Switch to zstd:chunked for building images

This commit is contained in:
Mathieu Strypsteen 2024-04-24 22:45:47 +02:00
parent c7a77ca106
commit 9f8699d20d
Signed by: mathieu
GPG key ID: 782A42E461BC6824
4 changed files with 4 additions and 5 deletions

View file

@ -8,5 +8,5 @@ fi
for container in */; do
container=${container%/}
id=$(podman build --ulimit nofile=-1:-1 -q "$container")
echo | podman push --compress --compression-format=zstd --sign-by-sigstore-private-key ~/Documents/cosign.key "$id" git.strypsteen.com/mathieu/"$container"
echo | podman push --compress --sign-by-sigstore-private-key ~/Documents/cosign.key "$id" git.strypsteen.com/mathieu/"$container"
done

View file

@ -0,0 +1,2 @@
[engine]
compression_format="zstd:chunked"

View file

@ -1,3 +0,0 @@
[Context]
sockets=!x11;!session-bus;!system-bus;!ssh-auth;!gpg-agent
filesystems=!host;!host-os;!host-etc;!home

View file

@ -35,8 +35,8 @@ set service router-advert interface eth3 prefix ::/64
set service dns forwarding listen-address 0.0.0.0
set service dns forwarding name-server 9.9.9.9
set service dns forwarding dnssec validate
set service dns forwarding allow-from 127.0.0.1/32
set service dns forwarding allow-from 192.168.0.0/16
set service dns forwarding exclude-throttle-address 9.9.9.9
set nat source rule 1 outbound-interface name eth0
set nat source rule 1 translation address masquerade