seccomp.json needs to be installed in /usr/share/containers and will
be used by libpod as well as buildah. Without it, some containers
will not work due to seccomp usage that is otherwise blocked.
Fedora has switched to crun as the default container runtime. At the
moment it is the only runtime that supports CGroup v2 which in-turn
greatly helps with rootless mode. Support crun as an alternative to
the runc dependency.
Closes: https://bugs.gentoo.org/692118
Closes: https://github.com/gentoo/gentoo/pull/13743
Package-Manager: Portage-2.3.79, Repoman-2.3.18
Signed-off-by: Matthias Dahl <matthias.dahl@binary-island.eu>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
COMMON_DEPEND="
app-crypt/gpgme:=
>=app-emulation/conmon-2.0.0
- >=app-emulation/runc-1.0.0_rc6
+ || ( >=app-emulation/runc-1.0.0_rc6 app-emulation/crun )
dev-libs/libassuan:=
dev-libs/libgpg-error:=
sys-fs/lvm2
newins test/registries.conf registries.conf.example
newins test/policy.json policy.json.example
+ insinto /usr/share/containers
+ doins seccomp.json
+
newinitd "${FILESDIR}"/podman.initd podman
insinto /etc/logrotate.d