35c8420095
All container image references now pull from 80.71.235.15:3000/archipelago/
instead of Docker Hub and ghcr.io. image-versions.sh is the single source
of truth; all scripts use $*_IMAGE variables instead of hardcoded refs.
Files updated:
- scripts/image-versions.sh: central ARCHY_REGISTRY variable
- core/*/config.rs: registry whitelist includes app registry
- core/*/stacks.rs: Immich + Penpot stack images
- scripts/{first-boot,deploy-to-target,container-specs}.sh: use variables
- docker/*/Dockerfile: nginx base image from registry
- image-recipe/: ISO build, podman config, menu script
- scripts/{container-doctor,deploy-bitcoin-knots,fix-indeedhub,validate-app-manifest}.sh
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
60 lines
1.7 KiB
Bash
Executable File
60 lines
1.7 KiB
Bash
Executable File
#!/bin/bash
|
|
# Podman Installation and Configuration Script for Archipelago
|
|
# Configures Podman for rootless operation
|
|
|
|
set -e
|
|
|
|
echo "🐳 Configuring Podman for rootless operation..."
|
|
|
|
# Ensure archipelago user exists
|
|
if ! id "archipelago" &>/dev/null; then
|
|
echo "Creating archipelago user..."
|
|
adduser -D -s /bin/bash archipelago
|
|
fi
|
|
|
|
# Create Podman configuration directories
|
|
mkdir -p /home/archipelago/.config/containers
|
|
mkdir -p /home/archipelago/.local/share/containers/storage
|
|
|
|
# Configure storage
|
|
cat > /home/archipelago/.config/containers/storage.conf <<EOF
|
|
[storage]
|
|
driver = "overlay"
|
|
runroot = "/run/user/$(id -u archipelago)/containers"
|
|
graphroot = "/home/archipelago/.local/share/containers/storage"
|
|
EOF
|
|
|
|
# Configure registries (use Docker Hub and quay.io)
|
|
mkdir -p /home/archipelago/.config/containers/registries.conf.d
|
|
cat > /home/archipelago/.config/containers/registries.conf.d/000-shortnames.conf <<EOF
|
|
[registries.search]
|
|
registries = ['80.71.235.15:3000', 'docker.io', 'quay.io', 'ghcr.io']
|
|
|
|
[registries.insecure]
|
|
registries = ['80.71.235.15:3000']
|
|
|
|
[registries.block]
|
|
registries = []
|
|
EOF
|
|
|
|
# Set up subuid and subgid for rootless containers
|
|
if ! grep -q "^archipelago:" /etc/subuid; then
|
|
echo "archipelago:100000:65536" >> /etc/subuid
|
|
fi
|
|
|
|
if ! grep -q "^archipelago:" /etc/subgid; then
|
|
echo "archipelago:100000:65536" >> /etc/subgid
|
|
fi
|
|
|
|
# Create systemd user service directory
|
|
mkdir -p /home/archipelago/.config/systemd/user
|
|
|
|
# Enable lingering for archipelago user (allows user services to run without login)
|
|
loginctl enable-linger archipelago || true
|
|
|
|
# Set proper permissions
|
|
chown -R archipelago:archipelago /home/archipelago/.config
|
|
chown -R archipelago:archipelago /home/archipelago/.local
|
|
|
|
echo "✅ Podman configuration complete!"
|