heks-linux_containers (Untitled Document)

1.3 (heks-linux containers)

Renders the two files under ~/.config/containers that teach Podman where to look for images and how much to trust them:

- registries.conf lists the unqualified search registries, so podman pull alpine resolves without an explicit host name. - policy.json is deliberately permissive (insecureAcceptAnything) because this is a developer workstation, not a hardened registry mirror. Tighten it in your own containers-settings.scm override if that is wrong for you.

Note that Podman itself is installed through the Zypper package list; this module only owns the configuration.

Parameters
Procedures

1.3.1 Parameters

Parameter: containers-config-dir ¶

Default value:

"/root/.config/containers"

Parameter: containers-policy-config-filename ¶

Default value:

"policy.json"

Parameter: containers-registries-config-filename ¶

Default value:

"registries.conf"

1.3.2 Procedures

Procedure: install-containers-policy-config ¶

Write a permissive Podman signature policy to containers-config-dir.

Local overrides are read from $XDG_CONFIG_HOME/heks-linux/containers-settings.scm first.

Procedure: install-containers-registries-config ¶

Write the unqualified search registries to containers-config-dir.

Unlike the policy file this one is not derived from user settings, so it has no local override to load.