1 files changed, 74 insertions, 0 deletions
diff --git a/opt/containers-common/MAKEPKG b/opt/containers-common/MAKEPKG
new file mode 100644
index 0000000..a45ddb3
--- /dev/null
+++ b/opt/containers-common/MAKEPKG
@@ -0,0 +1,74 @@
+#!/bin/mkpkg
+# *** Flux Linux ***
+# description: Configuration files for container tools
+# url: https://github.com/containers/common
+
+name=containers-common
+version=1.0
+release=1
+depends=()
+source=()
+
+sha256sums=(
+)
+
+build() {
+    install -d $PKG/etc/containers
+
+    # registries.conf
+    printf '%s\n' \
+        'unqualified-search-registries = ["docker.io"]' \
+        '' \
+        '[[registry]]' \
+        'prefix = "docker.io"' \
+        'location = "docker.io"' \
+        > $PKG/etc/containers/registries.conf
+
+    # storage.conf
+    printf '%s\n' \
+        '[storage]' \
+        'driver = "overlay"' \
+        'runroot = "/run/containers/storage"' \
+        'graphroot = "/var/lib/containers/storage"' \
+        '' \
+        '[storage.options.overlay]' \
+        'mountopt = "nodev,metacopy=off"' \
+        > $PKG/etc/containers/storage.conf
+
+    # policy.json
+    printf '%s\n' \
+        '{' \
+        '    "default": [' \
+        '        { "type": "insecureAcceptAnything" }' \
+        '    ],' \
+        '    "transports": {' \
+        '        "docker-daemon": {' \
+        '            "": [{ "type": "insecureAcceptAnything" }]' \
+        '        }' \
+        '    }' \
+        '}' \
+        > $PKG/etc/containers/policy.json
+
+    # containers.conf - tuned for musl/runit/no-systemd
+    printf '%s\n' \
+        '[containers]' \
+        'init_path = "/usr/libexec/podman/catatonit"' \
+        '' \
+        '[engine]' \
+        'runtime = "crun"' \
+        'cgroup_manager = "cgroupfs"' \
+        'events_logger = "file"' \
+        'helper_binaries_dir = ["/usr/libexec/podman"]' \
+        '' \
+        '[network]' \
+        'network_backend = "netavark"' \
+        'default_rootless_network_cmd = "pasta"' \
+        > $PKG/etc/containers/containers.conf
+}
+
+signify() {
+    untrusted comment: public key
+    RWTZ9IduCSQ/mL8337TEUinPwT92xFEUpD92hkS7IxcOnzTt9QdpohT3
+}
+
+# vim: filetype=sh