dotcloud/docker

package container // import "github.com/docker/docker/daemon/cluster/executor/container"

import (
    "errors"
    "fmt"
    "path/filepath"

    "github.com/moby/swarmkit/v2/api"
)

func validateMounts(mounts []api.Mount) error {
    for _, mount := range mounts {
        // Target must always be absolute
        // except if target is Windows named pipe
        if !filepath.IsAbs(mount.Target) && mount.Type != api.MountTypeNamedPipe {
            return fmt.Errorf("invalid mount target, must be an absolute path: %s", mount.Target)
        }

        switch mount.Type {
        // The checks on abs paths are required due to the container API confusing
        // volume mounts as bind mounts when the source is absolute (and vice-versa)
        // See #25253
        // TODO: This is probably not necessary once #22373 is merged
        case api.MountTypeBind:
            if !filepath.IsAbs(mount.Source) {
                return fmt.Errorf("invalid bind mount source, must be an absolute path: %s", mount.Source)
            }
        case api.MountTypeVolume:
            if filepath.IsAbs(mount.Source) {
                return fmt.Errorf("invalid volume mount source, must not be an absolute path: %s", mount.Source)
            }
        case api.MountTypeTmpfs:
            if mount.Source != "" {
                return errors.New("invalid tmpfs source, source must be empty")
            }
        case api.MountTypeNamedPipe:
            if mount.Source == "" {
                return errors.New("invalid npipe source, source must not be empty")
            }
        case api.MountTypeCluster:
            // nothing to do here.
        default:
            return fmt.Errorf("invalid mount type: %s", mount.Type)
        }
    }
    return nil
}