3f9ee9
#!/bin/bash
3f9ee9
# This script delivers current documentation/configs and assures it has the intended
3f9ee9
# settings for a particular branch/release.
3f9ee9
# For questions reach to Jindrich Novy <jnovy@redhat.com>
3f9ee9
3f9ee9
ensure() {
3f9ee9
  if grep ^$2[[:blank:]].*= $1 > /dev/null
3f9ee9
  then
3f9ee9
    sed -i "s;^$2[[:blank:]]=.*;$2 = $3;" $1
3f9ee9
  else
3f9ee9
    if grep ^\#.*$2[[:blank:]].*= $1 > /dev/null
3f9ee9
    then
3f9ee9
      sed -i "/^#.*$2[[:blank:]].*=/a \
3f9ee9
$2 = $3" $1
3f9ee9
    else
3f9ee9
      echo "$2 = \"$3\"" >> $1
3f9ee9
    fi
3f9ee9
  fi
3f9ee9
}
3f9ee9
3f9ee9
./pyxis.sh
3f9ee9
./update-vendored.sh
3f9ee9
spectool -f -g skopeo.spec
3f9ee9
ensure storage.conf    driver                        \"overlay\"
3f9ee9
ensure storage.conf    mountopt                      \"nodev,metacopy=on\"
3f9ee9
ensure registries.conf unqualified-search-registries [\"registry.fedoraproject.org\",\ \"registry.access.redhat.com\",\ \"registry.centos.org\",\ \"docker.io\"]
3f9ee9
ensure containers.conf events_logger                 \"file\"
3f9ee9
ensure containers.conf infra_image                   \"registry.access.redhat.com/ubi8/pause\"
3f9ee9
ensure containers.conf runtime                       \"runc\"
3f9ee9
[ `grep "keyctl" seccomp.json | wc -l` == 0 ] && sed -i '/\"kill\",/i \
3f9ee9
				"keyctl",' seccomp.json
3f9ee9
sed -i '/\"socketcall\",/i \
3f9ee9
				"socket",' seccomp.json
3f9ee9
if ! grep \"NET_RAW\" containers.conf > /dev/null
3f9ee9
then
3f9ee9
  sed -i '/^default_capabilities/a \
3f9ee9
    "NET_RAW",' containers.conf
3f9ee9
fi