Format config templates

templates/docker/config

@@ -1,5 +1,5 @@
 startup=0
-gpu_passthrough_intel=0
+gpu_passthrough_intel=1
 gpu_passthrough_nvidia=0
 
 # Use macvlan networking to provide an isolated network namespace,
@@ -14,12 +14,17 @@ systemd_nspawn_user_args=--network-macvlan=eno1
 # Script to run on the HOST before starting the jail
 # Load kernel module and config kernel settings required for docker
 pre_start_hook=#!/usr/bin/bash
+    set -euo pipefail
     echo 'PRE_START_HOOK'
     echo 1 > /proc/sys/net/ipv4/ip_forward
     modprobe br_netfilter
     echo 1 > /proc/sys/net/bridge/bridge-nf-call-iptables
     echo 1 > /proc/sys/net/bridge/bridge-nf-call-ip6tables
 
+# Only used while creating the jail
+distro=debian
+release=bookworm
+
 # Install docker inside the jail:
 # https://docs.docker.com/engine/install/debian/#install-using-the-repository
 # NOTE: this script will run in the host networking namespace and ignores
@@ -54,6 +59,3 @@ systemd_nspawn_default_args=--keep-unit
     --boot
     --bind-ro=/sys/module
     --inaccessible=/sys/module/apparmor
-
-# Used by jlmkr create
-initial_rootfs_image=debian bookworm

templates/incus/config

@@ -1,3 +1,4 @@
+# WARNING: EXPERIMENTAL CONFIG TEMPLATE!
 startup=0
 gpu_passthrough_intel=1
 gpu_passthrough_nvidia=0
@@ -20,6 +21,7 @@ systemd_nspawn_user_args=--network-macvlan=eno1
 # Script to run on the HOST before starting the jail
 # Load kernel module and config kernel settings required for incus
 pre_start_hook=#!/usr/bin/bash
+    set -euo pipefail
     echo 'PRE_START_HOOK'
     echo 1 > /proc/sys/net/ipv4/ip_forward
     modprobe br_netfilter
@@ -27,6 +29,10 @@ pre_start_hook=#!/usr/bin/bash
     echo 1 > /proc/sys/net/bridge/bridge-nf-call-ip6tables
     modprobe vhost_vsock
 
+# Only used while creating the jail
+distro=debian
+release=bookworm
+
 # Install incus according to:
 # https://github.com/zabbly/incus#installation
 # NOTE: this script will run in the host networking namespace and ignores
@@ -65,6 +71,3 @@ systemd_nspawn_default_args=--keep-unit
     --boot
     --bind-ro=/sys/module
     --inaccessible=/sys/module/apparmor
-
-# Used by jlmkr create
-initial_rootfs_image=debian bookworm

templates/lxd/config

@@ -1,3 +1,4 @@
+# WARNING: EXPERIMENTAL CONFIG TEMPLATE!
 startup=0
 gpu_passthrough_intel=1
 gpu_passthrough_nvidia=0
@@ -20,6 +21,7 @@ systemd_nspawn_user_args=--network-bridge=br1
 # Script to run on the HOST before starting the jail
 # Load kernel module and config kernel settings required for lxd
 pre_start_hook=#!/usr/bin/bash
+    set -euo pipefail
     echo 'PRE_START_HOOK'
     echo 1 > /proc/sys/net/ipv4/ip_forward
     modprobe br_netfilter
@@ -27,6 +29,10 @@ pre_start_hook=#!/usr/bin/bash
     echo 1 > /proc/sys/net/bridge/bridge-nf-call-ip6tables
     modprobe vhost_vsock
 
+# Only used while creating the jail
+distro=ubuntu
+release=jammy
+
 # NOTE: this script will run in the host networking namespace and ignores
 # all systemd_nspawn_user_args such as bind mounts
 initial_setup=#!/usr/bin/bash
@@ -51,6 +57,3 @@ systemd_nspawn_default_args=--keep-unit
     --boot
     --bind-ro=/sys/module
     --inaccessible=/sys/module/apparmor
-
-# Used by jlmkr create
-initial_rootfs_image=ubuntu jammy

templates/podman/config

@@ -14,16 +14,20 @@ systemd_nspawn_user_args=--network-macvlan=eno1
 # Script to run on the HOST before starting the jail
 # Load kernel module and config kernel settings required for podman
 pre_start_hook=#!/usr/bin/bash
+    set -euo pipefail
     echo 'PRE_START_HOOK'
     echo 1 > /proc/sys/net/ipv4/ip_forward
     modprobe br_netfilter
     echo 1 > /proc/sys/net/bridge/bridge-nf-call-iptables
     echo 1 > /proc/sys/net/bridge/bridge-nf-call-ip6tables
 
+# Only used while creating the jail
+distro=fedora
+release=39
+
 # Install podman inside the jail
 # NOTE: this script will run in the host networking namespace and ignores
 # all systemd_nspawn_user_args such as bind mounts
-
 initial_setup=#!/usr/bin/bash
     set -euo pipefail
     dnf -y install podman
@@ -48,6 +52,3 @@ systemd_nspawn_default_args=--keep-unit
     --boot
     --bind-ro=/sys/module
     --inaccessible=/sys/module/apparmor
-
-# Used by jlmkr create
-initial_rootfs_image=fedora 39