Share CLI credentials over a unix socket

[Benehiko]

This PR is a proof of concept to share docker credentials from the CLI.
Related to #5858

What is the benefit of this?

• Keep the credentials in sync (OAuth credentials refresh - currently in CLI they do not, but DD does)
• Single source of truth
• No need to worry about if the credentials are stored in the config or inside the credential helper, the CLI already has mechanisms to detect it for you.

./build/docker-darwin-arm64 auth credential-serverStarting credential server...

curl http://localhost/credentials --unix-socket ~/.docker/run/docker_cli_credential_server.sock

- What I did
Created a command called auth which is a manager for the CLI credentials. This allows us to expose the credentials that the CLI have access to (config, credential helper etc.).

docker auth credential-server

This will create a new unix socket inside the default docker config directory ~/.docker/run/docker_cli_credential_server.sock. Using this socket you can retrieve the credentials, save credentials back and delete credentials.

The CLI has a built in mechanism that would detect the docker_cli_credential_server.sock and implements the credentials.Store interface so that any calls to the socket would correctly return types.AuthConfig as normal. This means that the socket iteslf becomes a credential store.

This also solves situatations where the docker CLI need credentials when run inside of a docker container.

docker buildx bake --set binary.platform=linux/arm64docker run -it -v ./build/docker-linux-arm64:/bin/docker -v /Users/benehiko/.docker/run/docker_cli_credential_server.sock:/root/.docker/run/docker_cli_credential_server.sock -v /var/run/docker.sock:/var/run/docker.sock alpine:latest /bin/ash/ # docker loginAuthenticating with existing credentials... [Username: <your username>]i Info → To login with a different account, run 'docker logout' followed by 'docker login'Login Succeeded

- How I did it

- How to verify it

- Human readable description for the release notes

- A picture of a cute animal (not mandatory but encouraged)

[codecov-commenter]

Codecov Report

❌ Patch coverage is 10.46512% with 154 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
cli/config/credentials/socket_store.go	0.00%	73 Missing ⚠️
cli/config/server/server.go	8.21%	66 Missing and 1 partial ⚠️
cli/command/auth/auth.go	55.55%	7 Missing and 1 partial ⚠️
cli/config/config.go	0.00%	2 Missing and 1 partial ⚠️
cli/config/configfile/file.go	0.00%	2 Missing and 1 partial ⚠️

📢 Thoughts on this report? Let us know!