What is multi-arch?

多架构调试
本文探讨了多架构调试器的概念,区分了单架构、多架构及同时多架构调试器的不同,并介绍了GDB如何通过改进实现对多种架构的支持。
To: gdb@cygnus.com
Subject: What is multi-arch?
From: Andrew Cagney <ac131313@cygnus.com
Date: Tue, 20 Apr 1999 01:24:01 +1000
Organization: Cygnus Solutions

Hello,

In the below I'll try to describe, in broad terms, the concept of a multi-arch debugger and then outline the approach that GDB is taking in achieving that goal.

What is an architecture?

For GDB, an architecture is a very loose concept. It can be thought of as any property of the target that isn't directly dependent on the current instance of the program being debugged. The term ``target architecture'' is some times used.

The ``architecture'' would include:

  • The ISA (Instruction Set Architecture)
    A specific combination of registers/instructions
  • Application Binary Interface
    The use of the ISA to provide a specific binary interface (stack frame format + register allocation)

while preclude the actual value of a given register.

What is multi-arch?

Such a phrase is fairly loose in its definition so I'll provide you with a spectrum of definitions:

  • single architecture debugger:
    For the most part this is what GDB is today. If you want to debug a MIPS/32 (O32 ABI) binary you build GDB for the MIPS/32. If you want to to instead debug a SPARC (or even a MIPS/64 - N64 ABI) then you need to build a second (and third) debugger.
  • multiple architecture debugger:
    The limitation of a single GDB being restricted to a single architecture is removed. A single GDB binary being able to debug any of a number of architectures for which GDB was built.
    You might build GDB with support for both MIPS and SPARC targets. More typically, however, you will be building a GDB with support for a plithera of ISA variants (as with the MIPS case). A very simple example is support for both big and little byte ordered variants.
    It should be noted that GDB, as it currently stands, does support ISA/ABI variants (to a very limited degree). I'm sure that anyone that has hacked on that code will agree that, at present, it isn't pretty ...
    Of the possibilities, this has the greatest benefit
  • simultaneous multi-architecture debugger:
    This would have to be the holy grail of debugger technology :-)
    (As Stan once mentioned) Increasingly, in the embedded space, people are developing systems that are built from several different architectures. (To pluck an example out of a hat - the next generation PlayStation has been described as having a 128-bit main processor as well as a number of co-processors). Cygnus Announces GNUPro Software Development Tools For Sony Computer Entertainment Inc's Next Generation Playstation, 29 Mar 1999.
    On the UNIX side, this is still a very applicable idea - instead of multiple processors, multiple processes, each running a different ABI variant.

GDB?

The objective, at this stage, is to modify GDB so that it can be built `multi-arch'.

In simple terms, the change required is for all those macro's in gdb/config/*/tm-*.h to be replaced with corresponding functions. Those functions combined into a table (very large architecture object - gdbarch) - one object per architecture variant. When establishing a debugging session, gdb would select/create/install the architecture variant that best matched what was being debugged.

Of course, it isn't that simple. Much of GDB's internal code needs to be tweaked so that it makes run-time rather than compile time architecture dependent decisions.

In succeeding e-mails I'll be expanding on this,

enjoy,

Andrew



refer to

http://sourceware.org/gdb/papers/multi-arch/whatis.html

我的服务器没法连外网,以下是sh里面的内容: #!/bin/sh # shellcheck shell=dash # shellcheck disable=SC2039 # local is non-POSIX # This is just a little script that can be downloaded from the internet to # install rustup. It just does platform detection, downloads the installer # and runs it. # It runs on Unix shells like {a,ba,da,k,z}sh. It uses the common `local` # extension. Note: Most shells limit `local` to 1 var per line, contra bash. # Some versions of ksh have no `local` keyword. Alias it to `typeset`, but # beware this makes variables global with f()-style function syntax in ksh93. # mksh has this alias by default. has_local() { # shellcheck disable=SC2034 # deliberately unused local _has_local } has_local 2>/dev/null || alias local=typeset is_zsh() { [ -n "${ZSH_VERSION-}" ] } set -u # If RUSTUP_UPDATE_ROOT is unset or empty, default it. RUSTUP_UPDATE_ROOT="${RUSTUP_UPDATE_ROOT:-https://static.rust-lang.org/rustup}" # Set quiet as a global for ease of use RUSTUP_QUIET=no # NOTICE: If you change anything here, please make the same changes in setup_mode.rs usage() { cat <<EOF rustup-init 1.28.2 (d1f31992a 2025-04-28) The installer for rustup Usage: rustup-init[EXE] [OPTIONS] Options: -v, --verbose Set log level to 'DEBUG' if 'RUSTUP_LOG' is unset -q, --quiet Disable progress output, set log level to 'WARN' if 'RUSTUP_LOG' is unset -y Disable confirmation prompt --default-host <DEFAULT_HOST> Choose a default host triple --default-toolchain <DEFAULT_TOOLCHAIN> Choose a default toolchain to install. Use 'none' to not install any toolchains at all --profile <PROFILE> [default: default] [possible values: minimal, default, complete] -c, --component <COMPONENT> Comma-separated list of component names to also install -t, --target <TARGET> Comma-separated list of target names to also install --no-update-default-toolchain Don't update any existing default toolchain after install --no-modify-path Don't configure the PATH environment variable -h, --help Print help -V, --version Print version EOF } main() { downloader --check need_cmd uname need_cmd mktemp need_cmd chmod need_cmd mkdir need_cmd rm need_cmd rmdir get_architecture || return 1 local _arch="$RETVAL" assert_nz "$_arch" "arch" local _ext="" case "$_arch" in *windows*) _ext=".exe" ;; esac local _url if [ "${RUSTUP_VERSION+set}" = 'set' ]; then say "\`RUSTUP_VERSION\` has been set to \`${RUSTUP_VERSION}\`" _url="${RUSTUP_UPDATE_ROOT}/archive/${RUSTUP_VERSION}" else _url="${RUSTUP_UPDATE_ROOT}/dist" fi _url="${_url}/${_arch}/rustup-init${_ext}" local _dir if ! _dir="$(ensure mktemp -d)"; then # Because the previous command ran in a subshell, we must manually # propagate exit status. exit 1 fi local _file="${_dir}/rustup-init${_ext}" local _ansi_escapes_are_valid=false if [ -t 2 ]; then if [ "${TERM+set}" = 'set' ]; then case "$TERM" in xterm*|rxvt*|urxvt*|linux*|vt*) _ansi_escapes_are_valid=true ;; esac fi fi # check if we have to use /dev/tty to prompt the user local need_tty=yes for arg in "$@"; do case "$arg" in --help) usage exit 0 ;; --quiet) RUSTUP_QUIET=yes ;; *) OPTIND=1 if [ "${arg%%--*}" = "" ]; then # Long option (other than --help); # don't attempt to interpret it. continue fi while getopts :hqy sub_arg "$arg"; do case "$sub_arg" in h) usage exit 0 ;; q) RUSTUP_QUIET=yes ;; y) # user wants to skip the prompt -- # we don't need /dev/tty need_tty=no ;; *) ;; esac done ;; esac done say 'downloading installer' ensure mkdir -p "$_dir" ensure downloader "$_url" "$_file" "$_arch" ensure chmod u+x "$_file" if [ ! -x "$_file" ]; then err "Cannot execute $_file (likely because of mounting /tmp as noexec)." err "Please copy the file to a location where you can execute binaries and run ./rustup-init${_ext}." exit 1 fi if [ "$need_tty" = "yes" ] && [ ! -t 0 ]; then # The installer is going to want to ask for confirmation by # reading stdin. This script was piped into `sh` though and # doesn't have stdin to pass to its children. Instead we're going # to explicitly connect /dev/tty to the installer's stdin. if [ ! -t 1 ]; then err "Unable to run interactively. Run with -y to accept defaults, --help for additional options" exit 1; fi ignore "$_file" "$@" < /dev/tty else ignore "$_file" "$@" fi local _retval=$? ignore rm "$_file" ignore rmdir "$_dir" return "$_retval" } get_current_exe() { # Returns the executable used for system architecture detection # This is only run on Linux local _current_exe if test -L /proc/self/exe ; then _current_exe=/proc/self/exe else warn "Unable to find /proc/self/exe. System architecture detection might be inaccurate." if test -n "$SHELL" ; then _current_exe=$SHELL else need_cmd /bin/sh _current_exe=/bin/sh fi warn "Falling back to $_current_exe." fi echo "$_current_exe" } get_bitness() { need_cmd head # Architecture detection without dependencies beyond coreutils. # ELF files start out "\x7fELF", and the following byte is # 0x01 for 32-bit and # 0x02 for 64-bit. # The printf builtin on some shells like dash only supports octal # escape sequences, so we use those. local _current_exe=$1 local _current_exe_head _current_exe_head=$(head -c 5 "$_current_exe") if [ "$_current_exe_head" = "$(printf '\177ELF\001')" ]; then echo 32 elif [ "$_current_exe_head" = "$(printf '\177ELF\002')" ]; then echo 64 else err "unknown platform bitness" exit 1; fi } is_host_amd64_elf() { local _current_exe=$1 need_cmd head need_cmd tail # ELF e_machine detection without dependencies beyond coreutils. # Two-byte field at offset 0x12 indicates the CPU, # but we're interested in it being 0x3E to indicate amd64, or not that. local _current_exe_machine _current_exe_machine=$(head -c 19 "$_current_exe" | tail -c 1) [ "$_current_exe_machine" = "$(printf '\076')" ] } get_endianness() { local _current_exe=$1 local cputype=$2 local suffix_eb=$3 local suffix_el=$4 # detect endianness without od/hexdump, like get_bitness() does. need_cmd head need_cmd tail local _current_exe_endianness _current_exe_endianness="$(head -c 6 "$_current_exe" | tail -c 1)" if [ "$_current_exe_endianness" = "$(printf '\001')" ]; then echo "${cputype}${suffix_el}" elif [ "$_current_exe_endianness" = "$(printf '\002')" ]; then echo "${cputype}${suffix_eb}" else err "unknown platform endianness" exit 1 fi } # Detect the Linux/LoongArch UAPI flavor, with all errors being non-fatal. # Returns 0 or 234 in case of successful detection, 1 otherwise (/tmp being # noexec, or other causes). check_loongarch_uapi() { need_cmd base64 local _tmp if ! _tmp="$(ensure mktemp)"; then return 1 fi # Minimal Linux/LoongArch UAPI detection, exiting with 0 in case of # upstream ("new world") UAPI, and 234 (-EINVAL truncated) in case of # old-world (as deployed on several early commercial Linux distributions # for LoongArch). # # See https://gist.github.com/xen0n/5ee04aaa6cecc5c7794b9a0c3b65fc7f for # source to this helper binary. ignore base64 -d > "$_tmp" <<EOF f0VMRgIBAQAAAAAAAAAAAAIAAgEBAAAAeAAgAAAAAABAAAAAAAAAAAAAAAAAAAAAQQAAAEAAOAAB AAAAAAAAAAEAAAAFAAAAAAAAAAAAAAAAACAAAAAAAAAAIAAAAAAAJAAAAAAAAAAkAAAAAAAAAAAA AQAAAAAABCiAAwUAFQAGABUAByCAAwsYggMAACsAC3iBAwAAKwAxen0n EOF ignore chmod u+x "$_tmp" if [ ! -x "$_tmp" ]; then ignore rm "$_tmp" return 1 fi "$_tmp" local _retval=$? ignore rm "$_tmp" return "$_retval" } ensure_loongarch_uapi() { check_loongarch_uapi case $? in 0) return 0 ;; 234) err 'Your Linux kernel does not provide the ABI required by this Rust distribution.' err 'Please check with your OS provider for how to obtain a compatible Rust package for your system.' exit 1 ;; *) warn "Cannot determine current system's ABI flavor, continuing anyway." warn 'Note that the official Rust distribution only works with the upstream kernel ABI.' warn 'Installation will fail if your running kernel happens to be incompatible.' ;; esac } get_architecture() { local _ostype _cputype _bitness _arch _clibtype _ostype="$(uname -s)" _cputype="$(uname -m)" _clibtype="gnu" if [ "$_ostype" = Linux ]; then if [ "$(uname -o)" = Android ]; then _ostype=Android fi if ldd --version 2>&1 | grep -q 'musl'; then _clibtype="musl" fi fi if [ "$_ostype" = Darwin ]; then # Darwin `uname -m` can lie due to Rosetta shenanigans. If you manage to # invoke a native shell binary and then a native uname binary, you can # get the real answer, but that's hard to ensure, so instead we use # `sysctl` (which doesn't lie) to check for the actual architecture. if [ "$_cputype" = i386 ]; then # Handling i386 compatibility mode in older macOS versions (<10.15) # running on x86_64-based Macs. # Starting from 10.15, macOS explicitly bans all i386 binaries from running. # See: <https://support.apple.com/en-us/HT208436> # Avoid `sysctl: unknown oid` stderr output and/or non-zero exit code. if sysctl hw.optional.x86_64 2> /dev/null || true | grep -q ': 1'; then _cputype=x86_64 fi elif [ "$_cputype" = x86_64 ]; then # Handling x86-64 compatibility mode (a.k.a. Rosetta 2) # in newer macOS versions (>=11) running on arm64-based Macs. # Rosetta 2 is built exclusively for x86-64 and cannot run i386 binaries. # Avoid `sysctl: unknown oid` stderr output and/or non-zero exit code. if sysctl hw.optional.arm64 2> /dev/null || true | grep -q ': 1'; then _cputype=arm64 fi fi fi if [ "$_ostype" = SunOS ]; then # Both Solaris and illumos presently announce as "SunOS" in "uname -s" # so use "uname -o" to disambiguate. We use the full path to the # system uname in case the user has coreutils uname first in PATH, # which has historically sometimes printed the wrong value here. if [ "$(/usr/bin/uname -o)" = illumos ]; then _ostype=illumos fi # illumos systems have multi-arch userlands, and "uname -m" reports the # machine hardware name; e.g., "i86pc" on both 32- and 64-bit x86 # systems. Check for the native (widest) instruction set on the # running kernel: if [ "$_cputype" = i86pc ]; then _cputype="$(isainfo -n)" fi fi local _current_exe case "$_ostype" in Android) _ostype=linux-android ;; Linux) _current_exe=$(get_current_exe) _ostype=unknown-linux-$_clibtype _bitness=$(get_bitness "$_current_exe") ;; FreeBSD) _ostype=unknown-freebsd ;; NetBSD) _ostype=unknown-netbsd ;; DragonFly) _ostype=unknown-dragonfly ;; Darwin) _ostype=apple-darwin ;; illumos) _ostype=unknown-illumos ;; MINGW* | MSYS* | CYGWIN* | Windows_NT) _ostype=pc-windows-gnu ;; *) err "unrecognized OS type: $_ostype" exit 1 ;; esac case "$_cputype" in i386 | i486 | i686 | i786 | x86) _cputype=i686 ;; xscale | arm) _cputype=arm if [ "$_ostype" = "linux-android" ]; then _ostype=linux-androideabi fi ;; armv6l) _cputype=arm if [ "$_ostype" = "linux-android" ]; then _ostype=linux-androideabi else _ostype="${_ostype}eabihf" fi ;; armv7l | armv8l) _cputype=armv7 if [ "$_ostype" = "linux-android" ]; then _ostype=linux-androideabi else _ostype="${_ostype}eabihf" fi ;; aarch64 | arm64) _cputype=aarch64 ;; x86_64 | x86-64 | x64 | amd64) _cputype=x86_64 ;; mips) _cputype=$(get_endianness "$_current_exe" mips '' el) ;; mips64) if [ "$_bitness" -eq 64 ]; then # only n64 ABI is supported for now _ostype="${_ostype}abi64" _cputype=$(get_endianness "$_current_exe" mips64 '' el) fi ;; ppc) _cputype=powerpc ;; ppc64) _cputype=powerpc64 ;; ppc64le) _cputype=powerpc64le ;; s390x) _cputype=s390x ;; riscv64) _cputype=riscv64gc ;; loongarch64) _cputype=loongarch64 ensure_loongarch_uapi ;; *) err "unknown CPU type: $_cputype" exit 1 esac # Detect 64-bit linux with 32-bit userland if [ "${_ostype}" = unknown-linux-gnu ] && [ "${_bitness}" -eq 32 ]; then case $_cputype in x86_64) if [ -n "${RUSTUP_CPUTYPE:-}" ]; then _cputype="$RUSTUP_CPUTYPE" else { # 32-bit executable for amd64 = x32 if is_host_amd64_elf "$_current_exe"; then { err "This host is running an x32 userland, for which no native toolchain is provided." err "You will have to install multiarch compatibility with i686 or amd64." err "To do so, set the RUSTUP_CPUTYPE environment variable set to i686 or amd64 and re-run this script." err "You will be able to add an x32 target after installation by running \`rustup target add x86_64-unknown-linux-gnux32\`." exit 1 }; else _cputype=i686 fi }; fi ;; mips64) _cputype=$(get_endianness "$_current_exe" mips '' el) ;; powerpc64) _cputype=powerpc ;; aarch64) _cputype=armv7 if [ "$_ostype" = "linux-android" ]; then _ostype=linux-androideabi else _ostype="${_ostype}eabihf" fi ;; riscv64gc) err "riscv64 with 32-bit userland unsupported" exit 1 ;; esac fi # Detect armv7 but without the CPU features Rust needs in that build, # and fall back to arm. # See https://github.com/rust-lang/rustup.rs/issues/587. if [ "$_ostype" = "unknown-linux-gnueabihf" ] && [ "$_cputype" = armv7 ]; then if ! (ensure grep '^Features' /proc/cpuinfo | grep -E -q 'neon|simd') ; then # Either `/proc/cpuinfo` is malformed or unavailable, or # at least one processor does not have NEON (which is asimd on armv8+). _cputype=arm fi fi _arch="${_cputype}-${_ostype}" RETVAL="$_arch" } __print() { if $_ansi_escapes_are_valid; then printf '\33[1m%s:\33[0m %s\n' "$1" "$2" >&2 else printf '%s: %s\n' "$1" "$2" >&2 fi } warn() { __print 'warn' "$1" >&2 } say() { if [ "$RUSTUP_QUIET" = "no" ]; then __print 'info' "$1" >&2 fi } # NOTE: you are required to exit yourself # we don't do it here because of multiline errors err() { __print 'error' "$1" >&2 } need_cmd() { if ! check_cmd "$1"; then err "need '$1' (command not found)" exit 1 fi } check_cmd() { command -v "$1" > /dev/null 2>&1 } assert_nz() { if [ -z "$1" ]; then err "assert_nz $2" exit 1 fi } # Run a command that should never fail. If the command fails execution # will immediately terminate with an error showing the failing # command. ensure() { if ! "$@"; then err "command failed: $*" exit 1 fi } # This is just for indicating that commands' results are being # intentionally ignored. Usually, because it's being executed # as part of error handling. ignore() { "$@" } # This wraps curl or wget. Try curl first, if not installed, # use wget instead. downloader() { # zsh does not split words by default, Required for curl retry arguments below. is_zsh && setopt local_options shwordsplit local _dld local _ciphersuites local _err local _status local _retry if check_cmd curl; then _dld=curl elif check_cmd wget; then _dld=wget else _dld='curl or wget' # to be used in error message of need_cmd fi if [ "$1" = --check ]; then need_cmd "$_dld" elif [ "$_dld" = curl ]; then check_curl_for_retry_support _retry="$RETVAL" get_ciphersuites_for_curl _ciphersuites="$RETVAL" if [ -n "$_ciphersuites" ]; then # shellcheck disable=SC2086 _err=$(curl $_retry --proto '=https' --tlsv1.2 --ciphers "$_ciphersuites" --silent --show-error --fail --location "$1" --output "$2" 2>&1) _status=$? else warn "Not enforcing strong cipher suites for TLS, this is potentially less secure" if ! check_help_for "$3" curl --proto --tlsv1.2; then warn "Not enforcing TLS v1.2, this is potentially less secure" # shellcheck disable=SC2086 _err=$(curl $_retry --silent --show-error --fail --location "$1" --output "$2" 2>&1) _status=$? else # shellcheck disable=SC2086 _err=$(curl $_retry --proto '=https' --tlsv1.2 --silent --show-error --fail --location "$1" --output "$2" 2>&1) _status=$? fi fi if [ -n "$_err" ]; then warn "$_err" if echo "$_err" | grep -q 404$; then err "installer for platform '$3' not found, this may be unsupported" exit 1 fi fi return $_status elif [ "$_dld" = wget ]; then if [ "$(wget -V 2>&1|head -2|tail -1|cut -f1 -d" ")" = "BusyBox" ]; then warn "using the BusyBox version of wget. Not enforcing strong cipher suites for TLS or TLS v1.2, this is potentially less secure" _err=$(wget "$1" -O "$2" 2>&1) _status=$? else get_ciphersuites_for_wget _ciphersuites="$RETVAL" if [ -n "$_ciphersuites" ]; then _err=$(wget --https-only --secure-protocol=TLSv1_2 --ciphers "$_ciphersuites" "$1" -O "$2" 2>&1) _status=$? else warn "Not enforcing strong cipher suites for TLS, this is potentially less secure" if ! check_help_for "$3" wget --https-only --secure-protocol; then warn "Not enforcing TLS v1.2, this is potentially less secure" _err=$(wget "$1" -O "$2" 2>&1) _status=$? else _err=$(wget --https-only --secure-protocol=TLSv1_2 "$1" -O "$2" 2>&1) _status=$? fi fi fi if [ -n "$_err" ]; then warn "$_err" if echo "$_err" | grep -q ' 404 Not Found$'; then err "installer for platform '$3' not found, this may be unsupported" exit 1 fi fi return $_status else err "Unknown downloader" # should not reach here exit 1 fi } check_help_for() { local _arch local _cmd local _arg _arch="$1" shift _cmd="$1" shift local _category if "$_cmd" --help | grep -q '"--help all"'; then _category="all" else _category="" fi case "$_arch" in *darwin*) if check_cmd sw_vers; then local _os_version local _os_major _os_version=$(sw_vers -productVersion) _os_major=$(echo "$_os_version" | cut -d. -f1) case $_os_major in 10) # If we're running on macOS, older than 10.13, then we always # fail to find these options to force fallback if [ "$(echo "$_os_version" | cut -d. -f2)" -lt 13 ]; then # Older than 10.13 warn "Detected macOS platform older than 10.13" return 1 fi ;; *) if ! { [ "$_os_major" -eq "$_os_major" ] 2>/dev/null && [ "$_os_major" -ge 11 ]; }; then # Unknown product version, warn and continue warn "Detected unknown macOS major version: $_os_version" warn "TLS capabilities detection may fail" fi ;; # We assume that macOS v11+ will always be okay. esac fi ;; esac for _arg in "$@"; do if ! "$_cmd" --help "$_category" | grep -q -- "$_arg"; then return 1 fi done true # not strictly needed } # Check if curl supports the --retry flag, then pass it to the curl invocation. check_curl_for_retry_support() { local _retry_supported="" # "unspecified" is for arch, allows for possibility old OS using macports, homebrew, etc. if check_help_for "notspecified" "curl" "--retry"; then _retry_supported="--retry 3" if check_help_for "notspecified" "curl" "--continue-at"; then # "-C -" tells curl to automatically find where to resume the download when retrying. _retry_supported="--retry 3 -C -" fi fi RETVAL="$_retry_supported" } # Return cipher suite string specified by user, otherwise return strong TLS 1.2-1.3 cipher suites # if support by local tools is detected. Detection currently supports these curl backends: # GnuTLS and OpenSSL (possibly also LibreSSL and BoringSSL). Return value can be empty. get_ciphersuites_for_curl() { if [ -n "${RUSTUP_TLS_CIPHERSUITES-}" ]; then # user specified custom cipher suites, assume they know what they're doing RETVAL="$RUSTUP_TLS_CIPHERSUITES" return fi local _openssl_syntax="no" local _gnutls_syntax="no" local _backend_supported="yes" if curl -V | grep -q ' OpenSSL/'; then _openssl_syntax="yes" elif curl -V | grep -iq ' LibreSSL/'; then _openssl_syntax="yes" elif curl -V | grep -iq ' BoringSSL/'; then _openssl_syntax="yes" elif curl -V | grep -iq ' GnuTLS/'; then _gnutls_syntax="yes" else _backend_supported="no" fi local _args_supported="no" if [ "$_backend_supported" = "yes" ]; then # "unspecified" is for arch, allows for possibility old OS using macports, homebrew, etc. if check_help_for "notspecified" "curl" "--tlsv1.2" "--ciphers" "--proto"; then _args_supported="yes" fi fi local _cs="" if [ "$_args_supported" = "yes" ]; then if [ "$_openssl_syntax" = "yes" ]; then _cs=$(get_strong_ciphersuites_for "openssl") elif [ "$_gnutls_syntax" = "yes" ]; then _cs=$(get_strong_ciphersuites_for "gnutls") fi fi RETVAL="$_cs" } # Return cipher suite string specified by user, otherwise return strong TLS 1.2-1.3 cipher suites # if support by local tools is detected. Detection currently supports these wget backends: # GnuTLS and OpenSSL (possibly also LibreSSL and BoringSSL). Return value can be empty. get_ciphersuites_for_wget() { if [ -n "${RUSTUP_TLS_CIPHERSUITES-}" ]; then # user specified custom cipher suites, assume they know what they're doing RETVAL="$RUSTUP_TLS_CIPHERSUITES" return fi local _cs="" if wget -V | grep -q '\-DHAVE_LIBSSL'; then # "unspecified" is for arch, allows for possibility old OS using macports, homebrew, etc. if check_help_for "notspecified" "wget" "TLSv1_2" "--ciphers" "--https-only" "--secure-protocol"; then _cs=$(get_strong_ciphersuites_for "openssl") fi elif wget -V | grep -q '\-DHAVE_LIBGNUTLS'; then # "unspecified" is for arch, allows for possibility old OS using macports, homebrew, etc. if check_help_for "notspecified" "wget" "TLSv1_2" "--ciphers" "--https-only" "--secure-protocol"; then _cs=$(get_strong_ciphersuites_for "gnutls") fi fi RETVAL="$_cs" } # Return strong TLS 1.2-1.3 cipher suites in OpenSSL or GnuTLS syntax. TLS 1.2 # excludes non-ECDHE and non-AEAD cipher suites. DHE is excluded due to bad # DH params often found on servers (see RFC 7919). Sequence matches or is # similar to Firefox 68 ESR with weak cipher suites disabled via about:config. # $1 must be openssl or gnutls. get_strong_ciphersuites_for() { if [ "$1" = "openssl" ]; then # OpenSSL is forgiving of unknown values, no problems with TLS 1.3 values on versions that don't support it yet. echo "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384" elif [ "$1" = "gnutls" ]; then # GnuTLS isn't forgiving of unknown values, so this may require a GnuTLS version that supports TLS 1.3 even if wget doesn't. # Begin with SECURE128 (and higher) then remove/add to build cipher suites. Produces same 9 cipher suites as OpenSSL but in slightly different order. echo "SECURE128:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS-ALL:-CIPHER-ALL:-MAC-ALL:-KX-ALL:+AEAD:+ECDHE-ECDSA:+ECDHE-RSA:+AES-128-GCM:+CHACHA20-POLY1305:+AES-256-GCM" fi } set +u case "$RUSTUP_INIT_SH_PRINT" in arch | architecture) get_architecture || exit 1 echo "$RETVAL" ;; *) main "$@" || exit 1 ;; esac
最新发布
09-12
<think>好的,我现在需要帮助用户解决他们在创建多架构镜像时遇到的错误。用户提供的报错信息是: ``` [root@hmn0001 ycj]# 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0 \ > --amend 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-x86_64 \ > --amend 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-arm64v8 -bash: 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0: No such file or directory ``` 首先,我需要分析这个错误的原因。用户是在执行什么命令的时候遇到这个问题的呢?看起来用户输入的命令行开始是直接输入了镜像地址,而没有命令本身。根据之前的对话历史,用户之前是在创建manifest清单,所以可能用户漏掉了`docker manifest create`这个命令,直接输入了镜像地址,导致shell将镜像地址当作可执行文件来执行,从而报错找不到文件或目录。 接下来,我需要确认用户的步骤是否正确。根据之前的指导,正确的步骤应该是使用`docker manifest create`命令来创建清单,然后添加各个架构的镜像。用户可能是在输入命令时遗漏了前面的`docker manifest create`部分,直接输入了镜像地址和`--amend`参数,导致shell无法识别。 另外,还需要检查用户的镜像标签是否正确。用户现在使用的是v1.0.0版本,而之前的示例中可能用的是latest标签,需要确认用户是否已经正确标记并推送了带有v1.0.0标签的不同架构镜像。例如,用户是否执行了类似`docker tag`命令来为x86和arm架构的镜像打上相应的标签,如v1.0.0-x86_64和v1.0.0-arm64v8,并推送到镜像仓库。 此外,用户可能没有启用Docker的实验性功能,导致无法使用`docker manifest`命令。需要提醒用户通过设置环境变量`export DOCKER_CLI_EXPERIMENTAL=enabled`来启用实验性功能,或者在Docker的配置文件中进行相应的设置。 还要考虑用户是否登录到了镜像仓库,如果没有登录,可能会导致权限问题,无法推送或创建manifest。需要建议用户运行`docker login 172.25.26.250:5000`进行登录。 最后,需要验证用户使用的Docker版本是否支持manifest命令,尤其是旧版本的Docker可能需要安装buildx插件。如果用户的Docker版本较旧,可能需要升级或安装buildx来支持多架构镜像的创建。 总结用户的错误原因可能是: 1. 在创建manifest清单时遗漏了`docker manifest create`命令,直接输入了镜像地址。 2. 镜像标签或命名不正确,导致无法找到对应的镜像。 3. 未启用Docker的实验性功能。 4. 未登录到镜像仓库,导致权限问题。 5. Docker版本过旧,不支持manifest命令。 接下来需要逐步指导用户纠正这些错误,确保他们正确使用`docker manifest create`命令,检查镜像标签是否正确,启用实验性功能,登录仓库,并验证Docker版本。同时,给出具体的正确命令示例,帮助用户正确执行操作。</think>根据您提供的错误信息,主要原因是命令语法格式错误。以下是问题分析和解决方案: 🔍 错误分析: 错误提示`No such file or directory`的直接原因是: ```bash # 错误示范(缺少docker manifest create命令) 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0 \ --amend ... # 被系统误认为要执行名为"172.25.26.250:5000..."的可执行文件 ``` ✅ 正确操作步骤: 请按以下流程修正命令: 1️⃣ 启用Docker实验性功能 ```bash export DOCKER_CLI_EXPERIMENTAL=enabled ``` 2️⃣ 创建manifest清单(关键修正点) ```bash docker manifest create 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0 \ --amend 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-x86_64 \ --amend 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-arm64v8 ``` 3️⃣ 验证前置条件(重要检查项): ```bash # 确认镜像已正确推送(需看到两个架构的镜像) curl -X GET http://172.25.26.250:5000/v2/c1oudnative/multi-arch-eval/tags/list # 确认Docker版本支持manifest(需19.03+) docker --version ``` 💡 常见问题排查: 1. 如果出现`manifest unknown`错误: ```bash # 登录镜像仓库(需要认证权限) docker login 172.25.26.250:5000 # 强制覆盖现有manifest docker manifest create --insecure 172.25.26.250:5000/... #(添加--insecure参数) ``` 2. 架构描述符建议使用标准格式: ```bash # 推荐标签格式(更规范) v1.0.0-amd64 # 替代x86_64 v1.0.0-arm64 # 替代arm64v8 ``` 3. 完整工作流示例: ```bash # 标记镜像 docker tag src_image:tag 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-amd64 docker tag src_image:tag 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-arm64 # 推送单架构镜像 docker push 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-amd64 docker push 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-arm64 # 创建并推送manifest docker manifest create 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0 \ --amend 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-amd64 \ --amend 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0-arm64 docker manifest push 172.25.26.250:5000/c1oudnative/multi-arch-eval:v1.0.0 ``` 📌 注意事项: 1. 所有带`-amd64`/`-arm64`后缀的镜像必须已推送到仓库 2. 仓库地址中的`c1oudnative`包含数字`1`而非字母`l`(需特别注意拼写) 3. 如果使用自签名证书,需要添加`--insecure`参数 请按上述修正方案操作后,如果仍然遇到问题,可以提供完整的命令执行日志以便进一步分析。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值