From 298dd9150ec8bc92af1bc1685726e1cd98d16b49 Mon Sep 17 00:00:00 2001 From: Richard Qin Date: Thu, 29 Oct 2026 02:12:35 +0800 Subject: Add configurable host directory bind mounts for container entry and command execution. Signed-off-by: Richard Qin --- debian-container/lib/binds.sh | 64 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 64 insertions(+) create mode 100644 debian-container/lib/binds.sh (limited to 'debian-container/lib/binds.sh') diff --git a/debian-container/lib/binds.sh b/debian-container/lib/binds.sh new file mode 100644 index 0000000..7725bd8 --- /dev/null +++ b/debian-container/lib/binds.sh @@ -0,0 +1,64 @@ +#!/usr/bin/env bash +# SPDX-License-Identifier: GPL-3.0-or-later +# Copyright (C) 2026 by Richard Qin + +DC_BIND_SPECS=() +DC_BIND_SOURCES=() +DC_BIND_TARGETS=() +DC_BIND_MODES=() + +dc_bind_add() { + local spec=$1 + local source + local target + local mode + local extra + + IFS=: read -r source target mode extra <<< "$spec" + [[ -n "$source" && -n "$target" && -z "$extra" ]] || dc_die "挂载参数格式无效:$spec" + [[ "$source" = /* && "$target" = /* ]] || dc_die "挂载源和目标必须使用绝对路径:$spec" + [[ "$target" != "/" ]] || dc_die '不能把目录挂载到容器根目录。' + + mode=${mode:-rw} + [[ "$mode" == rw || "$mode" == ro ]] || dc_die "挂载模式无效:$mode" + source=$(readlink -f -- "$source") + [[ -d "$source" ]] || dc_die "挂载源不是目录:$source" + target=$(readlink -m -- "$target") + [[ "$target" != "/" ]] || dc_die '不能把目录挂载到容器根目录。' + + DC_BIND_SPECS+=("$source:$target:$mode") + DC_BIND_SOURCES+=("$source") + DC_BIND_TARGETS+=("$target") + DC_BIND_MODES+=("$mode") +} + +dc_bind_load_options() { + while (($# > 0)); do + [[ "$1" == --mount ]] || dc_die '挂载参数格式无效。' + (($# >= 2)) || dc_die '--mount 需要一个挂载参数。' + dc_bind_add "$2" + shift 2 + done +} + +dc_bind_mount_all() { + local index + local target + + for index in "${!DC_BIND_SPECS[@]}"; do + target="$DC_ROOT${DC_BIND_TARGETS[index]}" + mkdir -p "$target" + mount --bind "${DC_BIND_SOURCES[index]}" "$target" + if [[ "${DC_BIND_MODES[index]}" == ro ]]; then + mount -o remount,bind,ro "$target" + fi + done +} + +dc_bind_cleanup() { + local index + + for ((index = ${#DC_BIND_TARGETS[@]} - 1; index >= 0; index--)); do + umount "$DC_ROOT${DC_BIND_TARGETS[index]}" 2>/dev/null || true + done +} -- cgit v1.2.3