[hydros-containers] Introduced package

2026-03-30 01:28:51 -04:00
parent 6da2d9274d
commit 425e2ad22d
3 changed files with 123 additions and 0 deletions
--- a/hydros-containers/containers/policy.json
+++ b/hydros-containers/containers/policy.json
@@ -0,0 +1,95 @@
+{
+  "default": [
+    {
+      "type": "reject"
+    }
+  ],
+  "transports": {
+    "docker": {
+      "git.hydrosaber.com/hydros/hydros": [
+        {
+          "type": "sigstoreSigned",
+          "keyPath": "/etc/pki/containers/hydros.pub",
+          "signedIdentity": {
+            "type": "matchRepository"
+          }
+        }
+      ],
+      "registry.access.redhat.com": [
+        {
+          "type": "signedBy",
+          "keyType": "GPGKeys",
+          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
+        }
+      ],
+      "registry.redhat.io": [
+        {
+          "type": "signedBy",
+          "keyType": "GPGKeys",
+          "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
+        }
+      ],
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "docker-daemon": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "atomic": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "containers-storage": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "dir": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "oci": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "oci-archive": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "docker-archive": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    },
+    "tarball": {
+      "": [
+        {
+          "type": "insecureAcceptAnything"
+        }
+      ]
+    }
+  }
+}
--- a/hydros-containers/containers/registries.d/git.hydrosaber.com-hydros.yaml
+++ b/hydros-containers/containers/registries.d/git.hydrosaber.com-hydros.yaml
@@ -0,0 +1,3 @@
+docker:
+  git.hydrosaber.com/hydros/hydros:
+    use-sigstore-attachments: true
--- a/hydros-containers/hydros-containers.spec
+++ b/hydros-containers/hydros-containers.spec
@@ -0,0 +1,25 @@
+Name:           hydros-containers
+Version:        0.0.1
+Release:        %autorelease
+Summary:        The bundle of configuration overrides for containers for HydrOS
+BuildArch:      noarch
+
+License:        GPL
+Source0:        source.tar.gz
+
+%description
+
+%prep
+%autosetup -C
+
+%install
+install -Dm0444 -t %{buildroot}%{_sysconfdir}/containers/ %{_builddir}/%{name}-%{version}/policy.json
+install -Dm0444 -t %{buildroot}%{_sysconfdir}/containers/registries.d/ %{_builddir}/%{name}-%{version}/registries.d/git.hydrosaber.com-hydros.yaml
+
+%files
+%{_sysconfdir}/containers/policy.json
+%{_sysconfdir}/containers/registries.d/git.hydrosaber.com-hydros.yaml
+
+%changelog
+* Mon Mar 30 2026 Eriq Taing <eriq12@protonmail.com>
+- First version packaged