Creating tmp directory for certs search

Author: cftorres

.travis.yml

@@ -8,5 +8,4 @@ go_import_path: github.com/GoogleCloudPlatform/container-diff
 
 script:
  - ./.gofmt.sh
- - sudo rm -rf /etc/docker
  - travis_wait ./.container-diff-tests.sh

README.md

@@ -226,8 +226,6 @@ type MultiVersionInfo struct {
 
 To run container-diff on image IDs, docker must be installed.
 
-If encountering this error ```open /etc/docker/certs.d/gcr.io: permission
-denied```, run ```sudo rm -rf /etc/docker```.
 
 ## Example Run
 

utils/image_prep_utils.go

@@ -117,9 +117,14 @@ func (p CloudPrepper) getFileSystem() (string, error) {
 		panic(err)
 	}
 
+	// By default, the image library will try to look at /etc/docker/certs.d
+	// As a non-root user, this would result in a permissions error, so we avoid this
+	// by looking in a temporary directory we create in the container-diff home directory
 	cwd, _ := os.Getwd()
+	tmpCerts, _ := ioutil.TempDir(cwd, "certs")
+	defer os.RemoveAll(tmpCerts)
 	ctx := &types.SystemContext{
-		DockerCertPath: cwd,
+		DockerCertPath: tmpCerts,
 	}
 	img, err := ref.NewImage(ctx)
 	if err != nil {
@@ -162,9 +167,14 @@ func (p CloudPrepper) getConfig() (ConfigSchema, error) {
 		return ConfigSchema{}, err
 	}
 
+	// By default, the image library will try to look at /etc/docker/certs.d
+	// As a non-root user, this would result in a permissions error, so we avoid this
+	// by looking in a temporary directory we create in the container-diff home directory
 	cwd, _ := os.Getwd()
+	tmpCerts, _ := ioutil.TempDir(cwd, "certs")
+	defer os.RemoveAll(tmpCerts)
 	ctx := &types.SystemContext{
-		DockerCertPath: cwd,
+		DockerCertPath: tmpCerts,
 	}
 	img, err := ref.NewImage(ctx)
 	if err != nil {