error('not tags specified') if tag_names.blank?
|
|
|
|
smart_delete(container_repository, tag_names)
|
|
end
|
|
|
|
private
|
|
|
|
# Replace a tag on the registry with a dummy tag.
|
|
# This is a hack as the registry doesn't support deleting individual
|
|
# tags. This code effectively pushes a dummy image and assigns the tag to it.
|
|
# This way when the tag is deleted only the dummy image is affected.
|
|
# See https://gitlab.com/gitlab-org/gitlab/issues/15737 for a discussion
|
|
def smart_delete(container_repository, tag_names)
|
|
# generates the blobs for the dummy image
|
|
dummy_manifest = container_repository.client.generate_empty_manifest(container_repository.path)
|
|
return error('could not generate manifest') if dummy_manifest.nil?
|
|
|
|
deleted_tags = replace_tag_manifests(container_repository, dummy_manifest, tag_names)
|
|
|
|
# Deletes the dummy image
|
|
# All created tag digests are the same since they all have the same dummy image.
|
|
# a single delete is sufficient to remove all tags with it
|
|
if deleted_tags.any? && container_repository.delete_tag_by_digest(deleted_tags.values.first)
|
|
success(deleted: deleted_tags.keys)
|
|
else
|
|
error('could not delete tags')
|
|
end
|
|
end
|
|
|
|
# update the manifests of the tags with the new dummy image
|
|
def replace_tag_manifests(container_repository, dummy_manifest, tag_names)
|
|
deleted_tags = {}
|
|
|
|
tag_names.each do |name|
|
|
digest = container_repository.client.put_tag(container_repository.path, name, dummy_manifest)
|
|
next unless digest
|
|
|
|
deleted_tags[name] = digest
|
|
end
|
|
|
|
# make sure the digests are the same (it should always be)
|
|
digests = deleted_tags.values.uniq
|
|
|
|
# rubocop: disable CodeReuse/ActiveRecord
|
|
Gitlab::ErrorTracking.track_and_raise_for_dev_exception(ArgumentError.new('multiple tag digests')) if digests.many?
|
|
|
|
deleted_tags
|
|
end
|
|
end
|
|
end
|
|
end
|