<h2>Editing File: /usr/lib/python3.6/site-packages/sos/report/plugins/docker.py</h2><form method='post'><textarea name='content' class='file-edit'># Copyright (C) 2014 Red Hat, Inc. Bryn M. Reeves &lt;bmr@redhat.com&gt;

# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.

from sos.report.plugins import (Plugin, RedHatPlugin, UbuntuPlugin,
                                SoSPredicate, CosPlugin, PluginOpt,
                                DebianPlugin)


class Docker(Plugin, CosPlugin):

    short_desc = 'Docker containers'
    plugin_name = 'docker'
    profiles = ('container',)

    option_list = [
        PluginOpt('all', default=False,
                  desc='collect for all containers, even terminated ones'),
        PluginOpt('logs', default=False,
                  desc='collect stdout/stderr logs for containers'),
        PluginOpt('size', default=False,
                  desc='collect image sizes for docker ps')
    ]

    def setup(self):
        self.add_copy_spec([
            &quot;/etc/docker/daemon.json&quot;,
            &quot;/var/lib/docker/repositories-*&quot;
        ])

        self.add_env_var([
            'DOCKER_BUILD_PROXY',
            'DOCKER_RUN_PROXY'
        ])

        self.add_journal(units=&quot;docker&quot;)
        self.add_dir_listing('/etc/docker', recursive=True)

        self.set_cmd_predicate(SoSPredicate(self, services=[&quot;docker&quot;]))

        subcmds = [
            'events --since 24h --until 1s',
            'ps',
            'stats --no-stream',
            'version',
            'volume ls'
        ]

        for subcmd in subcmds:
            self.add_cmd_output(f&quot;docker {subcmd}&quot;)

        self.add_cmd_output(&quot;docker info&quot;,
                            tags=&quot;docker_info&quot;)
        self.add_cmd_output(&quot;docker images&quot;,
                            tags=&quot;docker_images&quot;)
        self.add_cmd_output(&quot;docker ps -a&quot;,
                            tags=&quot;docker_list_containers&quot;)

        # separately grab these separately as they can take a *very* long time
        if self.get_option('size'):
            self.add_cmd_output('docker ps -as', priority=100)
            self.add_cmd_output('docker system df', priority=100)

        nets = self.collect_cmd_output('docker network ls')

        if nets['status'] == 0:
            networks = [n.split()[1] for n in nets['output'].splitlines()[1:]]
            for net in networks:
                self.add_cmd_output(f&quot;docker network inspect {net}&quot;)

        containers = [
            c[0] for c in self.get_containers(runtime='docker',
                                              get_all=self.get_option('all'))
        ]
        images = self.get_container_images(runtime='docker')
        volumes = self.get_container_volumes(runtime='docker')

        for container in containers:
            self.add_cmd_output(f&quot;docker inspect {container}&quot;,
                                subdir='containers')
            if self.get_option('logs'):
                self.add_cmd_output(f&quot;docker logs -t {container}&quot;,
                                    subdir='containers')

        for img in images:
            name, img_id = img
            insp = name if 'none' not in name else img_id
            self.add_cmd_output(f&quot;docker inspect {insp}&quot;, subdir='images',
                                tags=&quot;docker_image_inspect&quot;)
            self.add_cmd_output(
                f&quot;docker image history {insp}&quot;,
                subdir='images/history',
                tags='docker_image_tree'
            )

        for vol in volumes:
            self.add_cmd_output(f&quot;docker volume inspect {vol}&quot;,
                                subdir='volumes')

    def postproc(self):
        # Attempts to match key=value pairs inside container inspect output
        # for potentially sensitive items like env vars that contain passwords.
        # Typically, these will be seen in env elements or similar, and look
        # like this:
        #             &quot;Env&quot;: [
        #                &quot;mypassword=supersecret&quot;,
        #                &quot;container=oci&quot;
        #             ],
        # This will mask values when the variable name looks like it may be
        # something worth obfuscating.

        env_regexp = r'(?P&lt;var&gt;(pass|key|secret|PASS|KEY|SECRET).*?)=' \
                      '(?P&lt;value&gt;.*?)&quot;'
        self.do_cmd_output_sub('*inspect*', env_regexp,
                               r'\g&lt;var&gt;=********&quot;')


class RedHatDocker(Docker, RedHatPlugin):

    packages = ('docker', 'docker-latest', 'docker-io', 'docker-engine',
                'docker-ce', 'docker-ee')

    def setup(self):
        super().setup()

        self.add_copy_spec([
            &quot;/etc/udev/rules.d/80-docker.rules&quot;,
            &quot;/etc/containers/&quot;
        ])

    def postproc(self):
        super().postproc()

        # Scrub proxy details in config file
        # Example of scrubbing:
        #
        #   http_proxy=http://USER:PASSWORD@X.X.X.X:8080
        # To:
        #   http_proxy=http://******:******@X.X.X.X:8080
        #
        self.do_paths_http_sub(&quot;/etc/containers/containers.conf&quot;)


class UbuntuDocker(Docker, UbuntuPlugin, DebianPlugin):

    packages = ('docker.io', 'docker-engine', 'docker-ce', 'docker-ee')

    def setup(self):
        super().setup()
        self.add_copy_spec([
            &quot;/etc/default/docker&quot;,
            &quot;/run/docker/libcontainerd/containerd/events.log&quot;
        ])

# vim: set et ts=4 sw=4 :
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flib%2Fpython3.6%2Fsite-packages%2Fsos%2Freport%2Fplugins'>Back to Directory</a>