使用匿名管道优化Docker参数传递
本文介绍如何通过匿名管道优化自定义Docker的参数传递机制，提升命令行参数处理能力。
开发环境配置如下：
root@docker:~# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04.2 LTS Release: 20.04 Codename: focal root@docker:~# uname -r 5.4.0-74-generic
1. 当前传参方式的问题
原实现直接将参数附加在`init`命令后：
cmd := exec.Command("/proc/self/exe", "init", args)
这种方式在处理长字符串或特殊字符时可能失效。
2. 匿名管道简介
匿名管道是一种进程间通信机制，具有以下特点： - 单向数据流 - 内置缓冲区（通常为4KB） - 支持阻塞读写 示例代码：readEnd, writeEnd, err := os.Pipe()
3. 实现细节
FD传递
父进程创建管道并传递给子进程：
func createParentProc(tty bool) (*exec.Cmd, *os.File) {
readPipe, writePipe, err := os.Pipe()
if err != nil {
log.Errorf("Error creating pipe: %v", err)
return nil, nil
}
cmd := exec.Command("/proc/self/exe", "start")
cmd.SysProcAttr = &syscall.SysProcAttr{
Cloneflags: syscall.CLONE_NEWUTS | syscall.CLONE_NEWPID,
}
if tty {
cmd.Stdin = os.Stdin
cmd.Stdout = os.Stdout
cmd.Stderr = os.Stderr
}
cmd.ExtraFiles = []*os.File{readPipe}
return cmd, writePipe
}
数据读写
父进程写入数据：
func executeCommand(tty bool, cmds []string) {
parentProc, writer := createParentProc(tty)
if parentProc == nil {
log.Errorf("Failed to create parent process")
return
}
if err := parentProc.Start(); err != nil {
log.Errorf("Failed to start parent process: %v", err)
}
sendCmd(cmds, writer)
parentProc.Wait()
}
func sendCmd(cmdArray []string, writer *os.File) {
commandStr := strings.Join(cmdArray, " ")
_, _ = writer.WriteString(commandStr)
writer.Close()
}
子进程读取数据：
const readFdIndex = 3
func fetchCmd() []string {
pipe := os.NewFile(uintptr(readFdIndex), "pipe")
data, err := io.ReadAll(pipe)
if err != nil {
log.Errorf("Error reading from pipe: %v", err)
return nil
}
return strings.Split(string(data), " ")
}
4. 测试案例
交互式命令测试：
root@docker:~/mydocker# go build .
root@docker:~/mydocker# ./mydocker run -it /bin/sh
{"level":"info","msg":"Starting init...","time":"2024-01-03T14:44:35+08:00"}
{"level":"info","msg":"Executing command: /bin/sh","time":"2024-01-03T14:44:35+08:00"}
# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 09:47 pts/1 00:00:00 /bin/sh
root 5 1 0 09:47 pts/1 00:00:00 ps -ef
非交互式命令测试：
root@docker:~/mydocker# ./mydocker run -it /bin/ls
{"level":"info","msg":"Starting init...","time":"2024-01-03T14:51:48+08:00"}
{"level":"info","msg":"Executing command: /bin/ls","time":"2024-01-03T14:51:48+08:00"}
LICENSE Makefile README.md container example go.mod go.sum main.go main_command.go mydocker run.go
