magicpak 1.4.0

Build minimal docker images without static linking
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

use std::cell::RefCell;
use std::ffi::{OsStr, OsString};
use std::fmt::Debug;
use std::io::Write;
use std::path::PathBuf;
use std::process::{Command, Stdio};
use std::rc::Rc;

use crate::base::log::{log_output, CommandLogExt};
use crate::base::trace::{ChildTraceExt, CommandTraceExt, SyscallHandler};
use crate::base::{Error, Result};
use crate::domain::{Bundle, Executable};

pub fn bundle_dynamic_dependencies<I, S, T>(
    bundle: &mut Bundle,
    exe: &Executable,
    args: I,
    stdin: Option<T>,
) -> Result<()>
where
    I: IntoIterator<Item = S> + Debug,
    S: AsRef<OsStr>,
    T: AsRef<str>,
{
    tracing::info!(
        exe = %exe.path().display(),
        args = ?args,
        stdin = ?stdin.as_ref().map(AsRef::as_ref),
        "action: bundle dynamically analyzed dependencies",
    );

    let mut child = Command::new(exe.path())
        .args(args)
        .stdin(Stdio::piped())
        .stdout(Stdio::piped())
        .stderr(Stdio::piped())
        .traceme()
        .spawn_with_log()?;

    if let Some(content) = stdin {
        // unwrap is ok here because stdin is surely piped
        write!(child.stdin.take().unwrap(), "{}", content.as_ref())?;
    }

    let bundle_ref = Rc::new(RefCell::new(bundle));

    let output = child.trace_syscalls(SyscallHandler {
        open: |pathname, _| open_handler(&bundle_ref, "open", pathname),
        openat: |_, pathname, _| open_handler(&bundle_ref, "openat", pathname),
    })?;
    log_output("<dynamic analysis command>", &output);

    if !output.status.success() {
        return Err(Error::DynamicFailed(output.status));
    }

    Ok(())
}

fn open_handler(bundle: &Rc<RefCell<&mut Bundle>>, name: &str, pathname: OsString) {
    let path: PathBuf = pathname.into();

    tracing::debug!(
        syscall = %name,
        open_path = %path.display(),
        "action: bundle_dynamic_dependencies: open syscall",
    );

    if path.is_file() {
        tracing::info!(
            path = %path.display(),
            "action: bundle_dynamic_dependencies: found path",
        );

        bundle.borrow_mut().add(path);
    }
}