From 03a66bb547ed30c8bf38ff3f4e07fad29bd72501 Mon Sep 17 00:00:00 2001
From: Cheithanya <cheithanya2002@gmail.com>
Date: Mon, 28 Oct 2024 22:29:14 +0530
Subject: [PATCH] added OCI hook configuration command

---
 cmd/injecthook.go | 72 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 72 insertions(+)
 create mode 100644 cmd/injecthook.go

diff --git a/cmd/injecthook.go b/cmd/injecthook.go
new file mode 100644
index 00000000..68f90237
--- /dev/null
+++ b/cmd/injecthook.go
@@ -0,0 +1,72 @@
+package cmd
+
+import (
+	"encoding/json"
+	"os"
+	"path/filepath"
+
+	"github.com/opencontainers/runtime-spec/specs-go"
+	"github.com/spf13/cobra"
+	hooks "github.com/containers/common/pkg/hooks/1.0.0"
+)
+
+var hookDir string
+var criSocket string
+
+// injectCmd represents the inject command to place the OCI hook configuration
+var injectCmd = &cobra.Command{
+	Use:   "inject",
+	Short: "Inject OCI hooks",
+	Long:  `Injects an OCI hook configuration for KubeArmor into the specified directory.`,
+	RunE: func(cmd *cobra.Command, args []string) error {
+
+		if err := os.MkdirAll(hookDir, 0750); err != nil {
+			return err
+		}
+
+		dst, err := os.OpenFile(filepath.Join(hookDir, "ka.json"), os.O_CREATE|os.O_TRUNC|os.O_WRONLY, 0644)
+		if err != nil {
+			return err
+		}
+		defer dst.Close()
+
+		always := true
+		hook := hooks.Hook{
+			Version: "1.0.0",
+			Hook: specs.Hook{
+				Path: "/usr/share/kubearmor/hook",
+				Args: []string{
+					"/usr/share/kubearmor/hook",
+					"--runtime-socket",
+					criSocket,
+				},
+			},
+			When: hooks.When{Always: &always},
+			Stages: []string{
+				"poststart",
+				"poststop",
+			},
+		}
+
+		hookBytes, err := json.Marshal(hook)
+		if err != nil {
+			return err
+		}
+
+		_, err = dst.Write(hookBytes)
+		if err != nil {
+			return err
+		}
+
+		return nil
+	},
+}
+
+func init() {
+	rootCmd.AddCommand(injectCmd)
+
+	injectCmd.Flags().StringVar(&hookDir, "hook-dir", "", "Path to the hook config directory (e.g., /etc/containers/oci/hooks.d)")
+	injectCmd.Flags().StringVar(&criSocket, "cri-socket", "", "Path to the runtime socket (e.g., /run/podman/podman.sock)")
+	injectCmd.MarkFlagRequired("hook-dir")
+	injectCmd.MarkFlagRequired("cri-socket")
+}