arcbox-docker 0.4.9

Docker REST API compatibility layer for ArcBox
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

//! Catch-all proxy handler for unmatched Docker API routes.

use super::{forward, upgrade, upload};
use crate::api::AppState;
use crate::error::Result;
use crate::handlers::{ensure_role_ready, resolve_role_from_uri};
use axum::body::Body;
use axum::extract::{OriginalUri, State};
use axum::http::{Response, header};

/// Catch-all handler that proxies unmatched requests to guest dockerd.
///
/// Ensures forward compatibility with newer Docker API versions — any
/// endpoint we don't explicitly handle gets forwarded transparently. When
/// the URI carries a known container or exec ID, the request is routed to
/// that workload's utility VM role so endpoints like
/// `/containers/{id}/archive` follow the same VM as their lifecycle calls.
///
/// # Errors
///
/// Returns an error if VM readiness fails or guest proxying fails.
pub async fn proxy_fallback(
    State(state): State<AppState>,
    OriginalUri(uri): OriginalUri,
    req: axum::http::Request<Body>,
) -> Result<Response<Body>> {
    let role = resolve_role_from_uri(&state, &uri).await?;
    tracing::debug!(
        method = %req.method(),
        uri = %uri,
        utility_vm = role.as_str(),
        "proxy_fallback dispatch",
    );
    ensure_role_ready(&state, role).await?;

    // Detect upgrade requests (attach, exec, BuildKit gRPC/session).
    let wants_upgrade = req.headers().get(header::UPGRADE).is_some()
        || req
            .headers()
            .get(header::CONNECTION)
            .and_then(|v| v.to_str().ok())
            .is_some_and(|v| v.to_ascii_lowercase().contains("upgrade"));

    if wants_upgrade {
        return upgrade::proxy_with_upgrade_for_role(state.connector.as_ref(), role, req, &uri)
            .await;
    }

    if upload::is_streaming_upload_request(req.method(), &uri) {
        return upload::proxy_streaming_upload_for_role(state.connector.as_ref(), role, &uri, req)
            .await;
    }

    forward::proxy_to_guest_stream_for_role(state.connector.as_ref(), role, &uri, req).await
}