diff options
| author | unitexe <unitexe70@gmail.com> | 2026-01-26 23:51:01 -0600 |
|---|---|---|
| committer | unitexe <unitexe70@gmail.com> | 2026-01-26 23:51:16 -0600 |
| commit | 5bd7a4926a27c323fa8c5c9b6dfaaf2199b70958 (patch) | |
| tree | 8426224531c4452ca7b804e4b7265bda4d8e6b31 /meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers | |
| parent | 10a18c2b17f42a741fa8c44dfb49f877a411a885 (diff) | |
Move CNCF distribution registry TLS cert & key generation to system unit
- Moving to system unit allows the generation scriptto update the system trust store
- Distribution quadlet waits for TLS cert & key generation using path activation
Diffstat (limited to 'meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers')
2 files changed, 3 insertions, 7 deletions
diff --git a/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/distribution.bb b/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/distribution.bb index dc769d5..6452836 100644 --- a/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/distribution.bb +++ b/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/distribution.bb @@ -10,7 +10,7 @@ SRC_URI = "\ file://LICENSE \ " -RDEPENDS:${PN}:append = " systemd-regkeygen" +RDEPENDS:${PN}:append = " systemd-distribution-path" RDEPENDS:${PN}:append = " podman" RDEPENDS:${PN}:append = " add-user-svc" diff --git a/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/files/distribution.container b/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/files/distribution.container index e8eb7dc..1a97db8 100644 --- a/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/files/distribution.container +++ b/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/distribution/files/distribution.container @@ -1,13 +1,12 @@ [Unit] Description=A distribution container -After=regkeygen.service -Requires=regkeygen.service +After=distribution.path [Container] ContainerName=distribution Image=docker.io/distribution/distribution:latest PublishPort=127.0.0.1:5000:5000,127.0.0.1:5001:5001 -Volume=%h/.config/containers/distribution/certs:/certs +Volume=%h/.config/containers/distribution/certs:/certs:ro Volume=%h/.config/containers/distribution/config.yml:/etc/distribution/config.yml:ro Volume=distribution-data:/var/lib/distribution @@ -17,6 +16,3 @@ RestartSec=10s RestartSteps=5 RestartMaxDelaySec=1min TimeoutStartSec=15min - -[Install] -WantedBy=default.target |