mirror of
https://github.com/openfaas/faasd.git
synced 2025-06-15 19:36:47 +00:00
912ac265f4
Upgrades containerd, and switches to the official 64-bit ARM binary. Continues to use my binary for 32-bit arm hosts. CNI upgraded to v0.9.1 Signed-off-by: Alex Ellis (OpenFaaS Ltd) <alexellis2@gmail.com>
91 lines
2.3 KiB
Go
Generated
91 lines
2.3 KiB
Go
Generated
/*
|
|
Copyright The containerd Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package fs
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"io"
|
|
"os"
|
|
|
|
winio "github.com/Microsoft/go-winio"
|
|
"golang.org/x/sys/windows"
|
|
)
|
|
|
|
const (
|
|
seTakeOwnershipPrivilege = "SeTakeOwnershipPrivilege"
|
|
)
|
|
|
|
func copyFileInfo(fi os.FileInfo, src, name string) error {
|
|
if err := os.Chmod(name, fi.Mode()); err != nil {
|
|
return fmt.Errorf("failed to chmod %s: %w", name, err)
|
|
}
|
|
|
|
// Copy file ownership and ACL
|
|
// We need SeRestorePrivilege and SeTakeOwnershipPrivilege in order
|
|
// to restore security info on a file, especially if we're trying to
|
|
// apply security info which includes SIDs not necessarily present on
|
|
// the host.
|
|
privileges := []string{winio.SeRestorePrivilege, seTakeOwnershipPrivilege}
|
|
if err := winio.EnableProcessPrivileges(privileges); err != nil {
|
|
return err
|
|
}
|
|
defer winio.DisableProcessPrivileges(privileges)
|
|
|
|
secInfo, err := windows.GetNamedSecurityInfo(
|
|
src, windows.SE_FILE_OBJECT,
|
|
windows.OWNER_SECURITY_INFORMATION|windows.DACL_SECURITY_INFORMATION)
|
|
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
dacl, _, err := secInfo.DACL()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
sid, _, err := secInfo.Owner()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if err := windows.SetNamedSecurityInfo(
|
|
name, windows.SE_FILE_OBJECT,
|
|
windows.OWNER_SECURITY_INFORMATION|windows.DACL_SECURITY_INFORMATION,
|
|
sid, nil, dacl, nil); err != nil {
|
|
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func copyFileContent(dst, src *os.File) error {
|
|
buf := bufferPool.Get().(*[]byte)
|
|
_, err := io.CopyBuffer(dst, src, *buf)
|
|
bufferPool.Put(buf)
|
|
return err
|
|
}
|
|
|
|
func copyXAttrs(dst, src string, excludes map[string]struct{}, errorHandler XAttrErrorHandler) error {
|
|
return nil
|
|
}
|
|
|
|
func copyDevice(dst string, fi os.FileInfo) error {
|
|
return errors.New("device copy not supported")
|
|
}
|