Revert "fix: pass through signals to inner container (#83)"

This reverts commit c07d2c2.

cli/clitest/cli.go

@@ -56,7 +56,7 @@ func New(t *testing.T, cmd string, args ...string) (context.Context, *cobra.Comm
 		ctx    = ctx(t, fs, execer, mnt, client)
 	)
 
-	root := cli.Root(nil)
+	root := cli.Root()
 	// This is the one thing that isn't really mocked for the tests.
 	// I cringe at the thought of introducing yet another mock so
 	// let's avoid it for now.

cli/docker.go

@@ -7,7 +7,6 @@ import (
 	"io"
 	"net/url"
 	"os"
-	"os/exec"
 	"path"
 	"path/filepath"
 	"sort"
@@ -146,7 +145,7 @@ type flags struct {
 	ethlink       string
 }
 
-func dockerCmd(ch chan func() error) *cobra.Command {
+func dockerCmd() *cobra.Command {
 	var flags flags
 
 	cmd := &cobra.Command{
@@ -287,7 +286,7 @@ func dockerCmd(ch chan func() error) *cobra.Command {
 				return xerrors.Errorf("wait for dockerd: %w", err)
 			}
 
-			err = runDockerCVM(ctx, log, client, blog, ch, flags)
+			err = runDockerCVM(ctx, log, client, blog, flags)
 			if err != nil {
 				// It's possible we failed because we ran out of disk while
 				// pulling the image. We should restart the daemon and use
@@ -316,7 +315,7 @@ func dockerCmd(ch chan func() error) *cobra.Command {
 					}()
 
 					log.Debug(ctx, "reattempting container creation")
-					err = runDockerCVM(ctx, log, client, blog, ch, flags)
+					err = runDockerCVM(ctx, log, client, blog, flags)
 				}
 				if err != nil {
 					blog.Errorf("Failed to run envbox: %v", err)
@@ -359,7 +358,7 @@ func dockerCmd(ch chan func() error) *cobra.Command {
 	return cmd
 }
 
-func runDockerCVM(ctx context.Context, log slog.Logger, client dockerutil.DockerClient, blog buildlog.Logger, shutdownCh chan func() error, flags flags) error {
+func runDockerCVM(ctx context.Context, log slog.Logger, client dockerutil.DockerClient, blog buildlog.Logger, flags flags) error {
 	fs := xunix.GetFS(ctx)
 
 	// Set our OOM score to something really unfavorable to avoid getting killed
@@ -679,71 +678,31 @@ func runDockerCVM(ctx context.Context, log slog.Logger, client dockerutil.Docker
 	}
 
 	blog.Info("Envbox startup complete!")
-	if flags.boostrapScript == "" {
-		return nil
-	}
-
-	bootstrapExec, err := client.ContainerExecCreate(ctx, containerID, dockertypes.ExecConfig{
-		User:         imgMeta.UID,
-		Cmd:          []string{"/bin/sh", "-s"},
-		Env:          []string{fmt.Sprintf("BINARY_DIR=%s", bootDir)},
-		AttachStdin:  true,
-		AttachStdout: true,
-		AttachStderr: true,
-		Detach:       true,
-	})
-	if err != nil {
-		return xerrors.Errorf("create exec: %w", err)
-	}
-
-	resp, err := client.ContainerExecAttach(ctx, bootstrapExec.ID, dockertypes.ExecStartCheck{})
-	if err != nil {
-		return xerrors.Errorf("attach exec: %w", err)
-	}
-
-	_, err = io.Copy(resp.Conn, strings.NewReader(flags.boostrapScript))
-	if err != nil {
-		return xerrors.Errorf("copy stdin: %w", err)
-	}
-	err = resp.CloseWrite()
-	if err != nil {
-		return xerrors.Errorf("close write: %w", err)
-	}
-
-	go func() {
-		defer resp.Close()
-		rd := io.LimitReader(resp.Reader, 1<<10)
-		_, err := io.Copy(blog, rd)
-		if err != nil {
-			log.Error(ctx, "copy bootstrap output", slog.Error(err))
-		}
-	}()
 
-	// We can't just call ExecInspect because there's a race where the cmd
-	// hasn't been assigned a PID yet.
-	bootstrapPID, err := dockerutil.GetExecPID(ctx, client, bootstrapExec.ID)
+	// The bootstrap script doesn't return since it execs the agent
+	// meaning that it can get pretty noisy if we were to log by default.
+	// In order to allow users to discern issues getting the bootstrap script
+	// to complete successfully we pipe the output to stdout if
+	// CODER_DEBUG=true.
+	debugWriter := io.Discard
+	if flags.debug {
+		debugWriter = os.Stdout
+	}
+	// Bootstrap the container if a script has been provided.
+	blog.Infof("Bootstrapping workspace...")
+	err = dockerutil.BootstrapContainer(ctx, client, dockerutil.BootstrapConfig{
+		ContainerID: containerID,
+		User:        imgMeta.UID,
+		Script:      flags.boostrapScript,
+		// We set this because the default behavior is to download the agent
+		// to /tmp/coder.XXXX. This causes a race to happen where we finish
+		// downloading the binary but before we can execute systemd remounts
+		// /tmp.
+		Env:       []string{fmt.Sprintf("BINARY_DIR=%s", bootDir)},
+		StdOutErr: debugWriter,
+	})
 	if err != nil {
-		return xerrors.Errorf("exec inspect: %w", err)
-	}
-
-	shutdownCh <- func() error {
-		log.Debug(ctx, "killing container", slog.F("bootstrap_pid", bootstrapPID))
-
-		// The PID returned is the PID _outside_ the container...
-		//nolint:gosec
-		out, err := exec.Command("kill", "-TERM", strconv.Itoa(bootstrapPID)).CombinedOutput()
-		if err != nil {
-			return xerrors.Errorf("kill bootstrap process (%s): %w", out, err)
-		}
-
-		log.Debug(ctx, "sent kill signal waiting for process to exit")
-		err = dockerutil.WaitForExit(ctx, client, bootstrapExec.ID)
-		if err != nil {
-			return xerrors.Errorf("wait for exit: %w", err)
-		}
-
-		log.Debug(ctx, "bootstrap process successfully exited")
-		return nil
+		return xerrors.Errorf("boostrap container: %w", err)
 	}
 
 	return nil

cli/root.go

@@ -4,7 +4,7 @@ import (
 	"github.com/spf13/cobra"
 )
 
-func Root(ch chan func() error) *cobra.Command {
+func Root() *cobra.Command {
 	cmd := &cobra.Command{
 		Use:           "envbox",
 		SilenceErrors: true,
@@ -15,6 +15,6 @@ func Root(ch chan func() error) *cobra.Command {
 		},
 	}
 
-	cmd.AddCommand(dockerCmd(ch))
+	cmd.AddCommand(dockerCmd())
 	return cmd
 }

cmd/envbox/main.go

@@ -1,46 +1,20 @@
 package main
 
 import (
-	"context"
 	"fmt"
 	"os"
-	"os/signal"
 	"runtime"
-	"syscall"
 
-	"cdr.dev/slog"
-	"cdr.dev/slog/sloggers/slogjson"
 	"github.com/coder/envbox/cli"
 )
 
 func main() {
-	ch := make(chan func() error, 1)
-	sigs := make(chan os.Signal, 1)
-	signal.Notify(sigs, syscall.SIGTERM, syscall.SIGINT, syscall.SIGWINCH)
-	go func() {
-		ctx := context.Background()
-		log := slog.Make(slogjson.Sink(os.Stderr))
-		log.Info(ctx, "waiting for signal")
-		<-sigs
-		log.Info(ctx, "got signal")
-		select {
-		case fn := <-ch:
-			log.Info(ctx, "running shutdown function")
-			err := fn()
-			if err != nil {
-				log.Error(ctx, "shutdown function failed", slog.Error(err))
-				os.Exit(1)
-			}
-		default:
-			log.Info(ctx, "no shutdown function")
-		}
-		log.Info(ctx, "exiting")
-		os.Exit(0)
-	}()
-	_, err := cli.Root(ch).ExecuteC()
+	_, err := cli.Root().ExecuteC()
 	if err != nil {
 		_, _ = fmt.Fprintln(os.Stderr, err.Error())
 		os.Exit(1)
 	}
+
+	// We exit the main thread while keepin all the other procs goin strong.
 	runtime.Goexit()
 }

dockerutil/container.go

@@ -113,7 +113,7 @@ func BootstrapContainer(ctx context.Context, client DockerClient, conf Bootstrap
 
 	var err error
 	for r, n := retry.New(time.Second, time.Second*2), 0; r.Wait(ctx) && n < 10; n++ {
-		var out io.Reader
+		var out []byte
 		out, err = ExecContainer(ctx, client, ExecConfig{
 			ContainerID: conf.ContainerID,
 			User:        conf.User,
@@ -122,16 +122,9 @@ func BootstrapContainer(ctx context.Context, client DockerClient, conf Bootstrap
 			Stdin:       strings.NewReader(conf.Script),
 			Env:         conf.Env,
 			StdOutErr:   conf.StdOutErr,
-			Detach:      conf.Detach,
 		})
 		if err != nil {
-			output, rerr := io.ReadAll(out)
-			if rerr != nil {
-				err = xerrors.Errorf("read all: %w", err)
-				continue
-			}
-
-			err = xerrors.Errorf("boostrap container (%s): %w", output, err)
+			err = xerrors.Errorf("boostrap container (%s): %w", out, err)
 			continue
 		}
 		break

dockerutil/dockerfake/client.go

@@ -162,9 +162,7 @@ func (m MockClient) ContainerExecCreate(ctx context.Context, name string, config
 
 func (m MockClient) ContainerExecInspect(ctx context.Context, id string) (dockertypes.ContainerExecInspect, error) {
 	if m.ContainerExecInspectFn == nil {
-		return dockertypes.ContainerExecInspect{
-			Pid: 1,
-		}, nil
+		return dockertypes.ContainerExecInspect{}, nil
 	}
 
 	return m.ContainerExecInspectFn(ctx, id)

dockerutil/exec.go

@@ -4,13 +4,11 @@ import (
 	"bytes"
 	"context"
 	"io"
-	"time"
 
 	dockertypes "github.com/docker/docker/api/types"
 	"golang.org/x/xerrors"
 
 	"github.com/coder/envbox/xio"
-	"github.com/coder/retry"
 )
 
 type ExecConfig struct {
@@ -26,9 +24,9 @@ type ExecConfig struct {
 
 // ExecContainer runs a command in a container. It returns the output and any error.
 // If an error occurs during the execution of the command, the output is appended to the error.
-func ExecContainer(ctx context.Context, client DockerClient, config ExecConfig) (io.Reader, error) {
+func ExecContainer(ctx context.Context, client DockerClient, config ExecConfig) ([]byte, error) {
 	exec, err := client.ContainerExecCreate(ctx, config.ContainerID, dockertypes.ExecConfig{
-		Detach:       config.Detach,
+		Detach:       true,
 		Cmd:          append([]string{config.Cmd}, config.Args...),
 		User:         config.User,
 		AttachStderr: true,
@@ -92,41 +90,5 @@ func ExecContainer(ctx context.Context, client DockerClient, config ExecConfig)
 		return nil, xerrors.Errorf("%s: exit code %d", buf.Bytes(), inspect.ExitCode)
 	}
 
-	return &buf, nil
-}
-
-func GetExecPID(ctx context.Context, client DockerClient, execID string) (int, error) {
-	for r := retry.New(time.Second, time.Second); r.Wait(ctx); {
-		inspect, err := client.ContainerExecInspect(ctx, execID)
-		if err != nil {
-			return 0, xerrors.Errorf("exec inspect: %w", err)
-		}
-
-		if inspect.Pid == 0 {
-			continue
-		}
-		return inspect.Pid, nil
-	}
-
-	return 0, ctx.Err()
-}
-
-func WaitForExit(ctx context.Context, client DockerClient, execID string) error {
-	for r := retry.New(time.Second, time.Second); r.Wait(ctx); {
-		inspect, err := client.ContainerExecInspect(ctx, execID)
-		if err != nil {
-			return xerrors.Errorf("exec inspect: %w", err)
-		}
-
-		if inspect.Running {
-			continue
-		}
-
-		if inspect.ExitCode > 0 {
-			return xerrors.Errorf("exit code %d", inspect.ExitCode)
-		}
-
-		return nil
-	}
-	return ctx.Err()
+	return buf.Bytes(), nil
 }

dockerutil/image.go

@@ -1,6 +1,7 @@
 package dockerutil
 
 import (
+	"bytes"
 	"context"
 	"encoding/json"
 	"fmt"
@@ -207,7 +208,7 @@ func GetImageMetadata(ctx context.Context, client DockerClient, image, username
 		return ImageMetadata{}, xerrors.Errorf("get /etc/passwd entry for %s: %w", username, err)
 	}
 
-	users, err := xunix.ParsePasswd(out)
+	users, err := xunix.ParsePasswd(bytes.NewReader(out))
 	if err != nil {
 		return ImageMetadata{}, xerrors.Errorf("parse passwd entry for (%s): %w", out, err)
 	}