Skip to content

Commit

Permalink
plugin: drop explicit unlink
Browse files Browse the repository at this point in the history
Go's `net` package [will unlink][1] for us, as long as we used listen to
create the Unix socket.

Go will even skip the unlink when the socket appears to be abstract
(start with a NUL, represented by an @), though we must be cautious to
only create sockets with an abstract address on platforms that actually
support it -- this caused [several][2] [bugs][3] before.

  [1]: https://pkg.go.dev/net#UnixListener.SetUnlinkOnClose
  [2]: docker#4783
  [3]: docker#4863

Signed-off-by: Bjorn Neergaard <bjorn.neergaard@docker.com>
  • Loading branch information
neersighted committed Mar 22, 2024
1 parent 9aae5e4 commit 1860e95
Show file tree
Hide file tree
Showing 3 changed files with 12 additions and 34 deletions.
8 changes: 4 additions & 4 deletions cli-plugins/socket/socket.go
Expand Up @@ -19,7 +19,10 @@ const EnvKey = "DOCKER_CLI_PLUGIN_SOCKET"
// NewPluginServer creates a plugin server that listens on a new Unix domain
// socket. h is called for each new connection to the socket in a goroutine.
func NewPluginServer(h func(net.Conn)) (*PluginServer, error) {
l, err := listen("docker_cli_" + randomID())
l, err := net.ListenUnix("unix", &net.UnixAddr{
Name: socketName("docker_cli_" + randomID()),
Net: "unix",
})
if err != nil {
return nil, err
}
Expand Down Expand Up @@ -85,9 +88,6 @@ func (pl *PluginServer) Addr() net.Addr {
//
// The error value is that of the underlying [net.Listner.Close] call.
func (pl *PluginServer) Close() error {
// Remove the listener socket, if it exists on the filesystem.
unlink(pl.l)

// Close connections first to ensure the connections get io.EOF instead
// of a connection reset.
pl.closeAllConns()
Expand Down
19 changes: 4 additions & 15 deletions cli-plugins/socket/socket_abstract.go
Expand Up @@ -2,19 +2,8 @@

package socket

import (
"net"
)

func listen(socketname string) (*net.UnixListener, error) {
// Create an abstract socket -- this socket can be opened by name, but is
// not present in the filesystem.
return net.ListenUnix("unix", &net.UnixAddr{
Name: "@" + socketname,
Net: "unix",
})
}

func unlink(listener *net.UnixListener) {
// Do nothing; the socket is not present in the filesystem.
func socketName(basename string) string {
// Address of an abstract socket -- this socket can be opened by name,
// but is not present in the filesystem.
return "@" + basename
}
19 changes: 4 additions & 15 deletions cli-plugins/socket/socket_noabstract.go
Expand Up @@ -3,23 +3,12 @@
package socket

import (
"net"
"os"
"path/filepath"
"syscall"
)

func listen(socketname string) (*net.UnixListener, error) {
// Because abstract sockets are unavailable, we create a socket in the
// system temporary directory instead.
return net.ListenUnix("unix", &net.UnixAddr{
Name: filepath.Join(os.TempDir(), socketname),
Net: "unix",
})
}

func unlink(listener *net.UnixListener) {
// unlink(2) is best effort here; if it fails, we may 'leak' a socket
// into the filesystem, but this is unlikely and overall harmless.
_ = syscall.Unlink(listener.Addr().String())
func socketName(basename string) string {
// Because abstract sockets are unavailable, use a socket path in the
// system temporary directory.
return filepath.Join(os.TempDir(), basename)
}

0 comments on commit 1860e95

Please sign in to comment.