Collection of cookbooks for Podman Quadlets

History

Nicolas Massé 9771f18de7 base: resync /etc/resolv.conf into Network=host containers With Network=host, Podman snapshots /etc/resolv.conf at container creation and bind-mounts the copy, so a later DNS change (DHCP renewal, renumbering, router replacement) never reaches running containers: they keep querying the old, now-dead resolvers until recreated, silently. Add a host-level mechanism in the base cookbook: - a systemd.path unit watching /etc/resolv.conf (catches any writer, including atomic rename-into-place); - a oneshot service running a dedicated script that rewrites each Network=host container's snapshot in place (same inode, so the bind-mount stays valid). Rewriting the content in place is picked up at runtime with no restart by both glibc (reloads on mtime change) and musl (stateless, re-reads every lookup), verified empirically. Scoped to NetworkMode=host only: bridged containers legitimately point at aardvark-dns and must not be touched. Fixes #1 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2 weeks ago
..
config	base: resync /etc/resolv.conf into Network=host containers	2 weeks ago
dropins/container.d	wait for container to terminate before returning from systemctl stop	3 months ago
profile.d/examples	install tools	5 months ago
tmpfiles.d	add cross-seed to seedbox	5 months ago
Makefile	base: resync /etc/resolv.conf into Network=host containers	2 weeks ago
README.md	base: resync /etc/resolv.conf into Network=host containers	2 weeks ago
centos-stream10.image	provides centos-stream 10 base image	5 months ago
discover-virtiofs-tags.service	add cross-seed to seedbox	5 months ago
fedora.image	add fedora base image to the base cookbook	5 months ago
hooks.mk	install tools	5 months ago
install-tools.service	install tools	5 months ago
overlay.bu	base: move /var disk partitioning from overlay.bu to local.bu	1 month ago
podman-resolv-conf-sync.path	base: resync /etc/resolv.conf into Network=host containers	2 weeks ago
podman-resolv-conf-sync.service	base: resync /etc/resolv.conf into Network=host containers	2 weeks ago
rpm-ostree-install-qemu-guest-agent.service	gate the install of qemu-gues-agent	1 month ago
var-lib-virtiofs-data.mount	add cross-seed to seedbox	5 months ago

README.md

Podman Quadlet: Base

Overview

The base cookbook provides foundational configuration for Fedora CoreOS systems. It includes:

fastfetch: A system information tool displayed on login, with color-coded output (red for root, blue for regular users).
tmpfiles configuration: Sets up required directories such as /var/lib/virtiofs/data.
QEMU guest agent: Optional installation for better VM integration.
SSH key persistence: Backs up and restores SSH host keys across reboots.
resolv.conf resync: Keeps Network=host containers in sync with the host's DNS. With Network=host, Podman snapshots /etc/resolv.conf at container creation and bind-mounts the copy, so a later DNS change (e.g. a DHCP renewal) never reaches running containers. A systemd.path unit watches /etc/resolv.conf and a oneshot service rewrites each host-network container's snapshot in place (same inode, no restart); bridged containers are left untouched. See issue #1.

This cookbook is used as an implicit dependency for other cookbooks that run on Fedora CoreOS.

Usage

In a separate terminal, follow the logs.

sudo make tail-logs

Install the base configuration.

sudo make clean install

You should see the install-fastfetch.service downloading and installing fastfetch. On next login, fastfetch will display system information.

To verify the installation:

fastfetch --version

Finally, remove the configuration and its data.

sudo make uninstall clean