profiles/container/machinectl/amd64: new profile

11 files changed, 142 insertions, 0 deletions

diff --git a/profiles/common/package.use b/profiles/common/package.use
index 847d6348..e1c36965 100644
--- a/profiles/common/package.use
+++ b/profiles/common/package.use
@@ -152,3 +152,4 @@ dev-python/pydantic native-extensions
 net-analyzer/tcpdump suid
 sys-process/procps modern-top
 app-arch/xz-utils -extra-filters
+net-analyzer/tcpdump -samba
diff --git a/profiles/container/eapi b/profiles/container/eapi
new file mode 100644
index 00000000..7ed6ff82
--- /dev/null
+++ b/profiles/container/eapi
@@ -0,0 +1 @@
+5
diff --git a/profiles/container/make.defaults b/profiles/container/make.defaults
new file mode 100644
index 00000000..bf48de59
--- /dev/null
+++ b/profiles/container/make.defaults
@@ -0,0 +1,112 @@
+FEATURES="noinfo noman nodoc"
+
+INPUT_DEVICES="void"
+VIDEO_CARDS="dummy"
+
+# Interpreted languages
+USE="-introspection -lua"
+
+# Graphic
+USE="${USE} -gtk -gtk3 -qt -qt5 -xv"
+
+# Sound
+USE="${USE} -gstreamer"
+
+# Network
+USE="${USE} -snmp -zeroconf -iptables"
+
+# Security
+USE="${USE} seccomp"
+
+# Performance
+USE="${USE} aio"
+
+# Misc
+USE="${USE} -doc -examples -mime -usb -sound"
+
+# 18/12/2013 - beber
+# Setting NGINX_MODULES_HTTP is non functional, need to expand manually
+# First disable all of them, set enable needed one
+# W=nginx_modules_http ; sed -rne "s/^([a-zA-Z]([^ ]+)) .*/\t-${W}_\1/p" /usr/portage/profiles/desc/$W.desc | sort
+USE="${USE}
+	-nginx_modules_http_access
+	-nginx_modules_http_addition
+	-nginx_modules_http_auth_basic
+	-nginx_modules_http_auth_ldap
+	-nginx_modules_http_auth_pam
+	-nginx_modules_http_auth_request
+	-nginx_modules_http_autoindex
+	-nginx_modules_http_brotli
+	-nginx_modules_http_browser
+	-nginx_modules_http_cache_purge
+	-nginx_modules_http_charset
+	-nginx_modules_http_dav
+	-nginx_modules_http_dav_ext
+	-nginx_modules_http_degradation
+	-nginx_modules_http_echo
+	-nginx_modules_http_empty_gif
+	-nginx_modules_http_fancyindex
+	-nginx_modules_http_fastcgi
+	-nginx_modules_http_flv
+	-nginx_modules_http_geo
+	-nginx_modules_http_geoip
+	-nginx_modules_http_geoip2
+	-nginx_modules_http_grpc
+	-nginx_modules_http_gunzip
+	-nginx_modules_http_gzip
+	-nginx_modules_http_gzip_static
+	-nginx_modules_http_headers_more
+	-nginx_modules_http_image_filter
+	-nginx_modules_http_javascript
+	-nginx_modules_http_limit_conn
+	-nginx_modules_http_limit_conn
+	-nginx_modules_http_limit_req
+	-nginx_modules_http_lua
+	-nginx_modules_http_map
+	-nginx_modules_http_memc
+	-nginx_modules_http_memcached
+	-nginx_modules_http_metrics
+	-nginx_modules_http_mirror
+	-nginx_modules_http_mogilefs
+	-nginx_modules_http_mp4
+	-nginx_modules_http_naxsi
+	-nginx_modules_http_perl
+	-nginx_modules_http_proxy
+	-nginx_modules_http_push_stream
+	-nginx_modules_http_random_index
+	-nginx_modules_http_realip
+	-nginx_modules_http_referer
+	-nginx_modules_http_rewrite
+	-nginx_modules_http_scgi
+	-nginx_modules_http_secure_link
+	-nginx_modules_http_security
+	-nginx_modules_http_slice
+	-nginx_modules_http_slowfs_cache
+	-nginx_modules_http_spdy
+	-nginx_modules_http_split_clients
+	-nginx_modules_http_ssi
+	-nginx_modules_http_sticky
+	-nginx_modules_http_stub_status
+	-nginx_modules_http_sub
+	-nginx_modules_http_upload_progress
+	-nginx_modules_http_upstream_check
+	-nginx_modules_http_upstream_hash
+	-nginx_modules_http_upstream_ip_hash
+	-nginx_modules_http_upstream_keepalive
+	-nginx_modules_http_upstream_least_conn
+	-nginx_modules_http_upstream_zone
+	-nginx_modules_http_userid
+	-nginx_modules_http_uwsgi
+	-nginx_modules_http_vhost_traffic_status
+	-nginx_modules_http_xslt"
+USE="${USE}
+	nginx_modules_http_access
+	nginx_modules_http_auth_basic
+	nginx_modules_http_autoindex
+	nginx_modules_http_charset
+	nginx_modules_http_fancyindex
+	nginx_modules_http_fastcgi
+	nginx_modules_http_map
+	nginx_modules_http_rewrite
+	nginx_modules_http_realip
+	nginx_modules_http_stub_status"
diff --git a/profiles/container/nspawn/amd64/eapi b/profiles/container/nspawn/amd64/eapi
new file mode 100644
index 00000000..7ed6ff82
--- /dev/null
+++ b/profiles/container/nspawn/amd64/eapi
@@ -0,0 +1 @@
+5
diff --git a/profiles/container/nspawn/amd64/parent b/profiles/container/nspawn/amd64/parent
new file mode 100644
index 00000000..1a91f396
--- /dev/null
+++ b/profiles/container/nspawn/amd64/parent
@@ -0,0 +1,3 @@
+gentoo:targets/systemd
+gentoo:default/linux/amd64/23.0/no-multilib/hardened
+..
diff --git a/profiles/container/nspawn/eapi b/profiles/container/nspawn/eapi
new file mode 100644
index 00000000..7ed6ff82
--- /dev/null
+++ b/profiles/container/nspawn/eapi
@@ -0,0 +1 @@
+5
diff --git a/profiles/container/nspawn/parent b/profiles/container/nspawn/parent
new file mode 100644
index 00000000..f3229c5b
--- /dev/null
+++ b/profiles/container/nspawn/parent
@@ -0,0 +1 @@
+..
diff --git a/profiles/container/package.use b/profiles/container/package.use
new file mode 100644
index 00000000..86e4bfdc
--- /dev/null
+++ b/profiles/container/package.use
@@ -0,0 +1,3 @@
+net-proxy/haproxy slz -zlib tools pcre-jit
+sys-apps/systemd -kernel-install
+www-servers/nginx -ssl -http-cache pcre-jit threads
diff --git a/profiles/container/packages b/profiles/container/packages
new file mode 100644
index 00000000..4a52bb10
--- /dev/null
+++ b/profiles/container/packages
@@ -0,0 +1,17 @@
+-*app-admin/sudo
+-*app-misc/tmux
+-*mail-mta/exim
+-*net-firewall/iptables
+-*net-misc/socat
+-*net-misc/wget
+-*sys-apps/man-pages
+-*sys-apps/pv
+-*sys-boot/grub
+-*sys-kernel/linux-firmware
+-*sys-kernel/longterm-sources:6.1
+-*sys-process/cronie
+-*sys-process/lsof
+-*virtual/logger
+-*virtual/man
+-*virtual/openssh
+-*virtual/ssh
diff --git a/profiles/container/parent b/profiles/container/parent
new file mode 100644
index 00000000..4b4997b8
--- /dev/null
+++ b/profiles/container/parent
@@ -0,0 +1 @@
+../common
diff --git a/profiles/profiles.desc b/profiles/profiles.desc
index acafd319..f43c8802 100644
--- a/profiles/profiles.desc
+++ b/profiles/profiles.desc
@@ -33,5 +33,6 @@ amd64		server/ovh/kimsufi/2G				stable
 amd64		server/ovh/kimsufi/8G				stable
 amd64		server/ovh/kimsufi/500G				stable
 amd64		server/kvm/amd64				stable
+amd64		container/nspawn/amd64				stable
 arm		server/scaleway/C1				stable
 arm64		raspberry-pi/3b+				stable