#!/bin/mkpkg
# *** Flux Linux ***
# description: Configuration files for container tools
# url: https://github.com/containers/common

name=containers-common
version=1.0
release=1
depends=()
source=()

sha256sums=(
)

build() {
    install -d $PKG/etc/containers

    # registries.conf
    printf '%s\n' \
        'unqualified-search-registries = ["docker.io"]' \
        '' \
        '[[registry]]' \
        'prefix = "docker.io"' \
        'location = "docker.io"' \
        > $PKG/etc/containers/registries.conf

    # storage.conf
    printf '%s\n' \
        '[storage]' \
        'driver = "overlay"' \
        'runroot = "/run/containers/storage"' \
        'graphroot = "/var/lib/containers/storage"' \
        '' \
        '[storage.options.overlay]' \
        'mountopt = "nodev,metacopy=off"' \
        > $PKG/etc/containers/storage.conf

    # policy.json
    printf '%s\n' \
        '{' \
        '    "default": [' \
        '        { "type": "insecureAcceptAnything" }' \
        '    ],' \
        '    "transports": {' \
        '        "docker-daemon": {' \
        '            "": [{ "type": "insecureAcceptAnything" }]' \
        '        }' \
        '    }' \
        '}' \
        > $PKG/etc/containers/policy.json

    # containers.conf - tuned for musl/runit/no-systemd
    printf '%s\n' \
        '[containers]' \
        'init_path = "/usr/libexec/podman/catatonit"' \
        '' \
        '[engine]' \
        'runtime = "crun"' \
        'cgroup_manager = "cgroupfs"' \
        'events_logger = "file"' \
        'helper_binaries_dir = ["/usr/libexec/podman"]' \
        '' \
        '[network]' \
        'network_backend = "netavark"' \
        'default_rootless_network_cmd = "pasta"' \
        > $PKG/etc/containers/containers.conf
}

signify() {
    untrusted comment: public key
    RWTZ9IduCSQ/mL8337TEUinPwT92xFEUpD92hkS7IxcOnzTt9QdpohT3
}

# vim: filetype=sh