#!/bin/bash
# This script delivers current documentation/configs and assures it has the intended
# settings for a particular branch/release.
# For questions reach to Jindrich Novy <jnovy@redhat.com>

ensure() {
  if grep ^$2[[:blank:]].*= $1 > /dev/null
  then
    sed -i "s;^$2[[:blank:]]=.*;$2 = $3;" $1
  else
    if grep ^\#.*$2[[:blank:]].*= $1 > /dev/null
    then
      sed -i "/^#.*$2[[:blank:]].*=/a \
$2 = $3" $1
    else
      echo "$2 = $3" >> $1
    fi
  fi
}

#./pyxis.sh
#./update-vendored.sh
spectool -f -g containers-common.spec
for FILE in *; do
  [ -s "$FILE" ]
  if [ $? == 1 ] && [ "$FILE" != "sources" ]; then
    echo "empty file: $FILE"
    exit 1
  fi
done
# The following settings are now handled by vendor drop-in config files:
# 00-storage.conf sets driver, 00-storage-rootful.conf / 00-storage-rootless.conf
# set mountopt, and 00-rhel-registries.conf sets unqualified-search-registries.
#ensure storage.conf    driver                        \"overlay\"
#ensure storage.conf    mountopt                      \"nodev,metacopy=on\"
#ensure registries.conf unqualified-search-registries [\"registry.access.redhat.com\",\ \"registry.redhat.io\",\ \"docker.io\"]

if pwd | grep -e rhel-8 -e c8s > /dev/null
then
awk -i inplace '/#default_capabilities/,/#\]/{gsub("#","",$0)}1' containers.conf
ensure registries.conf short-name-mode               \"permissive\"
ensure containers.conf runtime                       \"runc\"
ensure containers.conf events_logger                 \"file\"
ensure containers.conf log_driver                    \"k8s-file\"
ensure containers.conf network_backend               \"cni\"
if ! grep \"NET_RAW\" containers.conf > /dev/null
then
  sed -i '/^default_capabilities/a \
  "NET_RAW",' containers.conf
fi
if ! grep \"SYS_CHROOT\" containers.conf > /dev/null
then
  sed -i '/^default_capabilities/a \
  "SYS_CHROOT",' containers.conf
fi

elif pwd | grep -e rhel-9 -e c9s > /dev/null
then
ensure registries.conf short-name-mode               \"enforcing\"
ensure containers.conf runtime                       \"crun\"

elif pwd | grep -e rhel-10 -e c10s > /dev/null
then
# These settings are now handled by vendor drop-in config files:
# 00-rhel-registries.conf sets short-name-mode, 00-containers.conf sets runtime,
# and enable_partial_images upstream default is already "false".
#ensure registries.conf short-name-mode               \"enforcing\"
#ensure containers.conf runtime                       \"crun\"
#ensure storage.conf    enable_partial_images         \"false\"
else
echo "Unknown release"
fi

[ `grep \"keyctl\", seccomp.json | wc -l` == 0 ] && sed -i '/\"kill\",/i \
				"keyctl",' seccomp.json
[ `grep \"socket\", seccomp.json | wc -l` == 0 ] && sed -i '/\"socketcall\",/i \
				"socket",' seccomp.json
rhpkg clone redhat-release
cd redhat-release
rhpkg switch-branch rhel-10.1
rhpkg prep
cp -f redhat-release-*/redhat-release-*/REKOR-signing-key ../
cp -f redhat-release-*/redhat-release-*/SIGSTORE-redhat-release3 ../
cd -
rm -rf redhat-release