spec

---
name: grootfs
templates:
  bin/btrfs-setup.erb:                      bin/btrfs-setup
  bin/overlay-xfs-setup.erb:                bin/overlay-xfs-setup
  bin/utils.erb:                            bin/utils
  bin/pre-start.erb:                        bin/pre-start
  config/grootfs_config.yml.erb:            config/grootfs_config.yml
  config/privileged_grootfs_config.yml.erb: config/privileged_grootfs_config.yml
  certs/remote-layer.crt.erb:               certs/remote-layer.crt
  certs/remote-layer.cert.erb:              certs/remote-layer.cert
  certs/remote-layer.key.erb:               certs/remote-layer.key

packages:
  - idmapper
  - btrfs-progs
  - xfs-progs
  - grootfs

consumes:
  - name: rootless_link
    type: garden_rootless_link
    optional: true

properties:
  grootfs.driver:
    description: "Filesystem driver to use."
    default: overlay-xfs
  grootfs.log_level:
    description: "Log level for grootfs - can be debug, info, error or fatal."
    default: info
  grootfs.dropsonde_port:
    description: "Local metron agent's port."
    default: 3457
  grootfs.insecure_docker_registry_list:
    description: "A list of IP:PORT tuples that we allow pulling docker images from using self-signed certificates."
    default: []
  grootfs.graph_cleanup_threshold_in_mb:
    description: "Total size of all container image filesystem layers before graph cleanup is activated. -1 disables graph cleanup."
    default: -1
  grootfs.skip_mount:
    description: "Do not mount image root filesystem automatically, just return the mount information."
    default: false

  tls.cert:
    description: "PEM-encoded tls certificate that can be used for client or server auth"
  tls.key:
    description: "PEM-encoded tls client key"
  tls.ca_cert:
    description: "PEM-encoded tls client CA certificate for asset upload/download"