aaPanel/class_v2/btdockerModelV2/containerModel.py

# coding: utf-8
# -------------------------------------------------------------------
# aaPanel
# -------------------------------------------------------------------
# Copyright (c) 2015-2099 aaPanel(www.aapanel.com) All rights reserved.
# -------------------------------------------------------------------
# Author: wzz <wzz@aapanel.com>
# -------------------------------------------------------------------
import json
import os
import traceback
import time

import crontab
import docker.errors

import gettext
_ = gettext.gettext
# ------------------------------
# Docker模型
# ------------------------------
import public
from btdockerModelV2 import dk_public as dp
from btdockerModelV2.dockerBase import dockerBase
from public.validate import Param


class main(dockerBase):

    def __init__(self):
        super().__init__()
        self.alter_table()
        if public.M('sqlite_master').db('docker_log_split').where('type=? AND name=?', ('table', 'docker_log_split')).count():
        # if public.M('sqlite_master').where('type=? AND name=?',('table', 'docker_log_split')).count():
            p = crontab.crontab()
            llist = p.GetCrontab(None)
            add_crond = True
            if type(llist) == list:
                for i in llist:
                    if i['name'] == "[Do not delete] Docker log cuts":
                        add_crond = False
                        break
                else:
                    add_crond = True

            if add_crond:
                get = {
                    "name": "[Do not delete] Docker log cuts",
                    "type": "minute-n",
                    "where1": 5,
                    "hour": "",
                    "minute": "",
                    "week": "",
                    "sType": "toShell",
                    "sName": "",
                    "backupTo": "localhost",
                    "save": '',
                    "sBody": "btpython /www/server/panel/script/dk_log_split.py",
                    "urladdress": "undefined"
                }
                p.AddCrontab(get)

    def alter_table(self):
        if not dp.sql('sqlite_master').db('container').where('type=? AND name=? AND sql LIKE ?',
                                             ('table', 'container', '%sid%')).count():
            dp.sql('container').execute("alter TABLE container add container_name VARCHAR DEFAULT ''", ())

    def docker_client(self, url):
        # unix:///var/run/docker.sock
        return dp.docker_client(url)

    def get_cmd_log(self, get):
        """
        获取命令运行容器的日志,websocket
        @param get:
        @return:
        """
        get.wsLogTitle = "Please wait to execute the command..."
        get._log_path = self._rCmd_log
        return self.get_ws_log(get)

    def run_cmd(self, get):
        """
        命令行创建运行容器(docker run),需要做危险命令校验,存在危险命令则不执行
        @param get:
        @return:
        """
        try:
            get.validate([
                Param('cmd').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        import re
        # if not hasattr(get, 'cmd'):
        #     return public.return_message(-1, 0, 'cmd parameter error')
        if "docker run" not in get.cmd:
            return public.return_message(-1, 0,  _('Only the docker run command can be executed'))

        danger_cmd = ['rm', 'rmi', 'kill', 'stop', 'pause', 'unpause', 'restart', 'update', 'exec', 'init',
                      'shutdown', 'reboot', 'chmod', 'chown', 'dd', 'fdisk', 'killall', 'mkfs', 'mkswap', 'mount',
                      'swapoff', 'swapon', 'umount', 'userdel', 'usermod', 'passwd', 'groupadd', 'groupdel',
                      'groupmod', 'chpasswd', 'chage', 'usermod', 'useradd', 'userdel', 'pkill']

        danger_symbol = ['&', '&&', '||', '|', ';']

        for d in danger_cmd:
            if get.cmd.startswith(d) or re.search(r'\s{}\s'.format(d), get.cmd):
                return public.return_message(-1, 0,  _(
                                             'Dangerous command exists: [{}],Execution is not allowed!'.format(d)))

        for d in danger_symbol:
            if d in get.cmd:
                return public.return_message(-1, 0,  _(
                                             'There are danger symbols: [{}],Execution is not allowed!'.format(d)))

        os.system("echo -n > {}".format(self._rCmd_log))
        os.system("nohup {} >> {} 2>&1 && echo 'bt_successful' >> {} || echo 'bt_failed' >> {} &".format(
            get.cmd,
            self._rCmd_log,
            self._rCmd_log,
            self._rCmd_log,
        ))

        return public.return_message(0, 0,  _("The command has been executed!"))

    # 添加容器
    def run(self, get):
        """
        :param name:容器名
        :param image: 镜像
        :param publish_all_ports 暴露所有端口 1/0
        :param ports  暴露某些端口 {'1111/tcp': ('127.0.0.1', 1111)}
        :param command 命令
        :param entrypoint  配置容器启动后执行的命令
        :param environment 环境变量 xxx=xxx 一行一条
        :param auto_remove 当容器进程退出时,在守护进程端启用自动移除容器。 0/1

        :param get:
        :return:
        """
        # {"name": "cgroupg1", "image": "nginx:1.19.6", "publish_all_ports": "0", "ports": "", "network": "",
        #  "ip_address": "", "command": "", "entrypoint": "", "auto_remove": "0", "privileged": "0",
        #  "restart_policy": {"Name": ""}, "mem_reservation": "8855MB", "cpu_quota": 6, "mem_limit": "15555MB",
        #  "labels": "", "environment": ""}

        # 校验参数
        try:
            get.validate([
                Param('name').Require().String(),
                Param('image').Require().String(),
                Param('publish_all_ports').Require().Integer(),
                Param('command').String(),
                Param('entrypoint').String(),
                Param('environment').String(),
                Param('auto_remove').String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        config_path = "{}/config/name_map.json".format(public.get_panel_path())
        if not os.path.exists(config_path):
            public.writeFile(config_path, json.dumps({}))

        if public.readFile(config_path) == '':
            public.writeFile(config_path, json.dumps({}))

        # 2024/2/20 下午 3:21 如果检测到是中文的容器名,则自动转换为英文
        name_map = json.loads(public.readFile(config_path))
        import re
        if re.findall(r"[\u4e00-\u9fa5]", get.name):
            name_str = 'q18q' + public.GetRandomString(10).lower()
            name_map[name_str] = get.name
            get.name = name_str
            public.writeFile(config_path, json.dumps(name_map))

        cPorts = get.ports if "ports" in get and get.ports != "" else False
        nPorts = {}
        if not cPorts is False:
            if ":" in cPorts.keys():
                return public.return_message(-1, 0,  _( "The port format is wrong, this method is not supported!"))
            if "-" in cPorts.keys():
                return public.return_message(-1, 0,  _( "The port format is wrong, this method is not supported!"))

            for i in cPorts.keys():
                if cPorts[i] == "": continue
                if dp.check_socket(cPorts[i]):
                    return public.return_message(-1, 0,  _(
                                                 "Server port [{}] is occupied, please change to another port!".format(
                                                     cPorts[i])))

                if "tcp/udp" in i:
                    cPort = i.split('/')[0]
                    nPorts[str(cPort) + "/tcp"] = cPorts[i]
                    nPorts[str(cPort) + "/udp"] = cPorts[i]
                else:
                    nPorts[i] = cPorts[i]
            del cPorts

        if "image" not in get or not get.image:
            return public.return_message(-1, 0,  _(
                                         "Please pull the image you need"))

        if get.image == "<none>" or "<none>" in get.image:
            return public.return_message(-1, 0,  _(
                                         "The image does not exist!"))

        mem_limit = get.mem_limit if "mem_limit" in get and get.mem_limit != "0" else None
        if not mem_limit is None:
            mem_limit_byte = dp.byte_conversion(get.mem_limit)
            if mem_limit_byte > dp.get_mem_info():
                return public.return_message(-1, 0,  _( "The memory quota has exceeded the available amount!"))
            if mem_limit_byte < 6291456:
                return public.return_message(-1, 0,  _( "The memory quota cannot be less than 6MB!"))

        try:
            if "force_pull" in get and get.force_pull == "0":
                self.docker_client(self._url).images.get(get.image)
        except docker.errors.ImageNotFound as e:
            return public.return_message(-1, 0,  _(
                                         "Image [{}] does not exist, You can try [Forced Pull]!".format(
                                             get.image)))
        except docker.errors.APIError as e:
            return public.return_message(-1, 0,  _(
                                         "Image [{}] does not exist, You can try [Forced Pull]!".format(
                                             get.image)))

        # 2024/4/16 上午11:40 检查镜像是否存在并且处理镜像如果是非应用容器的情况
        try:
            from btdockerModelV2.dockerSock import image
            sk_image = image.dockerImage()
            image_inspect = sk_image.inspect(get.image)
            if type(image_inspect) != dict:
                return public.return_message(-1, 0,  _( "Image [{}] does not exist!".format(get.image)))

            if "Config" in image_inspect and "Cmd" in image_inspect["Config"]:
                sh_list = ("bash", "sh", "dash", "/bin/sh", "/bin/bash", "/bin/dash")
                if len(image_inspect["Config"]["Cmd"]) == 1 and image_inspect["Config"]["Cmd"][0] in sh_list:
                    get.tty = "1"
                    get.stdin_open = "1"
        except Exception as e:
            pass

        cpu_quota = get.cpu_quota if "cpu_quota" in get and get.cpu_quota != "0" else 0
        if int(cpu_quota) != 0:
            cpu_quota = float(get.cpu_quota) * 100000

            if int(cpu_quota) / 100000 > dp.get_cpu_count():
                return public.return_message(-1, 0,  _( "cpu quota has exceeded available cores!"))

        df_restart_policy = {"Name": "unless-stopped", "MaximumRetryCount": 0}
        restart_policy = get.restart_policy if "restart_policy" in get and get.restart_policy else df_restart_policy
        if restart_policy['Name'] == "always":
            restart_policy = {"Name": "always"}

        mem_reservation = get.mem_reservation if "mem_reservation" in get and get.mem_reservation != "" else None
        # 2023/12/19 下午 3:08 检测如果小于6MB则报错
        if not mem_reservation is None and mem_reservation != "0":
            mem_reservation_byte = dp.byte_conversion(mem_reservation)
            if mem_reservation_byte < 6291456:
                return public.return_message(-1, 0,  _( "Memory reservation cannot be less than 6MB!"))

        network = get.network if "network" in get and get.network != "" else "bridge"
        ip_address = get.ip_address if "ip_address" in get and get.ip_address != "" else None

        try:
            res = self.docker_client(self._url).containers.run(
                name=get.name,
                image=get.image,
                detach=True,
                # cpuset_cpus=get.cpuset_cpus ,#指定容器使用的cpu个数
                tty=True if "tty" in get and get.tty == "1" else False,
                stdin_open=True if "stdin_open" in get and get.stdin_open == "1" else False,
                publish_all_ports=True if "publish_all_ports" in get and get.publish_all_ports != "0" else False,
                ports=nPorts if len(nPorts) > 0 else None,
                cpu_quota=int(cpu_quota) or 0,
                mem_reservation=mem_reservation,  # b,k,m,g
                mem_limit=mem_limit,  # b,k,m,g
                restart_policy=restart_policy,
                command=get.command if "command" in get and get.command != "" else None,
                volume_driver=get.volume_driver if "volume_driver" in get and get.volume_driver != "" else None,
                volumes=get.volumes if "volumes" in get and get.volumes != "" else None,
                auto_remove=True if "auto_remove" in get and get.auto_remove != "0" else False,
                privileged=True if "privileged" in get and get.privileged != "0" else False,
                environment=dp.set_kv(get.environment),  # "HOME=/value\nHOME11=value1"
                labels=dp.set_kv(get.labels),  # "key=value\nkey1=value1"
                network=network,
            )

        except docker.errors.APIError as e:
            if "invalid reference format" in str(e):
                return public.return_message(-1, 0,  _(
                                             "The image name format is incorrect.such as:nginx:latest"))
            if "failed to create task for container" in str(e) or "failed to create shim task" in str(e):
                return public.return_message(-1, 0,  _( "Container creation failed, details: {}!".format(str(e))))
            if "Minimum memory limit can not be less than memory reservation limit, see usage" in str(e):
                return public.return_message(-1, 0,  _( "The memory quota cannot be less than the memory reserve!"))
            if "already exists in network bridge" in str(e):
                return public.return_message(-1, 0,  _(
                                             "The container name or network bridge already exists. Please change the container name and try again!"))
            if "No command specified" in str(e):
                return public.return_message(-1, 0,  _(
                                             "There is no startup command in this image, please specify the container startup command!"))
            if "permission denied" in str(e):
                return public.return_message(-1, 0,  _( "Permission exception! Details:{}".format(str(e))))
            if "Internal Server Error" in str(e):
                return public.return_message(-1, 0,  _(
                                             "Container creation failed! Please restart the docker service at the appropriate time!"))
            if "repository does not exist or may require 'docker login'" in str(e):
                return public.return_message(-1, 0,  _(
                                             "Image [{}] does not exist!".format(
                                                 get.image)))
            if "Minimum memory reservation allowed is 6MB" in str(e):
                return public.return_message(-1, 0,  _( "Memory reservation cannot be less than 6MB!"))
            if "container to be able to reuse that name." in str(e):
                return public.return_message(-1, 0,  _( "Container name already exists!"))
            if "Invalid container name" in str(e):
                return public.return_message(-1, 0,  _( "The container name is invalid"))
            if "bind: address already in use" in str(e):
                port = ""
                for i in get.ports:
                    if ":{}:".format(get.ports[i]) in str(e):
                        port = get.ports[i]
                get.id = get.name
                self.del_container(get)
                return public.return_message(-1, 0,  _( "Server port {} in use! Change the other port".format(port)))
            return public.return_message(-1, 0,  _( 'Creation failure! {}'.format(public.get_error_info())))
        except Exception as a:
            public.print_log(traceback.format_exc())
            self.del_container(get)
            if "Read timed out" in str(a):
                return public.return_message(-1, 0,  _(
                                             "The container creation failed and the connection to docker timed out!"))
            return public.return_message(-1, 0,  _( 'Container failed to run! {}'.format(str(a))))

        if res:
            # print(res.status)
            # print(res.id)
            # dk_config = self.docker_client(self._url).containers.get(res.id)
            # print(dk_config.attrs['NetworkSettings']['Networks'][network]['IPAddress'])
            # 将容器的ip改成用户指定的ip
            pdata = {
                "cpu_limit": str(get.cpu_quota),
                "container_name": get.name
            }
            dp.sql('container').insert(pdata)
            public.set_module_logs('docker', 'run_container', 1)
            dp.write_log("Container creation [{}] successful!".format(get.name))

            # 2024/2/26 下午 6:00 添加备注
            self.check_remark_table()
            dp.sql('dk_container_remark').insert({
                "container_id": res.id,
                "container_name": get.name,
                "remark": public.xssencode2(get.remark),
                "addtime": int(time.time())
            })

            if not ip_address is None:
                try:
                    self.docker_client(self._url).networks.get(network).disconnect(res.id)
                    self.docker_client(self._url).networks.get(network).connect(res.id, ipv4_address=ip_address)
                    # dk_config = self.docker_client(self._url).containers.get(res.id)
                    # print(dk_config.attrs['NetworkSettings']['Networks'][network]['IPAddress'])
                    # logs = res.logs(stdout=True, stderr=True)
                    # print(logs.decode())
                except docker.errors.APIError as e:
                    if "Invalid IPv4 address" in str(e):
                        return public.return_message(0, 0,  _(
                                                     "Created successfully, but the IP [{}] is illegal and the IP has been automatically assigned.".format(
                                                         ip_address)))

            # 返回包含容器的id和name
            return public.return_message(0, 0, {
                "status": True,
                "result": "Successfully created!",
                "id": res.id,
                "name": dp.rename(res.name),
            })

            # return public.returnMsg(True, "容器创建成功!")
        return public.return_message(-1, 0,  _( 'Creation failure!'))

    def upgrade_container(self, get):
        """
        更新正在运行的容器镜像（重建）
        @param get:
        @return:
        """
        try:
            if "id" not in get:
                return public.return_message(-1, 0,  _( "Container ID is abnormal"))

            container = self.docker_client(self._url).containers.get(get.id)

            old_container_config = self.save_container_config(container)
            new_image = get.new_image if "new_image" in get and get.new_image else "latest"
            if new_image is None:
                return public.return_message(-1, 0,  _( "The new image name cannot be empty!"))

            if "upgrade" in get and get.upgrade == "1":
                get.new_image = "{}:{}".format(old_container_config["image"].split(':')[0], new_image)

            try:
                if "force_pull" in get and get.force_pull == "1":
                    public.ExecShell("docker pull {}".format(get.new_image))
            except docker.errors.ImageNotFound as e:
                return public.return_message(-1, 0,  _( "The mirror does not exist!"))
            except docker.errors.APIError as e:
                return public.return_message(-1, 0, "The mirror does not exist!")
            # except Exception as e:
            #     public.print_log(traceback.format_exc())
            #     return public.return_message(-1, 0, e)


            get.old_container_config = old_container_config
            new_container_config = self.structure_new_container_conf(get)
            if type(new_container_config) != dict:
                return public.return_message(-1, 0,  _( new_container_config['msg']))

            container.stop()
            container.remove()

            try:
                new_container = self.docker_client(self._url).containers.create(
                    name=new_container_config["name"],
                    image=new_container_config["image"],
                    detach=new_container_config["detach"],
                    cpu_quota=new_container_config["cpu_quota"],
                    mem_limit=new_container_config["mem_limit"],
                    tty=new_container_config["tty"],
                    stdin_open=new_container_config["stdin_open"],
                    publish_all_ports=new_container_config["publish_all_ports"],
                    ports=new_container_config["ports"],
                    command=new_container_config["command"],
                    entrypoint=new_container_config["entrypoint"],
                    environment=new_container_config["environment"],
                    labels=new_container_config["labels"],
                    auto_remove=new_container_config["auto_remove"],
                    privileged=new_container_config["privileged"],
                    volumes=new_container_config["volumes"],
                    volume_driver=new_container_config["volume_driver"],
                    mem_reservation=new_container_config["mem_reservation"],
                    restart_policy=new_container_config["restart_policy"],
                    network=new_container_config["network"],
                )
            except Exception as e:
                public.print_log(traceback.format_exc())
                public.print_log("修改 创建新容器报错--")

                if "Read timed out" in str(e):
                    return public.return_message(-1, 0,  _(
                                                 "Container editing failed and the connection to docker timed out."))
                # print(traceback.format_exc())
                return public.return_message(-1, 0,  _( "Update failed!{}".format(str(e))))

            new_container.start()
            if not "upgrade" in get or get.upgrade != "1":
                new_ip_address = get.new_ip_address if "new_ip_address" in get and get.new_ip_address else \
                    old_container_config["ip_address"]
                new_network = get.new_network if "new_network" in get and get.new_network else \
                    old_container_config["network"]

                if new_network != "bridge":
                    try:
                        self.docker_client(self._url).networks.get(new_network).disconnect(new_container.id)
                        self.docker_client(self._url).networks.get(new_network).connect(
                            new_container.id, ipv4_address=new_ip_address
                        )

                    except docker.errors.APIError as e:
                        if ("user specified IP address is supported only when "
                            "connecting to networks with user configured subnets") in str(e):
                            self.docker_client(self._url).networks.get(new_network).connect(new_container.id)
                            return public.return_message(0, 0,  _(
                                                         "Editing successful, [{}] has not specified a subnet, and the IP has been automatically assigned!"
                                                         .format(str(new_network))))

                    except Exception as e:
                        public.print_log(traceback.format_exc())
                        self.docker_client(self._url).networks.get(new_network).connect(new_container.id)
                        print(traceback.format_exc())
                        return public.return_message(0, 0,  _(
                                                     "Editing successful, network [{}] setting failed, IP has been automatically assigned to you, error details: {}!"
                                                     .format(new_network, str(e))))

            return public.return_message(0, 0, _("Update successfully!"))
        except docker.errors.NotFound as e:
            if "No such container" in str(e):
                return public.return_message(-1, 0, _("Container does not exist!"))
            return public.return_message(-1, 0, _("Update failed!{}".format(str(e))))
        except docker.errors.APIError as e:
            if "No such container" in str(e):
                return public.return_message(-1, 0, _("Container does not exist!"))
            return public.return_message(-1, 0, _("Update failed!{}".format(str(e))))
        except Exception as a:
            public.print_log(traceback.format_exc())
            if "Read timed out" in str(a):
                return public.return_message(-1, 0,
                                             _("Container editing failed and the connection to docker timed out."))
            return public.return_message(-1, 0, _("Update failed!{}".format(str(a))))

    def save_container_config(self, container):
        """
        保存容器的配置信息
        """
        ip_address, network = None, None
        if len(container.attrs['NetworkSettings']['Networks']) != 0:
            Networks = container.attrs['NetworkSettings']['Networks'][list(container.attrs['NetworkSettings']['Networks'].keys())[0]]
            ip_address = Networks['IPAddress']
            network = Networks['NetworkID']

        container_config = {
            "image": container.attrs['Config']['Image'],
            "name": container.attrs['Name'],
            "detach": True,
            "cpu_quota": container.attrs['HostConfig']['CpuQuota'],
            "mem_limit": container.attrs['HostConfig']['Memory'],
            "tty": container.attrs['Config']['Tty'],
            "stdin_open": container.attrs['Config']['OpenStdin'],
            "publish_all_ports": container.attrs['HostConfig']['PublishAllPorts'],
            "ports": container.attrs['NetworkSettings']['Ports'],
            "command": container.attrs['Config']['Cmd'],
            "entrypoint": container.attrs['Config']['Entrypoint'],
            "environment": container.attrs['Config']['Env'],
            "labels": container.attrs['Config']['Labels'],
            "auto_remove": container.attrs['HostConfig']['AutoRemove'],
            "privileged": container.attrs['HostConfig']['Privileged'],
            "volumes": container.attrs['HostConfig']['Binds'],
            "volume_driver": container.attrs['HostConfig']['VolumeDriver'],
            "mem_reservation": container.attrs['HostConfig']['MemoryReservation'],
            "restart_policy": container.attrs['HostConfig']['RestartPolicy'],
            "network": network,
            "ip_address": ip_address,
        }
        return container_config

    def structure_new_container_conf(self, get):
        """
        构造新的容器配置
        @param get:
        @return:
        """
        new_image = get.new_image if hasattr(get, "new_image") and get.new_image else get.old_container_config["image"]
        new_name = get.new_name if hasattr(get, "new_name") and get.new_name else get.old_container_config["name"].replace("/", "")
        new_cpu_quota = get.new_cpu_quota if hasattr(get, "new_cpu_quota") and get.new_cpu_quota != 0 else get.old_container_config["cpu_quota"]
        if int(new_cpu_quota) != 0:
            new_cpu_quota = float(new_cpu_quota) * 100000

            if int(new_cpu_quota) / 100000 > dp.get_cpu_count():
                return public.returnMsg(False, _( "cpu quota has exceeded available cores!"))

        new_mem_limit = get.new_mem_limit if hasattr(get, "new_mem_limit") and get.new_mem_limit else get.old_container_config["mem_limit"]
        new_tty = get.new_tty if hasattr(get, "new_tty") and get.new_tty else get.old_container_config["tty"]
        new_stdin_open = get.new_stdin_open if hasattr(get, "new_stdin_open") and get.new_stdin_open else get.old_container_config["stdin_open"]
        new_publish_all_ports = get.new_publish_all_ports if hasattr(get, "new_publish_all_ports") and get.new_publish_all_ports != '0' else get.old_container_config["publish_all_ports"]
        new_ports = get.new_ports if hasattr(get, "new_ports") and get.new_ports else get.old_container_config["ports"]
        new_command = get.new_command if hasattr(get, "new_command") else get.old_container_config["command"]
        new_entrypoint = get.new_entrypoint if hasattr(get, "new_entrypoint") else get.old_container_config["entrypoint"]
        new_environment = get.new_environment if hasattr(get, "new_environment") and get.new_environment != '' else get.old_container_config["environment"]
        new_labels = get.new_labels if hasattr(get, "new_labels") and get.new_labels != '' else get.old_container_config["labels"]
        new_auto_remove = True if hasattr(get, "new_auto_remove") and get.new_auto_remove != '0' else get.old_container_config["auto_remove"]
        new_privileged = True if hasattr(get, "new_privileged") and get.new_privileged != '0' else get.old_container_config["privileged"]
        new_volumes = get.new_volumes if hasattr(get, "new_volumes") and get.new_volumes else get.old_container_config["volumes"]
        new_volume_driver = get.new_volume_driver if hasattr(get, "new_volume_driver") and get.new_volume_driver else get.old_container_config["volume_driver"]
        new_mem_reservation = get.new_mem_reservation if hasattr(get, "new_mem_reservation") and get.new_mem_reservation else get.old_container_config["mem_reservation"]
        new_restart_policy = get.new_restart_policy if hasattr(get, "new_restart_policy") and get.new_restart_policy else get.old_container_config["restart_policy"]
        new_network = get.new_network if hasattr(get, "new_network") and get.new_network else get.old_container_config["network"]

        container_config = {
            "image": new_image,
            "name": new_name,
            "detach": True,
            "cpu_quota": int(new_cpu_quota),
            "mem_limit": new_mem_limit,
            "tty": new_tty,
            "stdin_open": new_stdin_open,
            "publish_all_ports": new_publish_all_ports,
            "ports": new_ports,
            "command": new_command,
            "entrypoint": new_entrypoint,
            "environment": dp.set_kv(new_environment) if type(new_environment) != list else new_environment,
            "labels": dp.set_kv(new_labels) if type(new_labels) != dict else new_labels,
            "auto_remove": new_auto_remove,
            "privileged": new_privileged,
            "volumes": new_volumes,
            "volume_driver": new_volume_driver,
            "mem_reservation": new_mem_reservation,
            "restart_policy": new_restart_policy,
            "network": new_network,
        }
        return container_config

    def commit(self, get):
        """
        保存为镜像
        :param repository       推送到的仓库
        :param tag              镜像标签 jose:v1
        :param message          提交的信息
        :param author           镜像作者
        :param changes
        :param conf dict
        :param path 导出路径
        :param name 导出文件名
        :param get:
        :return:
        """
        try:
            if not hasattr(get, 'conf') or not get.conf:
                get.conf = None
            if get.repository == "docker.io":
                get.repository = ""

            container = self.docker_client(self._url).containers.get(get.id)
            container.commit(
                repository=get.repository if "repository" in get else None,
                tag=get.tag if "tag" in get else None,
                message=get.message if "message" in get else None,
                author=get.author if "author" in get else None,
                # changes=get.changes if get.changes else None,
                conf=get.conf
            )
            dp.write_log("Submitted container [{}] as image [{}] successfully".format(container.attrs['Name'], get.tag))

            if hasattr(get, "path") and get.path:
                get.id = "{}:{}".format(get.repository, get.tag)
                from btdockerModelV2 import imageModel as di
                result = di.main().save(get)
                if result['status']:
                    return public.return_message(0, 0,  _("The image has been generated, and{}".format(result['msg'])))
                return public.return_message(0, 0, result)

            return public.return_message(0, 0,  _("submit successfully!"))
        except Exception as e:
            return public.return_message(-1, 0,  _( "Submission Failed!{}".format(str(e))))


    def docker_shell(self, get):
        """
        容器执行命令
        :param get:
        :return:
        """
        # {"id": "b414fd6b5d5a1e36e3246dc8bb4b4518bd0adbcd62180abc0e146ccc4b8731db", "shell": "bash", "sudo_i": 1}
        try:
            get.validate([
                Param('id').Require().String(),
                Param('shell').Require().String('in', ['bash', 'sh']),
                # Param('sudo_i').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)
        try:
            # if "id" not in get:
            #     return public.returnMsg(False, "The container ID is abnormal, please refresh the page and try again!")

            # shell_list = ('bash', 'sh')
            # if "shell" not in get:
            #     return public.returnMsg(False, "Select the shell type!")

            # if get.shell not in shell_list:
            #     return public.returnMsg(False, "This shell is not supported-choose bash or sh!")

            cmd = 'docker container exec -it {} {}'.format(get.id, get.shell)
            return public.return_message(0, 0, cmd)
        except docker.errors.APIError as ex:
            return public.return_message(-1, 0, _( 'Failed to get container'))

    def export(self, get):
        """
        导出容器为tar 没有导入方法,目前弃用
        :param get:
        :return:
        """
        from os import path as ospath
        from os import makedirs as makedirs
        try:
            if "tar" in get.name:
                file_name = '{}/{}'.format(get.path, get.name)
            else:
                file_name = '{}/{}.tar'.format(get.path, get.name)
            if not ospath.exists(get.path):
                makedirs(get.path)
            public.writeFile(file_name, '')
            f = open(file_name, 'wb')
            container = self.docker_client(self._url).containers.get(get.id)
            data = container.export()
            for i in data:
                f.write(i)
            f.close()
            return public.returnMsg(True, _( "Successfully exported to:{}".format(file_name)))
        except:
            return public.returnMsg(False, _( 'operation failure:' + str(public.get_error_info())))

    def del_container(self, get):
        """
        删除指定容器
        @param get:
        @return:
        """
        # try:
        #     # 删除站点
        #     a = public.M('sites').find()
        #     b = public.M('domain').find()
        #
        #     # 删除数据库记录
        #     c = dp.sql('dk_domain').find()
        #     d = dp.sql('dk_sites').find()
        # except Exception as e:
        #     public.print_log(traceback.format_exc())
        #
        # public.print_log("a|  {}".format(a))
        # public.print_log("b|  {}".format(b))
        # public.print_log("c|  {}".format(c))
        # public.print_log("d|  {}".format(d))

        try:
            get.validate([
                Param('id').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        import sys
        sys.path.insert(0, '/www/server/panel/class')
        from btdockerModelV2.proxyModel import main
        from panelSite import panelSite
        try:
            container = self.docker_client(self._url).containers.get(get.id)
            config_path = "{}/config/name_map.json".format(public.get_panel_path())
            if not os.path.exists(config_path):
                public.writeFile(config_path, json.dumps({}))
            if public.readFile(config_path) == '':
                public.writeFile(config_path, json.dumps({}))
            config_data = json.loads(public.readFile(config_path))
            if container.name in config_data.keys():
                config_data.pop(container.name)
            public.writeFile(config_path, json.dumps(config_data))
            container.remove(force=True)
            dp.sql("cpu_stats").where("container_id=?", (get.id,)).delete()
            dp.sql("io_stats").where("container_id=?", (get.id,)).delete()
            dp.sql("mem_stats").where("container_id=?", (get.id,)).delete()
            dp.sql("net_stats").where("container_id=?", (get.id,)).delete()
            dp.sql("container").where("container_nam=?", (container.attrs['Name'])).delete()
            dp.write_log("Delete container [{}] successfully!".format(container.attrs['Name']))
            get.container_id = get.id
            # todo 此处导入注意适配  info返回已改
            info = main().get_proxy_info(get)
            if info and 'name' in info and 'id' in info:
                print(info['name'])
                print(info['id'])
                args = public.to_dict_obj({
                    'id': info['id'],
                    'webname': info['name']

                })
                panelSite().DeleteSite(args)
                # domain_id = dp.sql('dk_domain').where('id=?', (info['id'],)).find()

                # 删除站点  改默认数据库
                # dp.sql('sites').where('name=?', (info['name'],)).delete()
                # dp.sql('domain').where("name=?", (info['name'],)).delete()
                public.M('sites').where('name=?', (info['name'],)).delete()
                public.M('domain').where("name=?", (info['name'],)).delete()

                # 删除数据库记录
                dp.sql('dk_domain').where('id=?', (info['id'],)).delete()
                dp.sql('dk_sites').where('container_id=?', (get.id,)).delete()

            return public.return_message(0, 0,  _("Successfully deleted!"))
        except Exception as e:
            return public.return_message(-1, 0,  _( "Delete failed! {}".format(str(e))))

    # 设置容器状态
    def set_container_status(self, get):
        """
        设置容器状态
        @param get:
        @return:
        """
        try:
            get.validate([
                Param('id').Require().String(),
                Param('status').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        try:
            container = self.docker_client(self._url).containers.get(get.id)
            result = {"status": True, "msg": "Successfully set!"}
            if get.status == "start":
                result = self.start(get)
            elif get.status == "stop":
                result = self.stop(get)
            elif get.status == "pause":
                result = self.pause(get)
            elif get.status == "unpause":
                result = self.unpause(get)
            elif get.status == "reload":
                result = self.reload(get)
            elif get.status == "kill":
                container.kill()
            else:
                container.restart()

            try:

                if result['status']:
                    return public.return_message(0, 0,result['msg'])
                else:
                    return public.return_message(-1, 0, result['msg'])


            except:
                return public.return_message(-1, 0, str(result['msg']))
        except Exception as e:
            if "No such container" in str(e):
                return public.return_message(-1, 0,  _( "The container has been deleted!"))
            if "port is already allocated" in str(e) or "address already in use" in str(e):
                if "[::]" in str(e):
                    str_port = str(e).split("[::]:")[1].split(":")[0]
                    return public.return_message(-1, 0,  _( "ipv6 server port [{}] is occupied!".format(str_port)))
                else:
                    str_port = str(e).split("0.0.0.0")[1].split(":")[1].split(" ")[0]
                    return public.return_message(-1, 0,  _( "ipv4 server port [{}] is occupied!".format(str_port)))
            return public.return_message(-1, 0,  _( "Setup failed! {}".format(str(e))))

    # 停止容器
    def stop(self, get):
        """
        停止指定容器  (内部调用)
        :param get:
        :return:
        """
        try:
            get.status = "stop"
            container = self.docker_client(self._url).containers.get(get.id)
            container.stop()
            time.sleep(1)
            data = self.docker_client(self._url).containers.get(get.id)
            if data.attrs['State']['Status'] != "exited":
                return public.returnMsg(False, _( "Stop failing!"))
            dp.write_log("Stopping container [{}] success!".format(data.attrs['Name'].replace('/', '')))
            return public.returnMsg(True, _("Stop succeeding!"))
        except docker.errors.APIError as e:
            if "is already paused" in str(e):
                return public.returnMsg(False, _( "The container has paused."))
            if "No such container" in str(e):
                return public.returnMsg(True, _( "Container stopped and deleted"))
            return public.returnMsg(False,  _( "Stop failing!{}".format(e)))

    def start(self, get):
        """
        启动指定容器 (内部调用)
        :param get:
        :return:
        """
        try:
            get.status = "start"
            container = self.docker_client(self._url).containers.get(get.id)
            container.start()
            time.sleep(1)
            data = self.docker_client(self._url).containers.get(get.id)
            if data.attrs['State']['Status'] != "running":
                return public.returnMsg(False, _( "boot failed!"))
            dp.write_log("Starting container [{}] was successful!".format(data.attrs['Name'].replace('/', '')))
            return public.returnMsg(True, _( "starting success!"))
        except docker.errors.APIError as e:
            if "cannot start a paused container, try unpause instead" in str(e):
                return self.unpause(get)
        except Exception as a:
            print(traceback.format_exc())
            raise Exception(a)

    def pause(self, get):
        """
        暂停此容器内的所有进程  (内部调用)
        :param get:
        :return:
        """
        try:
            get.status = "pause"
            container = self.docker_client(self._url).containers.get(get.id)
            container.pause()
            time.sleep(1)
            data = self.docker_client(self._url).containers.get(get.id)
            if data.attrs['State']['Status'] != "paused":
                return public.returnMsg(False, _( "Container pause failed!"))
            dp.write_log("Pause container [{}] success!".format(data.attrs['Name'].replace('/', '')))
            return public.returnMsg(True, _( "Container pause successfully!"))
        except docker.errors.APIError as e:
            if "is already paused" in str(e):
                return public.returnMsg(False, _( "The container has been suspended!"))
            if "is not running" in str(e):
                return public.returnMsg(False, _( "The container is not started and cannot be paused!"))
            if "is not paused" in str(e):
                return public.returnMsg(False, _(
                                        "The container is not paused or has been deleted. Check if the container has the option to delete immediately after stopping!"))
            return str(e)
        except Exception as a:
            print(traceback.format_exc())
            raise Exception(a)

    def unpause(self, get):
        """
        取消暂停该容器内的所有进程  (内部调用)
        :param get:
        :return:
        """
        try:
            get.status = "unpause"
            container = self.docker_client(self._url).containers.get(get.id)
            container.unpause()
            time.sleep(1)
            data = self.docker_client(self._url).containers.get(get.id)
            if data.attrs['State']['Status'] != "running":
                return public.returnMsg(False, _( "boot failed!"))
            dp.write_log("Unpause container [{}] success!".format(data.attrs['Name'].replace('/', '')))
            return public.returnMsg(True, _( "The container unpaused successfully"))
        except docker.errors.APIError as e:
            if "is already paused" in str(e):
                return public.returnMsg(False, _( "The container has paused."))
            if "is not running" in str(e):
                return public.returnMsg(False, _( "The container is not started and cannot be paused!"))
            if "is not paused" in str(e):
                return public.returnMsg(False, _(
                                        "The container is not paused or has been deleted. Check if the container has the option to delete immediately after stopping!"))
            return str(e)
        except Exception as a:
            print(traceback.format_exc())
            raise Exception(a)

    def reload(self, get):
        """
        再次从服务器加载此对象并使用新数据更新 attrs  (内部调用)
        :param get:
        :return:
        """
        get.status = "reload"
        container = self.docker_client(self._url).containers.get(get.id)
        container.reload()
        time.sleep(1)
        data = self.docker_client(self._url).containers.get(get.id)
        if data.attrs['State']['Status'] != "running":
            return public.returnMsg(False, _( "boot failed!"))
        dp.write_log("Reloading container [{}] succeeded!".format(data.attrs['Name'].replace('/', '')))
        return public.returnMsg(True, _( "The container was reloaded successfully!"))

    def restart(self, get):
        """
        重新启动这个容器。类似于 docker restart 命令
        :param get:
        :return:
        """
        try:
            get.status = "restart"
            container = self.docker_client(self._url).containers.get(get.id)
            container.restart()
            time.sleep(1)
            data = self.docker_client(self._url).containers.get(get.id)
            if data.attrs['State']['Status'] != "running":
                return public.returnMsg(False, _( "boot failed!"))
            dp.write_log("Restart container [{}] successfully!".format(data.attrs['Name'].replace('/', '')))
            return public.returnMsg(True, _( "Container restarts successfully!"))
        except docker.errors.APIError as e:
            if "container is marked for removal and cannot be started" in str(e):
                return public.returnMsg(False, _(
                                        "The container has been stopped and deleted because containers have the option to automatically delete when stopped"))
            if "is already paused" in str(e):
                return public.returnMsg(False, _( "The container has paused"))
            return str(e)

    def get_container_ip(self, container_networks):
        """
        获取容器IP
        @param container_networks:
        @return:
        """
        data = list()
        for network in container_networks:
            data.append(container_networks[network]['IPAddress'])
        return data

    def get_container_path(self, detail):
        """
        获取容器路径
        @param detail:
        @return:
        """
        try:
            import os
            if not "GraphDriver" in detail:
                return False
            if "Data" not in detail["GraphDriver"]:
                return False
            if "MergedDir" not in detail["GraphDriver"]["Data"]:
                return False
            path = detail["GraphDriver"]["Data"]["MergedDir"]
            if not os.path.exists(path):
                return ""
            return path
        except:
            return False

    def get_container_info(self, get):
        """
        获取容器信息
        @param get:
        @return:
        """
        try:
            if "id" not in get or get.id == "":
                return public.return_message(-1, 0,  _( "The container ID is empty"))

            from btdockerModelV2.dockerSock import container
            sk_container = container.dockerContainer()
            sk_container_info = sk_container.get_container_inspect(get.id)

            info_path = "/var/lib/docker/containers/{}/container_info.json".format(get.id)
            public.writeFile(info_path, json.dumps(sk_container_info, indent=3))
            sk_container_info['container_info'] = info_path
            return public.return_message(0, 0, sk_container_info)
        except Exception as e:
            if "No such container" in str(e):
                return public.return_message(-1, 0,  _( "Container does not exist!"))
            return public.return_message(-1, 0,  _( "Failed to get container information!{}".format(str(e))))

    def struct_container_ports(self, ports):
        """
        构造容器ports
        @param ports:
        @return:
        """
        data = dict()
        for port in ports:
            key = str(port["PrivatePort"]) + "/" + port["Type"]
            if key not in data.keys():
                data[str(port["PrivatePort"]) + "/" + port["Type"]] = [{
                    "HostIp": port["IP"],
                    "HostPort": str(port["PublicPort"])
                }] if "IP" in port else None
            else:
                data[str(port["PrivatePort"]) + "/" + port["Type"]].append({
                    "HostIp": port["IP"],
                    "HostPort": str(port["PublicPort"])
                })
        return data

    def struct_container_list(self, container):
        '''
            @name 构造容器列表
            @author wzz <2024/3/13 下午 5:32>
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        tmp = {
            "id": container["Id"],
            "name": dp.rename(container['Names'][0].replace("/", "")),
            "status": container["State"],
            "image": container["Image"],
            "created_time": container["Created"],
            "ip": self.get_container_ip(container["NetworkSettings"]['Networks']),
            "ports": self.struct_container_ports(container["Ports"]),
        }

        return tmp

    # 2024/4/11 下午2:46 获取 merged 目录
    def get_container_merged(self, get):
        '''
            @name 获取容器 merged 目录
            @author wzz <2024/4/11 下午2:47>
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        try:
            get.id = get.get("id", "")
            if get.id == "":
                return public.return_message(-1, 0, _( "The container ID is empty"))
            return public.return_message(0, 0, {
                "path": public.ExecShell("docker inspect -f \"{{json .GraphDriver.Data.MergedDir}}\" " + get.id)[
                    0].strip().strip('"')})

        except Exception as e:
            return public.return_message(0, 0, {"path": ""})

    # 2024/4/11 下午3:44 获取其他容器列表的数据
    def get_other_container_data(self, get):
        '''
            @name 获取其他容器列表的数据
            @author wzz <2024/4/11 下午3:45>
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        try:
            from btdockerModelV2.dockerSock import container

            sk_container = container.dockerContainer()
            container_list = sk_container.get_container()

            data = []
            # 获取前先检测数据库是否存在
            self.check_remark_table()
            dk_container_remark = dp.sql("dk_container_remark").select()
            self.check_table_dk_backup()
            dk_backup = dp.sql("dk_backup").select()
            for sk_c in container_list:
                try:
                    remark = [i['remark'] for i in dk_container_remark if i['container_id'] == sk_c["Id"]][0]
                except Exception as e:
                    remark = ""


                # 计算备份数量
                backup_count = 0
                for i in dk_backup:
                    if i['container_id'] == sk_c["Id"]:
                        backup_count += 1

                data.append({
                    "id": sk_c["Id"],
                    "name": dp.rename(sk_c['Names'][0].replace("/", "")),
                    "backup_count": backup_count,
                    "remark": remark,
                })

            return public.return_message(0, 0, data)
        except Exception as e:
            public.print_log(traceback.format_exc())
            return public.return_message(0, 0, [])

    # 获取容器列表
    def get_list(self, get):
        """
        获取所有容器列表 1
        :param get
        :return:
        """
        from btdockerModelV2.dockerSock import container
        sk_container = container.dockerContainer()
        sk_container_list = sk_container.get_container()

        data = {
            "online_cpus": dp.get_cpu_count(),
            "mem_total": dp.get_mem_info(),
            "container_list": [],
        }

        container_detail = list()
        grouped_by_status = dict()
        for sk_c in sk_container_list:
            struct_container = self.struct_container_list(sk_c)
            status = struct_container['status']
            grouped_by_status.setdefault(status, []).append(struct_container)
            container_detail.append(struct_container)

        data['grouped_by_status'] = grouped_by_status
        data['container_list'] = sorted(container_detail, key=lambda x: x['created_time'], reverse=True)
        return public.return_message(0, 0, data)

    def _get_list(self, get):
        """
        获取所有容器列表 1
        :param get
        :return:
        """
        from btdockerModelV2.dockerSock import container
        sk_container = container.dockerContainer()
        sk_container_list = sk_container.get_container()

        data = {
            "online_cpus": dp.get_cpu_count(),
            "mem_total": dp.get_mem_info(),
            "container_list": [],
        }

        container_detail = list()
        grouped_by_status = dict()
        for sk_c in sk_container_list:
            struct_container = self.struct_container_list(sk_c)
            status = struct_container['status']
            grouped_by_status.setdefault(status, []).append(struct_container)
            container_detail.append(struct_container)

        data['grouped_by_status'] = grouped_by_status
        data['container_list'] = sorted(container_detail, key=lambda x: x['created_time'], reverse=True)
        return data

    # 获取容器的attr
    def get_container_attr(self, containers):
        c_list = containers.list(all=True)
        return [container_info.attrs for container_info in c_list]

    # 获取容器日志
    def get_logs(self, get):
        """
        获取指定容器日志
        :param get:
        :return:
        """
        # {"id": "4b270b6b6dd3cb50b4bc5c5c51ceade67de0754d39ad7a312d06e3fabf4d89b1","time_search": [1701273600, 1701829064]}

        res = {
            "logs": "",
            'split_status': False,
            'split_type': 'day',
            'split_size': 1000,
            'split_hour': 2,
            'split_minute': 0,
            'save': '180'
        }

        try:
            container = self.docker_client(self._url).containers.get(get.id)
            if hasattr(get, 'time_search') and get.time_search != '':
                if not os.path.exists(container.attrs['LogPath']):
                    return public.return_message(-1, 0, "No container logging")
                    # return public.return_message(0, 0, None)

                time_search = json.loads(str(get.time_search))
                since = int(time_search[0])
                until = int(time_search[1])
                r_logs = container.logs(since=since, until=until).decode()

            else:
                if not os.path.exists(container.attrs['LogPath']):
                    return public.return_message(-1, 0, "No container logging")
                    # return public.return_message(0, 0, None)

                size = os.stat(container.attrs['LogPath']).st_size
                if size < 1048576:
                    r_logs = container.logs().decode()
                else:
                    tail = int(get.tail) if "tail" in get else 3000
                    r_logs = container.logs(tail=tail).decode()

            if hasattr(get, 'search') and get.search != '':
                if get.search:
                    r_logs = r_logs.split("\n")
                    r_logs = [i for i in r_logs if get.search in i]
                    r_logs = "\n".join(r_logs)

            res['logs'] = r_logs
            res['id'] = get.id
            res['name'] = dp.rename(container.attrs['Name'][1:])
            res['logs_path'] = container.attrs['LogPath']
            res['size'] = os.stat(container.attrs['LogPath']).st_size

            if public.M('sqlite_master').db('docker_log_split').where('type=? AND name=?',
                                                                      ('table', 'docker_log_split')).count():
                res['split_status'] = True if public.M('docker_log_split').where('pid=?', (get.id,)).count() else False
                data = public.M('docker_log_split').where('pid=?', (get.id,)).select()
                if data:
                    res['split_type'] = data[0]['split_type']
                    res['split_size'] = data[0]['split_size']
                    res['split_hour'] = data[0]['split_hour']
                    res['split_minute'] = data[0]['split_minute']
                    res['save'] = data[0]['save']
                else:
                    res['split_type'] = 'day'
                    res['split_size'] = 1000
                    res['split_hour'] = 2
                    res['split_minute'] = 0
                    res['save'] = '180'

            return public.return_message(0, 0, res)

        except Exception:
            return public.return_message(0, 0, res)

    def get_logs_all(self, get):
        """
        获取所有容器的日志
        @param get:
        @return:
        """
        try:
            client = self.docker_client(self._url)
            if not client:
                return public.return_message(-1, 0,  _( 'docker connection failed'))
            containers = client.containers
            clist = [i.attrs for i in containers.list(all=True)]
            clist = [{'id': i['Id'], 'name': dp.rename(i['Name'][1:]), 'log_path': i['LogPath']} for i in clist]
            for i in clist:
                if os.path.exists(i['log_path']):
                    i['size'] = os.stat(i['log_path']).st_size
                else:
                    i['size'] = 0
            return public.return_message(0, 0, clist)
        except Exception as e:
            return public.return_message(-1, 0, e)

    def docker_split(self, get):
        """
        设置容器日志切割
        @param get:
        @return:
        """
        # {"pid": "3f225d2b41bcadb1b4bb73dc7521a35d1933cb1e1caa8ac61bd53cf718b9910c", "type": "del"}
        try:
            get.validate([
                Param('pid').Require().String(),
                Param('type').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)
        try:
            client = self.docker_client(self._url)
            if not client:
                return public.return_message(-1, 0,  _( 'docker connection failed'))
            containers = client.containers
            clist = [i.attrs for i in containers.list(all=True)]
            name = [dp.rename(i['Name'][1:]) for i in clist if i['Id'] == get.pid]
            if name:
                name = name[0]
            else:
                name = ''
            if not hasattr(get, 'type'):
                return public.return_message(-1, 0,  _( 'parameter error,Pass: type'))
            if not public.M('sqlite_master').db('docker_log_split').where('type=? AND name=?',
                                                                          ('table', 'docker_log_split')).count():
                public.M('docker_log_split').execute('''CREATE TABLE IF NOT EXISTS docker_log_split (
                id      INTEGER      PRIMARY KEY AUTOINCREMENT,
                name    text default '',
                pid    text default '',
                log_path     text default '',
                split_type text default '',
                split_size INTEGER default 0,
                split_hour INTEGER default 2,
                split_minute INTEGER default 0,
                save INTEGER default 180)''', ())
            if get.type == 'add':
                if "log_path" not in get or not get.log_path:
                    return public.return_message(-1, 0,  _(
                                                 'Container log directory does not exist, log cut cannot be set!'))

                if not (hasattr(get, 'pid') and hasattr(get, 'log_path') and
                        hasattr(get, 'split_type') and hasattr(get, 'split_size') and
                        hasattr(get, 'split_minute') and
                        hasattr(get, 'split_hour') and hasattr(get, 'save')):
                    return public.return_message(-1, 0,  _( 'parameter error'))
                data = {
                    'name': name,
                    'pid': get.pid,
                    'log_path': get.log_path,
                    'split_type': get.split_type,
                    'split_size': get.split_size,
                    'split_hour': get.split_hour,
                    'split_minute': get.split_minute,
                    'save': get.save
                }
                if public.M('docker_log_split').where('pid=?', (get.pid,)).count():
                    id = public.M('docker_log_split').where('pid=?', (get.pid,)).select()
                    public.M('docker_log_split').delete(id[0]['id'])
                public.M('docker_log_split').insert(data)
                return public.return_message(0, 0,  _("Opened successfully!"))
            elif get.type == 'del':
                id = public.M('docker_log_split').where('pid=?', (get.pid,)).getField('id')
                public.M('docker_log_split').where('id=?', (id,)).delete()
                return public.return_message(0, 0,  _("Closed successfully!"))
        except:
            return public.return_message(-1, 0, traceback.format_exc())

    def clear_log(self, get):
        """
        清空日志
        @param get:
        @return:
        """
        if not hasattr(get, 'log_path'):
            return public.return_message(-1, 0,  _( 'parameter error'))
        if not os.path.exists(get.log_path):
            return public.return_message(-1, 0,  _( 'The log file does not exist'))
        public.writeFile(get.log_path, '')
        return public.return_message(0, 0,  _("Log cleaning was successful!"))

    # 清理无用已停止未使用的容器
    def prune(self, get):
        """
        :param get:
        :return:
        """
        try:
            type = get.get("type/d", 0)
            if type == 0:
                res = self.docker_client(self._url).containers.prune()
                if not res['ContainersDeleted']:
                    return public.return_message(-1, 0, _( "No useless containers!"))
                dp.write_log("Delete useless containers successfully!")
                return public.return_message(0, 0, _( "successfully deleted!"))
            else:
                import docker
                client = docker.from_env()
                containers = client.containers.list(all=True)
                for container in containers:
                    container.remove(force=True)
                dp.write_log("Delete useless containers successfully!")
                return public.return_message(0, 0, _( "successfully deleted!"))
        except Exception as e:
            if "operation not permitted" in str(e):
                return public.return_message(-1, 0,  _( "Please turn off enterprise tamper protection before trying again!"))
            return public.return_message(-1, 0, _( "failed to delete! {}".format(e)))


    def update_restart_policy(self, get):
        """
        更新容器重启策略
        @param get:
        @return:
        """
        try:
            get.validate([
                Param('id').Require().String(),
                Param('restart_policy').Require(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        try:
            # if "restart_policy" not in get:
            #     return public.returnMsg(False, "Parameter error, please pass in restart policy restart_policy!")

            container = self.docker_client(self._url).containers.get(get.id)
            # 修复偶尔 go反序列化 报错
            if isinstance(get.restart_policy, str):
                import json
                restart_policy = get.restart_policy.replace("'", "\"")
                restart_policy = json.loads(restart_policy)
            else:
                restart_policy = get.restart_policy

            container.update(restart_policy=restart_policy)
            # container.update(restart_policy=get.restart_policy)
            # container.update(restart_policy= json.dumps(get.restart_policy))
            dp.write_log("Update container [{}] Restart policy successful!".format(container.attrs['Name']))
            return public.return_message(0, 0,  _("Update successfully!"))
        # except docker.errors.APIError as e:
        except Exception as e:
            public.print_log(traceback.format_exc())
            return public.return_message(-1, 0,  _( "Update failed! {}".format(e)))

    '''
        @name 重命名指定容器
        @author wzz <2023/12/1 下午 3:13>
        @param 参数名<数据类型> 参数描述
        @return 数据类型
    '''

    def rename_container(self, get):
        """
        重命名指定容器
        @param get:
        @return:
        """
        try:
            get.validate([
                Param('id').Require().String(),
                Param('name').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        try:
            # 2023/12/6 上午 10:54 容器未启动时,不允许重命名
            container = self.docker_client(self._url).containers.get(get.id)
            if container.attrs['State']['Status'] != "running":
                return public.return_message(-1, 0,  _( "The container is not started and cannot be renamed!"))
            config_path = "{}/config/name_map.json".format(public.get_panel_path())
            if not os.path.exists(config_path):
                public.writeFile(config_path, json.dumps({}))

            if public.readFile(config_path) == '':
                public.writeFile(config_path, json.dumps({}))

            name_map = json.loads(public.readFile(config_path))
            name_str = 'q18q' + public.GetRandomString(10).lower()
            name_map[name_str] = get.name
            get.name = name_str
            public.writeFile(config_path, json.dumps(name_map))

            container.rename(get.name)
            dp.write_log("Renaming container [{}] succeeded!".format(get.name))
            return public.return_message(0, 0,  _("Rename successfully!"))
        except docker.errors.APIError as e:
            return public.return_message(-1, 0,  _( "Renaming failed! {}".format(e)))

    # 2024/2/23 上午 9:58 设置容器列表置顶
    def set_container_to_top(self, get):
        """
        设置容器列表置顶
        @param get:
        @return:
        """
        # {"type": "add", "container_name": "dk_wordpress-wordpress-1"}

        set_type = get.type if "type" in get else ""
        container_name = get.container_name if "container_name" in get else None

        if set_type not in ['add', 'del']: return public.returnMsg(False, _( 'The type only supports add/del'))
        if container_name is None: return public.returnMsg(False, _( 'Please select a container'))

        _conf_path = "{}/class_v2/btdockerModelV2/config/container_top.json".format(public.get_panel_path())
        if os.path.exists(_conf_path):
            container_top_conf = json.loads(public.readFile(_conf_path))
        else:
            container_top_conf = []

        if set_type == "add":
            container_top_conf = [i for i in container_top_conf if i != container_name]
            container_top_conf.insert(0, container_name)
            public.writeFile(_conf_path, json.dumps(container_top_conf))
            return public.return_message(0, 0,  _('Set top successfully!'))
        elif set_type == "del":
            container_top_conf.remove(container_name)
            public.writeFile(_conf_path, json.dumps(container_top_conf))
            return public.return_message(0, 0,  _('Unpinned successfully!'))

    # 2024/2/23 上午 9:58 获取容器列表置顶
    def _get_container_to_top(self):
        """
        获取容器列表置顶
        @return:
        """
        _conf_path = "{}/class_v2/btdockerModelV2/config/container_top.json".format(public.get_panel_path())
        if os.path.exists(_conf_path):
            container_top_conf = json.loads(public.readFile(_conf_path))
        else:
            container_top_conf = []

        return container_top_conf
    # 2024/3/13 下午 5:46 检查并创建备注的表
    def check_remark_table(self):
        '''
            @name 检查并创建备注的表
            @author wzz <2024/2/26 下午 5:59>
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        if not dp.sql('sqlite_master').where('type=? AND name=?',
                                                                       ('table', 'dk_container_remark')).count():
            dp.sql('dk_container_remark').execute(
                "CREATE TABLE `dk_container_remark` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `container_id` TEXT, `container_name` TEXT, `remark` TEXT, `addtime` TEXT)",
                ()
            )




    # 2024/2/26 下午 6:11 修改备注
    def set_container_remark(self, get):
        """
        设置容器备注
        @param get:
        @return:
        """

        try:
            get.validate([
                Param('id').Require().String(),
                Param('remark').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        # if not hasattr(get, 'remark'):
        #     return public.returnMsg(False, 'Parameter error, Please pass in: remark!')
        # if not hasattr(get, 'id'):
        #     return public.returnMsg(False, 'Parameter error, Please pass in: id!')

        container_id = get.id
        container_remark = public.xssencode2(get.remark)

        if not dp.sql("dk_container_remark").where("container_id=?", (container_id,)).count():
            dp.sql("dk_container_remark").insert({
                "container_id": container_id,
                "remark": container_remark,
            })
        else:
            dp.sql("dk_container_remark").where("container_id=?", (container_id,)).setField("remark", container_remark)

        return public.return_message(0, 0,  _("Setup successful!"))

    # 2024/2/27 上午 11:03 通过cgroup获取所有容器的cpu和内存使用情况
    def get_all_stats(self, get):
        """
        # 通过cgroup获取所有容器的cpu和内存使用情况
        @param get:
        @return:
        """
        if not hasattr(get, 'ws_callback'):
            return public.returnMsg(False, _( 'Parameter error, Please pass in: ws_callback!'))
        if not hasattr(get, '_ws'):
            return public.returnMsg(False, _( 'Parameter error, Please pass in: _ws!'))

        from system import system
        syst = system()
        data = dict()
        data["cpu_info"] = syst.GetCpuInfo()
        data["mem_info"] = syst.GetMemInfo()

        get._ws.send(public.getJson(
            {
                "data": data,
                "ws_callback": get.ws_callback,
                "msg": "Start getting the cpu and memory usage of all containers!",
                "status": True,
                "end": False,
            }))

        try:
            # 获取所有容器列表
            container_list = self._get_list(get)["container_list"]

            while True:
                docker_stats_result = public.ExecShell(
                    "docker stats --no-stream --format "
                    "'{{.ID}},{{.Name}},{{.CPUPerc}},{{.MemUsage}},{{.MemPerc}},{{.NetIO}},{{.BlockIO}},{{.PIDs}};'"
                )[0]

                data["cpu_info"] = syst.GetCpuInfo()
                data["mem_info"] = syst.GetMemInfo()

                if not docker_stats_result:
                    get._ws.send(public.getJson(
                        {
                            "data": {},
                            "ws_callback": get.ws_callback,
                            "msg": "No running container resource information has been obtained yet!",
                            "status": True,
                            "end": True,
                        }))
                    return

                container_stats_data = list()

                for i in docker_stats_result.split(";"):
                    if not i: continue
                    tmp = i.strip().split(",")
                    if len(tmp) == 0: continue
                    if len(tmp) == 1 and not tmp[0]: continue

                    # 获取容器使用的image
                    id = image = create_time = ""

                    for cl in container_list:
                        if cl["name"] in dp.rename(tmp[1]):
                            id = cl["id"]
                            image = cl["image"]
                            create_time = cl["created_time"]
                            break

                    container_stats_data.append({
                        "id": id,
                        "name": dp.rename(tmp[1]),
                        "image": image,
                        "create_time": create_time,
                        "cpu_usage": tmp[2].strip("%"),
                        "mem_percent": tmp[4].strip("%"),
                        "mem_usage": {
                            "mem_usage": dp.byte_conversion(tmp[3].split("/")[0]),
                            "mem_limit": dp.byte_conversion(tmp[3].split("/")[1]),
                        },
                        "net_io": {
                            "net_in": dp.byte_conversion(tmp[5].split("/")[0]),
                            "net_out": dp.byte_conversion(tmp[5].split("/")[1]),
                        },
                        "block_io": {
                            "block_in": dp.byte_conversion(tmp[6].split("/")[0]),
                            "block_out": dp.byte_conversion(tmp[6].split("/")[1]),
                        },
                        "pids": tmp[7],
                    })

                data["container_stats_data"] = container_stats_data
                data["container_count"] = len(container_stats_data)
                end = False
                msg = "Obtaining the cpu and memory usage of all containers was successful!"
                if len(container_stats_data) == 0:
                    end = True
                    msg = "No running container resource information has been obtained yet!"

                get._ws.send(public.getJson(
                    {
                        "data": data,
                        "ws_callback": get.ws_callback,
                        "msg": msg,
                        "status": True,
                        "end": end,
                    }))

                time.sleep(0.1)

        except:
            print(traceback.format_exc())
            get._ws.send(public.getJson(
                {
                    "data": {},
                    "ws_callback": get.ws_callback,
                    "msg": "Failed to get cpu and memory usage of all containers!",
                    "status": True,
                    "end": True,
                }))
            return

    def check_table_dk_backup(self):
        '''
            @name 检查并创建表
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        if not dp.sql('sqlite_master').where('type=? AND name=?', ('table', 'dk_backup')).count():
            dp.sql('dk_backup').execute(
                "CREATE TABLE `dk_backup` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `type` INTEGER, `name` TEXT, `container_id` TEXT, `container_name` TEXT, `filename` TEXT, `size` INTEGER, `addtime` TEXT, `ps` STRING DEFAULT 'none', `cron_id` INTEGER DEFAULT 0 )",
                ()
            )