//go:build linux || windows

// Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License"). You may
// not use this file except in compliance with the License. A copy of the
// License is located at
//
//	http://aws.amazon.com/apache2.0/
//
// or in the "license" file accompanying this file. This file is distributed
// on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
// express or implied. See the License for the specific language governing
// permissions and limitations under the License.

package execcmd

import (
	"context"
	"errors"
	"fmt"
	"path/filepath"
	"strconv"
	"time"

	"github.com/aws/amazon-ecs-agent/ecs-agent/logger"
	"github.com/aws/amazon-ecs-agent/ecs-agent/logger/field"

	"github.com/docker/docker/api/types"

	apicontainer "github.com/aws/amazon-ecs-agent/agent/api/container"
	"github.com/aws/amazon-ecs-agent/agent/api/container/status"
	apitask "github.com/aws/amazon-ecs-agent/agent/api/task"
	"github.com/aws/amazon-ecs-agent/agent/dockerclient"
	"github.com/aws/amazon-ecs-agent/agent/dockerclient/dockerapi"
	"github.com/aws/amazon-ecs-agent/ecs-agent/utils/retry"
)

// RestartAgentIfStopped restarts the ExecCommandAgent in the container passed as parameter, only for ExecCommandAgent-enabled containers.
// The status of the ExecCommandAgent in the container is retrieved using a docker exec inspect call, using the dockerExecID
// stored in the AgentMetadata.DockerExecID.
//
// If the ExecCommandAgent is still running (or has never started), no action is taken.
// To actually restart the ExecCommandAgent, this function invokes this instance's StartAgent method.
func (m *manager) RestartAgentIfStopped(ctx context.Context, client dockerapi.DockerClient, task *apitask.Task, container *apicontainer.Container, containerId string) (RestartStatus, error) {
	if !IsExecEnabledContainer(container) {
		logger.Warn("Attempt to restart ExecCommandAgent for a non ExecCommandAgent-enabled container was made", logger.Fields{
			field.TaskID:    task.GetID(),
			field.Container: container.Name,
		})
		return NotRestarted, nil
	}
	ma, _ := container.GetManagedAgentByName(ExecuteCommandAgentName)
	metadata := MapToAgentMetadata(ma.Metadata)
	if !m.isAgentStarted(ma) {
		return NotRestarted, nil
	}
	res, err := m.inspectExecAgentProcess(ctx, client, metadata)
	if err != nil || res == nil {
		// We don't want to report InspectContainerExec errors, just that we don't know what the status of the agent is
		return Unknown, nil
	}
	if res.Running { // agent still running, nothing to do
		return NotRestarted, nil
	}
	// Restart if not running
	//TODO: [ecs-exec] retry only for certain exit codes?
	logger.Warn("ExecCommandAgent Process stopped for container, restarting...", logger.Fields{
		field.TaskID:    task.GetID(),
		field.Container: container.Name,
		field.RuntimeID: containerId,
		"exitCode":      res.ExitCode,
	})
	container.UpdateManagedAgentByName(ExecuteCommandAgentName, apicontainer.ManagedAgentState{
		ID: ma.ID,
	})
	err = m.StartAgent(ctx, client, task, container, containerId)
	if err != nil {
		return NotRestarted, err
	}
	return Restarted, nil
}

func (m *manager) inspectExecAgentProcess(ctx context.Context, client dockerapi.DockerClient, metadata AgentMetadata) (*types.ContainerExecInspect, error) {
	backoff := retry.NewExponentialBackoff(m.retryMinDelay, m.retryMaxDelay, retryJitterMultiplier, retryDelayMultiplier)
	ctx, cancel := context.WithTimeout(ctx, m.inspectRetryTimeout)
	defer cancel()
	var (
		inspectRes *types.ContainerExecInspect
		inspectErr error
	)
	retry.RetryNWithBackoffCtx(ctx, backoff, maxRetries, func() error {
		inspectRes, inspectErr = client.InspectContainerExec(ctx, metadata.DockerExecID, dockerclient.ContainerExecInspectTimeout)
		if inspectErr != nil {
			retryable := true
			if _, ok := inspectErr.(*dockerapi.DockerTimeoutError); ok {
				retryable = false
			}
			return StartError{
				error:     inspectErr,
				retryable: retryable,
			}
		}
		return nil
	})
	return inspectRes, inspectErr
}

// StartAgent idempotently starts the ExecCommandAgent in the container passed as parameter, only for ExecCommandAgent-enabled containers.
// If no error is returned, it can be assumed the ExecCommandAgent is started.
func (m *manager) StartAgent(ctx context.Context, client dockerapi.DockerClient, task *apitask.Task, container *apicontainer.Container, containerId string) error {
	if !IsExecEnabledContainer(container) {
		logger.Warn("An attempt to start ExecCommandAgent for a non ExecCommandAgent-enabled container was made", logger.Fields{
			field.TaskID:    task.GetID(),
			field.Container: container.Name,
			field.RuntimeID: containerId,
		})
		return nil
	}
	ma, _ := container.GetManagedAgentByName(ExecuteCommandAgentName)
	existingMetadata := MapToAgentMetadata(ma.Metadata)
	if ma.ID == "" {
		return errors.New("container has not been initialized: missing UUID")
	}
	// Guarantee idempotency if the container already has been started
	if m.isAgentStarted(ma) {
		res, err := m.inspectExecAgentProcess(ctx, client, existingMetadata)
		if err != nil {
			logger.Warn("Could not verify if the ExecCommandAgent was already running for container", logger.Fields{
				field.TaskID:    task.GetID(),
				field.Container: container.Name,
				field.RuntimeID: containerId,
				field.Error:     err,
			})
		} else if res.Running { // agent is already running, nothing to do
			logger.Warn("An attempt was made to start the ExecCommandAgent but it was already running", logger.Fields{
				field.TaskID:    task.GetID(),
				field.Container: container.Name,
				field.RuntimeID: containerId,
			})
			return nil
		}
	}

	backoff := retry.NewExponentialBackoff(m.retryMinDelay, m.retryMaxDelay, retryJitterMultiplier, retryDelayMultiplier)
	ctx, cancel := context.WithTimeout(ctx, m.startRetryTimeout)
	defer cancel()
	var startErr error

	var execMD *AgentMetadata
	retry.RetryNWithBackoffCtx(ctx, backoff, maxRetries, func() error {
		execMD, startErr = m.doStartAgent(ctx, client, task, ma, containerId)
		if startErr != nil {
			logger.Warn("Exec command agent failed to start for container", logger.Fields{
				field.TaskID:    task.GetID(),
				field.Container: container.Name,
				field.RuntimeID: containerId,
				field.Error:     startErr,
			})
		}
		return startErr
	})
	if startErr != nil {
		container.UpdateManagedAgentByName(ExecuteCommandAgentName, apicontainer.ManagedAgentState{
			ID:     ma.ID,
			Status: status.ManagedAgentStopped,
			Reason: startErr.Error(),
		})
		return startErr
	}
	container.UpdateManagedAgentByName(ExecuteCommandAgentName, apicontainer.ManagedAgentState{
		ID:            ma.ID,
		Status:        status.ManagedAgentRunning,
		LastStartedAt: time.Now(),
		Metadata:      execMD.ToMap(),
	})
	return nil
}

func (m *manager) doStartAgent(ctx context.Context, client dockerapi.DockerClient, task *apitask.Task, ma apicontainer.ManagedAgent, containerId string) (*AgentMetadata, error) {
	execAgentCmdBinDir := getExecAgentCmdBinDir(&ma)
	execAgentCmd := filepath.Join(execAgentCmdBinDir, SSMAgentBinName)
	execCfg := types.ExecConfig{
		User:   execAgentCmdUser,
		Detach: true,
		Cmd:    []string{execAgentCmd},
	}
	newMD := &AgentMetadata{}
	execRes, err := client.CreateContainerExec(ctx, containerId, execCfg, dockerclient.ContainerExecCreateTimeout)
	if err != nil {
		return newMD, StartError{error: fmt.Errorf("unable to start ExecuteCommandAgent [create]: %v", err), retryable: true}
	}

	logger.Debug("Created ExecCommandAgent for container", logger.Fields{
		field.TaskID:    task.GetID(),
		field.RuntimeID: containerId,
		"execResId":     execRes.ID,
	})

	err = client.StartContainerExec(ctx, execRes.ID, types.ExecStartCheck{Detach: true, Tty: false}, dockerclient.ContainerExecStartTimeout)
	if err != nil {
		return newMD, StartError{error: fmt.Errorf("unable to start ExecuteCommandAgent [pre-start]: %v", err), retryable: true}
	}
	logger.Debug("Sent ExecCommandAgent start signal for container", logger.Fields{
		field.TaskID:    task.GetID(),
		field.RuntimeID: containerId,
		"execResId":     execRes.ID,
	})

	inspect, err := client.InspectContainerExec(ctx, execRes.ID, dockerclient.ContainerExecInspectTimeout)
	if err != nil {
		return newMD, StartError{error: fmt.Errorf("unable to start ExecuteCommandAgent [inspect]: %v", err), retryable: true}
	}
	logger.Debug("Inspect ExecCommandAgent for container", logger.Fields{
		field.TaskID:    task.GetID(),
		field.RuntimeID: containerId,
		"pid":           inspect.Pid,
		"exitCode":      inspect.ExitCode,
		"running":       inspect.Running,
	})

	if !inspect.Running { //TODO: [ecs-exec] retry only for certain exit codes?
		return newMD, StartError{
			error:     fmt.Errorf("ExecuteCommandAgent process exited with exit code: %d", inspect.ExitCode),
			retryable: true,
		}
	}
	logger.Info("Started ExecCommandAgent for container", logger.Fields{
		field.TaskID:    task.GetID(),
		field.RuntimeID: containerId,
		"execResId":     inspect.Pid,
	})
	newMD.PID = strconv.Itoa(inspect.Pid)
	newMD.DockerExecID = execRes.ID
	newMD.CMD = execAgentCmd
	return newMD, nil
}