podup 3.2.1

Translate and run docker-compose files on rootless Podman
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

//! Build the individual `.network`, `.volume` and `.container` units.

mod build;
mod container;
mod health;
mod network;
mod security;
mod volume;

pub(super) use build::build_unit;
pub(super) use container::{container_unit, UnitContext};
pub(super) use network::network_unit;
pub(super) use volume::volume_unit;

// Shared helpers from the sibling `render`/`warnings` modules and the parent
// `QuadletUnit` type, re-exported so the unit submodules import them from here.
use super::render::{
	render_command, render_publish_port, render_restart, render_tmpfs_mount, render_volume,
	sorted_label_pairs, sorted_pairs, unit_stem, Section,
};
use super::warnings::collect_warnings;
use super::QuadletUnit;

/// The ownership marker every generated unit carries as its literal first
/// line: a `#` comment, ignored by systemd, naming the project that owns the
/// unit.
///
/// This is deliberately separate from the `Label=podup.project=<project>`
/// line each unit also carries (kept for runtime scoping — Podman uses it for
/// container/secret lookups). A compose service's user-supplied `labels:` are
/// rendered into the same section as that `Label=` line, in the same
/// `Key=Value` shape, so a service declaring `labels: {podup.project: other}`
/// produces an indistinguishable forged `Label=podup.project=other` line
/// ahead of the real one. A `#`-prefixed line cannot be forged the same way:
/// compose labels only ever become `Label=key=value` entries, never a
/// comment, so this marker is the line ownership checks (`unit_owner` in
/// `crate::autostart::quadlet`) must read instead.
fn owner_marker(project: &str) -> String {
	format!("# podup-owner: {project}\n")
}

/// Resolve a compose-relative path against the compose base directory.
///
/// Compose interprets a relative path against the compose file's directory.
/// systemd interprets one against **the unit file's** directory — units are
/// installed under `~/.config/containers/systemd`, which is not where the
/// project lives. Any path a generated unit carries must therefore be made
/// absolute here, or it silently resolves somewhere else once installed.
///
/// An already-absolute path is returned untouched, and `.` means the base
/// directory itself. A leading `./` is stripped so the result stays clean
/// (`/base/src`, not `/base/./src`) — cosmetic, both resolve identically.
fn abs_against(base_dir: &std::path::Path, path: &str) -> String {
	let p = std::path::Path::new(path);
	if p.is_absolute() {
		return path.to_string();
	}
	if p == std::path::Path::new(".") {
		return base_dir.display().to_string();
	}
	let rel = path.strip_prefix("./").unwrap_or(path);
	base_dir.join(rel).display().to_string()
}