<?php

declare(strict_types=1);

namespace Docker;

use Amp\Artax\Client;

use Amp\Artax\DefaultClient;

use Amp\Artax\HttpSocketPool;

use Amp\Artax\Request;

use Amp\CancellationToken;

use Amp\Promise;

use Amp\Socket\BasicSocketPool;

use Amp\Socket\Certificate;

use Amp\Socket\ClientTlsContext;

use Amp\Socket\StaticSocketPool;

use Symfony\Component\OptionsResolver\OptionsResolver;

class DockerAsyncClient implements Client

{

private $client;

public function __construct(array $options = [])

{

$options = $this->resolveOptions($options);

$socketPool = new HttpSocketPool(new StaticSocketPool($options['remote_socket'], new BasicSocketPool()));

$this->client = new DefaultClient(null, $socketPool, $options['ssl']);

}

public function request($uriOrRequest, array $options = [], CancellationToken $cancellation = null): Promise

{

if ($uriOrRequest instanceof Request) {

$uriOrRequest = $uriOrRequest->withUri('http://localhost'.$uriOrRequest->getUri());

}

return $this->client->request($uriOrRequest, $options, $cancellation);

}

protected function resolveOptions(array $options = []): array

{

$resolver = new OptionsResolver();

$resolver->setDefaults([

'ssl' => null,

]);

$resolver->setRequired([

'remote_socket',

]);

$resolver->setAllowedTypes('ssl', ['null', ClientTlsContext::class]);

return $resolver->resolve($options);

}

public static function createFromEnv(): self

{

$options = [

'remote_socket' => \getenv('DOCKER_HOST') ? \getenv('DOCKER_HOST') : 'unix:///var/run/docker.sock',

];

if (\getenv('DOCKER_TLS_VERIFY') && '1' === \getenv('DOCKER_TLS_VERIFY')) {

if (!\getenv('DOCKER_CERT_PATH')) {

throw new \RuntimeException('Connection to docker has been set to use TLS, but no PATH is defined for certificate in DOCKER_CERT_PATH docker environment variable');

}

$tlsContext = new ClientTlsContext();

$cafile = \getenv('DOCKER_CERT_PATH').DIRECTORY_SEPARATOR.'ca.pem';

$certfile = \getenv('DOCKER_CERT_PATH').DIRECTORY_SEPARATOR.'cert.pem';

$keyfile = \getenv('DOCKER_CERT_PATH').DIRECTORY_SEPARATOR.'key.pem';

$certificate = new Certificate($certfile, $keyfile);

$tlsContext = $tlsContext->withCaFile($cafile);

$tlsContext = $tlsContext->withCertificate($certificate);

if (\getenv('DOCKER_PEER_NAME')) {

$tlsContext = $tlsContext->withPeerName(\getenv('DOCKER_PEER_NAME'));

}

$options['ssl'] = $tlsContext;

}

return new static($options);

}

}