hook

var ACLHook = Hook{
	Name:     "acl",
	Priority: 0,
	RunPostRun: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo, containerID string) error {

		network := taskInfo.GetContainer().GetDocker().GetNetwork()
		if network != mesos.ContainerInfo_DockerInfo_BRIDGE && network != mesos.ContainerInfo_DockerInfo_USER {
			logger.GetInstance().Warn("ACL hook can't inject iptables rules if network mode is not bridge or user")

			return nil
		}

		driver, err := iptables.New()
		if err != nil {
			return err
		}

		chain, err := checkChain(driver)
		if err != nil {
			return err
		}

		return generateACL(taskInfo, chain, driver.Append, true)

	},
	RunPreStop: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo, containerID string) error {

		network := taskInfo.GetContainer().GetDocker().GetNetwork()
		if network != mesos.ContainerInfo_DockerInfo_BRIDGE && network != mesos.ContainerInfo_DockerInfo_USER {
			logger.GetInstance().Warn("ACL hook does not need to remove iptables rules if network mode is not bridge or user")

			return nil
		}

		driver, err := iptables.New()
		if err != nil {
			return err
		}

		chain, err := checkChain(driver)
		if err != nil {
			return err
		}

		return generateACL(taskInfo, chain, driver.Delete, false)

	},
}

var IptablesHook = Hook{
	Name:     "iptables",
	Priority: 0,
	RunPostRun: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo, containerID string) error {

		network := taskInfo.GetContainer().GetDocker().GetNetwork()
		if network != mesos.ContainerInfo_DockerInfo_BRIDGE && network != mesos.ContainerInfo_DockerInfo_USER {
			logger.GetInstance().Warn("Iptables hook can't inject iptables rules if network mode is not bridge or user")

			return nil
		}

		logger.GetInstance().Debug(fmt.Sprintf("Inserting iptables on host namespace for container %s", containerID))

		driver, err := iptables.New()
		if err != nil {
			return err
		}

		portMappings := taskInfo.GetContainer().GetDocker().GetPortMappings()

		containerInterface := viper.GetString("iptables.container_bridge_interface")
		if containerInterface == "" {
			return fmt.Errorf("could not retrieve container brigde interface")
		}

		containerIPs, err := c.ContainerGetIPsByInterface(containerID, containerInterface)
		if err != nil {
			return err
		}
		iptablesHookContainerIPCache.Store(containerID, containerIPs)

		return generateIptables(containerIPs, portMappings, containerInterface, driver, driver.Append, true)
	},
	RunPreStop: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo, containerID string) error {

		network := taskInfo.GetContainer().GetDocker().GetNetwork()
		if network == mesos.ContainerInfo_DockerInfo_NONE || network == mesos.ContainerInfo_DockerInfo_HOST {
			logger.GetInstance().Warn("Iptables hook does not need to remove iptables rules if network mode is not bridged")

			return nil
		}

		logger.GetInstance().Debug(fmt.Sprintf("Removing iptables on host namespace for container %s", containerID))

		driver, err := iptables.New()
		if err != nil {
			return err
		}

		portMappings := taskInfo.GetContainer().GetDocker().GetPortMappings()

		ipsCacheValue, ok := iptablesHookContainerIPCache.Load(containerID)
		if !ok {
			return fmt.Errorf(
				"could not find ip in cache for container %s",
				containerID,
			)
		}

		containerIPs, ok := ipsCacheValue.([]net.IP)
		if !ok {
			return fmt.Errorf(
				"could not load ip from cache for container %s",
				containerID,
			)
		}

		containerInterface := viper.GetString("iptables.container_bridge_interface")
		if containerInterface == "" {
			return fmt.Errorf("could not retrieve container brigde interface")
		}

		return generateIptables(containerIPs, portMappings, containerInterface, driver, driver.Delete, false)
	},
}

var NetnsHook = Hook{
	Name:     "netns",
	Priority: 0,
	RunPostRun: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo, containerID string) error {

		pid, err := c.ContainerGetPID(containerID)
		if err != nil {
			return err
		}
		netnsHookContainerPID = pid

		if err = os.Mkdir(viper.GetString("netns.path"), 0700); err != nil && !os.IsExist(err) {
			return err
		}

		nspath := fmt.Sprintf("%s/%d/ns/net", viper.GetString("proc_path"), netnsHookContainerPID)
		netnsHookSymlinkPath = fmt.Sprintf("%s/%s", viper.GetString("netns.path"), taskInfo.TaskID.GetValue())

		return os.Symlink(nspath, netnsHookSymlinkPath)
	},
	RunPostStop: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo, containerID string) error {
		return os.Remove(netnsHookSymlinkPath)
	},
}

var NetworkHook = Hook{
	Name:     "network",
	Priority: 0,
	RunPreCreate: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo) error {

		frameworkName := frameworkInfo.GetName()

		taskInfo.Container.Docker.Network = mesos.ContainerInfo_DockerInfo_USER.Enum()

		taskInfo.Container.NetworkInfos = []mesos.NetworkInfo{
			mesos.NetworkInfo{
				Name: &frameworkName,
			},
		}

		return nil
	},
}

var RemoveContainerHook = Hook{
	Name:     "removeContainer",
	Priority: 0,
	RunPostStop: func(c container.Containerizer, taskInfo *mesos.TaskInfo, frameworkInfo *mesos.FrameworkInfo, containerID string) error {
		logger.GetInstance().Info("Removing container",
			zap.String("containerID", containerID),
		)

		return c.ContainerRemove(containerID)
	},
}