| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944 | import datetimeimport enumimport loggingimport operatorimport refrom functools import reducefrom os import pathfrom docker.errors import APIErrorfrom docker.errors import ImageNotFoundfrom docker.errors import NotFoundfrom docker.utils import version_ltfrom . import parallelfrom .cli.errors import UserErrorfrom .config import ConfigurationErrorfrom .config.config import V1from .config.sort_services import get_container_name_from_network_modefrom .config.sort_services import get_service_name_from_network_modefrom .const import LABEL_ONE_OFFfrom .const import LABEL_PROJECTfrom .const import LABEL_SERVICEfrom .container import Containerfrom .network import build_networksfrom .network import get_networksfrom .network import ProjectNetworksfrom .progress_stream import read_statusfrom .service import BuildActionfrom .service import ContainerNetworkModefrom .service import ContainerPidModefrom .service import ConvergenceStrategyfrom .service import NetworkModefrom .service import NoSuchImageErrorfrom .service import parse_repository_tagfrom .service import PidModefrom .service import Servicefrom .service import ServiceNetworkModefrom .service import ServicePidModefrom .utils import microseconds_from_time_nanofrom .utils import truncate_stringfrom .volume import ProjectVolumeslog = logging.getLogger(__name__)@enum.uniqueclass OneOffFilter(enum.Enum):    include = 0    exclude = 1    only = 2    @classmethod    def update_labels(cls, value, labels):        if value == cls.only:            labels.append('{0}={1}'.format(LABEL_ONE_OFF, "True"))        elif value == cls.exclude:            labels.append('{0}={1}'.format(LABEL_ONE_OFF, "False"))        elif value == cls.include:            pass        else:            raise ValueError("Invalid value for one_off: {}".format(repr(value)))class Project(object):    """    A collection of services.    """    def __init__(self, name, services, client, networks=None, volumes=None, config_version=None):        self.name = name        self.services = services        self.client = client        self.volumes = volumes or ProjectVolumes({})        self.networks = networks or ProjectNetworks({}, False)        self.config_version = config_version    def labels(self, one_off=OneOffFilter.exclude, legacy=False):        name = self.name        if legacy:            name = re.sub(r'[_-]', '', name)        labels = ['{0}={1}'.format(LABEL_PROJECT, name)]        OneOffFilter.update_labels(one_off, labels)        return labels    @classmethod    def from_config(cls, name, config_data, client, default_platform=None, extra_labels=None):        """        Construct a Project from a config.Config object.        """        extra_labels = extra_labels or []        use_networking = (config_data.version and config_data.version != V1)        networks = build_networks(name, config_data, client)        project_networks = ProjectNetworks.from_services(            config_data.services,            networks,            use_networking)        volumes = ProjectVolumes.from_config(name, config_data, client)        project = cls(name, [], client, project_networks, volumes, config_data.version)        for service_dict in config_data.services:            service_dict = dict(service_dict)            if use_networking:                service_networks = get_networks(service_dict, networks)            else:                service_networks = {}            service_dict.pop('networks', None)            links = project.get_links(service_dict)            network_mode = project.get_network_mode(                service_dict, list(service_networks.keys())            )            pid_mode = project.get_pid_mode(service_dict)            volumes_from = get_volumes_from(project, service_dict)            if config_data.version != V1:                service_dict['volumes'] = [                    volumes.namespace_spec(volume_spec)                    for volume_spec in service_dict.get('volumes', [])                ]            secrets = get_secrets(                service_dict['name'],                service_dict.pop('secrets', None) or [],                config_data.secrets)            project.services.append(                Service(                    service_dict.pop('name'),                    client=client,                    project=name,                    use_networking=use_networking,                    networks=service_networks,                    links=links,                    network_mode=network_mode,                    volumes_from=volumes_from,                    secrets=secrets,                    pid_mode=pid_mode,                    platform=service_dict.pop('platform', None),                    default_platform=default_platform,                    extra_labels=extra_labels,                    **service_dict)            )        return project    @property    def service_names(self):        return [service.name for service in self.services]    def get_service(self, name):        """        Retrieve a service by name. Raises NoSuchService        if the named service does not exist.        """        for service in self.services:            if service.name == name:                return service        raise NoSuchService(name)    def validate_service_names(self, service_names):        """        Validate that the given list of service names only contains valid        services. Raises NoSuchService if one of the names is invalid.        """        valid_names = self.service_names        for name in service_names:            if name not in valid_names:                raise NoSuchService(name)    def get_services(self, service_names=None, include_deps=False):        """        Returns a list of this project's services filtered        by the provided list of names, or all services if service_names is None        or [].        If include_deps is specified, returns a list including the dependencies for        service_names, in order of dependency.        Preserves the original order of self.services where possible,        reordering as needed to resolve dependencies.        Raises NoSuchService if any of the named services do not exist.        """        if service_names is None or len(service_names) == 0:            service_names = self.service_names        unsorted = [self.get_service(name) for name in service_names]        services = [s for s in self.services if s in unsorted]        if include_deps:            services = reduce(self._inject_deps, services, [])        uniques = []        [uniques.append(s) for s in services if s not in uniques]        return uniques    def get_services_without_duplicate(self, service_names=None, include_deps=False):        services = self.get_services(service_names, include_deps)        for service in services:            service.remove_duplicate_containers()        return services    def get_links(self, service_dict):        links = []        if 'links' in service_dict:            for link in service_dict.get('links', []):                if ':' in link:                    service_name, link_name = link.split(':', 1)                else:                    service_name, link_name = link, None                try:                    links.append((self.get_service(service_name), link_name))                except NoSuchService:                    raise ConfigurationError(                        'Service "%s" has a link to service "%s" which does not '                        'exist.' % (service_dict['name'], service_name))            del service_dict['links']        return links    def get_network_mode(self, service_dict, networks):        network_mode = service_dict.pop('network_mode', None)        if not network_mode:            if self.networks.use_networking:                return NetworkMode(networks[0]) if networks else NetworkMode('none')            return NetworkMode(None)        service_name = get_service_name_from_network_mode(network_mode)        if service_name:            return ServiceNetworkMode(self.get_service(service_name))        container_name = get_container_name_from_network_mode(network_mode)        if container_name:            try:                return ContainerNetworkMode(Container.from_id(self.client, container_name))            except APIError:                raise ConfigurationError(                    "Service '{name}' uses the network stack of container '{dep}' which "                    "does not exist.".format(name=service_dict['name'], dep=container_name))        return NetworkMode(network_mode)    def get_pid_mode(self, service_dict):        pid_mode = service_dict.pop('pid', None)        if not pid_mode:            return PidMode(None)        service_name = get_service_name_from_network_mode(pid_mode)        if service_name:            return ServicePidMode(self.get_service(service_name))        container_name = get_container_name_from_network_mode(pid_mode)        if container_name:            try:                return ContainerPidMode(Container.from_id(self.client, container_name))            except APIError:                raise ConfigurationError(                    "Service '{name}' uses the PID namespace of container '{dep}' which "                    "does not exist.".format(name=service_dict['name'], dep=container_name)                )        return PidMode(pid_mode)    def start(self, service_names=None, **options):        containers = []        def start_service(service):            service_containers = service.start(quiet=True, **options)            containers.extend(service_containers)        services = self.get_services(service_names)        def get_deps(service):            return {                (self.get_service(dep), config)                for dep, config in service.get_dependency_configs().items()            }        parallel.parallel_execute(            services,            start_service,            operator.attrgetter('name'),            'Starting',            get_deps,            fail_check=lambda obj: not obj.containers(),        )        return containers    def stop(self, service_names=None, one_off=OneOffFilter.exclude, **options):        containers = self.containers(service_names, one_off=one_off)        def get_deps(container):            # actually returning inversed dependencies            return {(other, None) for other in containers                    if container.service in                    self.get_service(other.service).get_dependency_names()}        parallel.parallel_execute(            containers,            self.build_container_operation_with_timeout_func('stop', options),            operator.attrgetter('name'),            'Stopping',            get_deps,        )    def pause(self, service_names=None, **options):        containers = self.containers(service_names)        parallel.parallel_pause(reversed(containers), options)        return containers    def unpause(self, service_names=None, **options):        containers = self.containers(service_names)        parallel.parallel_unpause(containers, options)        return containers    def kill(self, service_names=None, **options):        parallel.parallel_kill(self.containers(service_names), options)    def remove_stopped(self, service_names=None, one_off=OneOffFilter.exclude, **options):        parallel.parallel_remove(self.containers(            service_names, stopped=True, one_off=one_off        ), options)    def down(            self,            remove_image_type,            include_volumes,            remove_orphans=False,            timeout=None,            ignore_orphans=False):        self.stop(one_off=OneOffFilter.include, timeout=timeout)        if not ignore_orphans:            self.find_orphan_containers(remove_orphans)        self.remove_stopped(v=include_volumes, one_off=OneOffFilter.include)        self.networks.remove()        if include_volumes:            self.volumes.remove()        self.remove_images(remove_image_type)    def remove_images(self, remove_image_type):        for service in self.get_services():            service.remove_image(remove_image_type)    def restart(self, service_names=None, **options):        containers = self.containers(service_names, stopped=True)        parallel.parallel_execute(            containers,            self.build_container_operation_with_timeout_func('restart', options),            operator.attrgetter('name'),            'Restarting',        )        return containers    def build(self, service_names=None, no_cache=False, pull=False, force_rm=False, memory=None,              build_args=None, gzip=False, parallel_build=False, rm=True, silent=False, cli=False,              progress=None):        services = []        for service in self.get_services(service_names):            if service.can_be_built():                services.append(service)            elif not silent:                log.info('%s uses an image, skipping' % service.name)        if cli:            log.warning("Native build is an experimental feature and could change at any time")            if parallel_build:                log.warning("Flag '--parallel' is ignored when building with "                            "COMPOSE_DOCKER_CLI_BUILD=1")            if gzip:                log.warning("Flag '--compress' is ignored when building with "                            "COMPOSE_DOCKER_CLI_BUILD=1")        def build_service(service):            service.build(no_cache, pull, force_rm, memory, build_args, gzip, rm, silent, cli, progress)        if parallel_build:            _, errors = parallel.parallel_execute(                services,                build_service,                operator.attrgetter('name'),                'Building',                limit=5,            )            if len(errors):                combined_errors = '\n'.join([                    e.decode('utf-8') if isinstance(e, bytes) else e for e in errors.values()                ])                raise ProjectError(combined_errors)        else:            for service in services:                build_service(service)    def create(        self,        service_names=None,        strategy=ConvergenceStrategy.changed,        do_build=BuildAction.none,    ):        services = self.get_services_without_duplicate(service_names, include_deps=True)        for svc in services:            svc.ensure_image_exists(do_build=do_build)        plans = self._get_convergence_plans(services, strategy)        for service in services:            service.execute_convergence_plan(                plans[service.name],                detached=True,                start=False)    def _legacy_event_processor(self, service_names):        # Only for v1 files or when Compose is forced to use an older API version        def build_container_event(event, container):            time = datetime.datetime.fromtimestamp(event['time'])            time = time.replace(                microsecond=microseconds_from_time_nano(event['timeNano'])            )            return {                'time': time,                'type': 'container',                'action': event['status'],                'id': container.id,                'service': container.service,                'attributes': {                    'name': container.name,                    'image': event['from'],                },                'container': container,            }        service_names = set(service_names or self.service_names)        for event in self.client.events(            filters={'label': self.labels()},            decode=True        ):            # This is a guard against some events broadcasted by swarm that            # don't have a status field.            # See https://github.com/docker/compose/issues/3316            if 'status' not in event:                continue            try:                # this can fail if the container has been removed or if the event                # refers to an image                container = Container.from_id(self.client, event['id'])            except APIError:                continue            if container.service not in service_names:                continue            yield build_container_event(event, container)    def events(self, service_names=None):        if version_lt(self.client.api_version, '1.22'):            # New, better event API was introduced in 1.22.            return self._legacy_event_processor(service_names)        def build_container_event(event):            container_attrs = event['Actor']['Attributes']            time = datetime.datetime.fromtimestamp(event['time'])            time = time.replace(                microsecond=microseconds_from_time_nano(event['timeNano'])            )            container = None            try:                container = Container.from_id(self.client, event['id'])            except APIError:                # Container may have been removed (e.g. if this is a destroy event)                pass            return {                'time': time,                'type': 'container',                'action': event['status'],                'id': event['Actor']['ID'],                'service': container_attrs.get(LABEL_SERVICE),                'attributes': dict([                    (k, v) for k, v in container_attrs.items()                    if not k.startswith('com.docker.compose.')                ]),                'container': container,            }        def yield_loop(service_names):            for event in self.client.events(                filters={'label': self.labels()},                decode=True            ):                # TODO: support other event types                if event.get('Type') != 'container':                    continue                try:                    if event['Actor']['Attributes'][LABEL_SERVICE] not in service_names:                        continue                except KeyError:                    continue                yield build_container_event(event)        return yield_loop(set(service_names) if service_names else self.service_names)    def up(self,           service_names=None,           start_deps=True,           strategy=ConvergenceStrategy.changed,           do_build=BuildAction.none,           timeout=None,           detached=False,           remove_orphans=False,           ignore_orphans=False,           scale_override=None,           rescale=True,           start=True,           always_recreate_deps=False,           reset_container_image=False,           renew_anonymous_volumes=False,           silent=False,           cli=False,           ):        if cli:            log.warning("Native build is an experimental feature and could change at any time")        self.initialize()        if not ignore_orphans:            self.find_orphan_containers(remove_orphans)        if scale_override is None:            scale_override = {}        services = self.get_services_without_duplicate(            service_names,            include_deps=start_deps)        for svc in services:            svc.ensure_image_exists(do_build=do_build, silent=silent, cli=cli)        plans = self._get_convergence_plans(            services, strategy, always_recreate_deps=always_recreate_deps)        def do(service):            return service.execute_convergence_plan(                plans[service.name],                timeout=timeout,                detached=detached,                scale_override=scale_override.get(service.name),                rescale=rescale,                start=start,                reset_container_image=reset_container_image,                renew_anonymous_volumes=renew_anonymous_volumes,            )        def get_deps(service):            return {                (self.get_service(dep), config)                for dep, config in service.get_dependency_configs().items()            }        results, errors = parallel.parallel_execute(            services,            do,            operator.attrgetter('name'),            None,            get_deps,        )        if errors:            raise ProjectError(                'Encountered errors while bringing up the project.'            )        return [            container            for svc_containers in results            if svc_containers is not None            for container in svc_containers        ]    def initialize(self):        self.networks.initialize()        self.volumes.initialize()    def _get_convergence_plans(self, services, strategy, always_recreate_deps=False):        plans = {}        for service in services:            updated_dependencies = [                name                for name in service.get_dependency_names()                if name in plans and                plans[name].action in ('recreate', 'create')            ]            if updated_dependencies and strategy.allows_recreate:                log.debug('%s has upstream changes (%s)',                          service.name,                          ", ".join(updated_dependencies))                containers_stopped = any(                    service.containers(stopped=True, filters={'status': ['created', 'exited']}))                service_has_links = any(service.get_link_names())                container_has_links = any(c.get('HostConfig.Links') for c in service.containers())                should_recreate_for_links = service_has_links ^ container_has_links                if always_recreate_deps or containers_stopped or should_recreate_for_links:                    plan = service.convergence_plan(ConvergenceStrategy.always)                else:                    plan = service.convergence_plan(strategy)            else:                plan = service.convergence_plan(strategy)            plans[service.name] = plan        return plans    def pull(self, service_names=None, ignore_pull_failures=False, parallel_pull=False, silent=False,             include_deps=False):        services = self.get_services(service_names, include_deps)        if parallel_pull:            self.parallel_pull(services, silent=silent)        else:            must_build = []            for service in services:                try:                    service.pull(ignore_pull_failures, silent=silent)                except (ImageNotFound, NotFound):                    if service.can_be_built():                        must_build.append(service.name)                    else:                        raise            if len(must_build):                log.warning('Some service image(s) must be built from source by running:\n'                            '    docker-compose build {}'                            .format(' '.join(must_build)))    def parallel_pull(self, services, ignore_pull_failures=False, silent=False):        msg = 'Pulling' if not silent else None        must_build = []        def pull_service(service):            strm = service.pull(ignore_pull_failures, True, stream=True)            if strm is None:  # Attempting to pull service with no `image` key is a no-op                return            try:                writer = parallel.get_stream_writer()                for event in strm:                    if 'status' not in event:                        continue                    status = read_status(event)                    writer.write(                        msg, service.name, truncate_string(status), lambda s: s                    )            except (ImageNotFound, NotFound):                if service.can_be_built():                    must_build.append(service.name)                else:                    raise        _, errors = parallel.parallel_execute(            services,            pull_service,            operator.attrgetter('name'),            msg,            limit=5,        )        if len(must_build):            log.warning('Some service image(s) must be built from source by running:\n'                        '    docker-compose build {}'                        .format(' '.join(must_build)))        if len(errors):            combined_errors = '\n'.join([                e.decode('utf-8') if isinstance(e, bytes) else e for e in errors.values()            ])            raise ProjectError(combined_errors)    def push(self, service_names=None, ignore_push_failures=False):        unique_images = set()        for service in self.get_services(service_names, include_deps=False):            # Considering <image> and <image:latest> as the same            repo, tag, sep = parse_repository_tag(service.image_name)            service_image_name = sep.join((repo, tag)) if tag else sep.join((repo, 'latest'))            if service_image_name not in unique_images:                service.push(ignore_push_failures)                unique_images.add(service_image_name)    def _labeled_containers(self, stopped=False, one_off=OneOffFilter.exclude):        ctnrs = list(filter(None, [            Container.from_ps(self.client, container)            for container in self.client.containers(                all=stopped,                filters={'label': self.labels(one_off=one_off)})])        )        if ctnrs:            return ctnrs        return list(filter(lambda c: c.has_legacy_proj_name(self.name), filter(None, [            Container.from_ps(self.client, container)            for container in self.client.containers(                all=stopped,                filters={'label': self.labels(one_off=one_off, legacy=True)})])        ))    def containers(self, service_names=None, stopped=False, one_off=OneOffFilter.exclude):        if service_names:            self.validate_service_names(service_names)        else:            service_names = self.service_names        containers = self._labeled_containers(stopped, one_off)        def matches_service_names(container):            return container.labels.get(LABEL_SERVICE) in service_names        return [c for c in containers if matches_service_names(c)]    def find_orphan_containers(self, remove_orphans):        def _find():            containers = set(self._labeled_containers() + self._labeled_containers(stopped=True))            for ctnr in containers:                service_name = ctnr.labels.get(LABEL_SERVICE)                if service_name not in self.service_names:                    yield ctnr        orphans = list(_find())        if not orphans:            return        if remove_orphans:            for ctnr in orphans:                log.info('Removing orphan container "{0}"'.format(ctnr.name))                try:                    ctnr.kill()                except APIError:                    pass                ctnr.remove(force=True)        else:            log.warning(                'Found orphan containers ({0}) for this project. If '                'you removed or renamed this service in your compose '                'file, you can run this command with the '                '--remove-orphans flag to clean it up.'.format(                    ', '.join(["{}".format(ctnr.name) for ctnr in orphans])                )            )    def _inject_deps(self, acc, service):        dep_names = service.get_dependency_names()        if len(dep_names) > 0:            dep_services = self.get_services(                service_names=list(set(dep_names)),                include_deps=True            )        else:            dep_services = []        dep_services.append(service)        return acc + dep_services    def build_container_operation_with_timeout_func(self, operation, options):        def container_operation_with_timeout(container):            _options = options.copy()            if _options.get('timeout') is None:                service = self.get_service(container.service)                _options['timeout'] = service.stop_timeout(None)            return getattr(container, operation)(**_options)        return container_operation_with_timeoutdef get_volumes_from(project, service_dict):    volumes_from = service_dict.pop('volumes_from', None)    if not volumes_from:        return []    def build_volume_from(spec):        if spec.type == 'service':            try:                return spec._replace(source=project.get_service(spec.source))            except NoSuchService:                pass        if spec.type == 'container':            try:                container = Container.from_id(project.client, spec.source)                return spec._replace(source=container)            except APIError:                pass        raise ConfigurationError(            "Service \"{}\" mounts volumes from \"{}\", which is not the name "            "of a service or container.".format(                service_dict['name'],                spec.source))    return [build_volume_from(vf) for vf in volumes_from]def get_secrets(service, service_secrets, secret_defs):    secrets = []    for secret in service_secrets:        secret_def = secret_defs.get(secret.source)        if not secret_def:            raise ConfigurationError(                "Service \"{service}\" uses an undefined secret \"{secret}\" "                .format(service=service, secret=secret.source))        if secret_def.get('external'):            log.warning("Service \"{service}\" uses secret \"{secret}\" which is external. "                        "External secrets are not available to containers created by "                        "docker-compose.".format(service=service, secret=secret.source))            continue        if secret.uid or secret.gid or secret.mode:            log.warning(                "Service \"{service}\" uses secret \"{secret}\" with uid, "                "gid, or mode. These fields are not supported by this "                "implementation of the Compose file".format(                    service=service, secret=secret.source                )            )        secret_file = secret_def.get('file')        if not path.isfile(str(secret_file)):            log.warning(                "Service \"{service}\" uses an undefined secret file \"{secret_file}\", "                "the following file should be created \"{secret_file}\"".format(                    service=service, secret_file=secret_file                )            )        secrets.append({'secret': secret, 'file': secret_file})    return secretsdef get_image_digests(project):    digests = {}    needs_push = set()    needs_pull = set()    for service in project.services:        try:            digests[service.name] = get_image_digest(service)        except NeedsPush as e:            needs_push.add(e.image_name)        except NeedsPull as e:            needs_pull.add(e.service_name)    if needs_push or needs_pull:        raise MissingDigests(needs_push, needs_pull)    return digestsdef get_image_digest(service):    if 'image' not in service.options:        raise UserError(            "Service '{s.name}' doesn't define an image tag. An image name is "            "required to generate a proper image digest. Specify an image repo "            "and tag with the 'image' option.".format(s=service))    _, _, separator = parse_repository_tag(service.options['image'])    # Compose file already uses a digest, no lookup required    if separator == '@':        return service.options['image']    digest = get_digest(service)    if digest:        return digest    if 'build' not in service.options:        raise NeedsPull(service.image_name, service.name)    raise NeedsPush(service.image_name)def get_digest(service):    digest = None    try:        image = service.image()        # TODO: pick a digest based on the image tag if there are multiple        # digests        if image['RepoDigests']:            digest = image['RepoDigests'][0]    except NoSuchImageError:        try:            # Fetch the image digest from the registry            distribution = service.get_image_registry_data()            if distribution['Descriptor']['digest']:                digest = '{image_name}@{digest}'.format(                    image_name=service.image_name,                    digest=distribution['Descriptor']['digest']                )        except NoSuchImageError:            raise UserError(                "Digest not found for service '{service}'. "                "Repository does not exist or may require 'docker login'"                .format(service=service.name))    return digestclass MissingDigests(Exception):    def __init__(self, needs_push, needs_pull):        self.needs_push = needs_push        self.needs_pull = needs_pullclass NeedsPush(Exception):    def __init__(self, image_name):        self.image_name = image_nameclass NeedsPull(Exception):    def __init__(self, image_name, service_name):        self.image_name = image_name        self.service_name = service_nameclass NoSuchService(Exception):    def __init__(self, name):        if isinstance(name, bytes):            name = name.decode('utf-8')        self.name = name        self.msg = "No such service: %s" % self.name    def __str__(self):        return self.msgclass ProjectError(Exception):    def __init__(self, msg):        self.msg = msg
 |