#!/bin/bash
spectool -f -g skopeo.spec
sed -i -e 's/^driver.*=.*/driver = "overlay"/' -e 's/^mountopt.*=.*/mountopt = "nodev,metacopy=on"/' storage.conf
[ `grep "keyctl" seccomp.json | wc -l` == 0 ] && sed -i '/\"kill\",/i \
				"keyctl",' seccomp.json
sed -i '/\"socketcall\",/i \
				"socket",' seccomp.json
sed -i 's/^#.*unqualified-search-registries.*=.*/unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "docker.io"]/g' registries.conf
sed -i 's,#.*events_logger.*=.*"journald",events_logger = "file",' containers.conf
if ! grep \"NET_RAW\" containers.conf
then
  sed -i '/^default_capabilities/a \
    "NET_RAW",' containers.conf
fi
if ! grep ^short-name-mode.*= registries.conf
then
  echo "# Enforcing mode for short names is default for RHEL9." >> registries.conf
  echo 'short-name-mode = "enforcing"' >> registries.conf
else
  sed -i 's/^short-name-mode.*=.*/short-name-mode = "enforcing"/' registries.conf
fi