container-cross-install: add bbclass for bundling containers into images

This class enables bundling pre-built OCI containers into Yocto images
at build time. It uses vdkr/vpdmn to process containers via QEMU,
producing properly formatted storage that can be merged into the
target rootfs.

Two mechanisms for bundling containers:

1. BUNDLED_CONTAINERS variable (direct specification):
   - Set in local.conf or image recipe
   - Format: "name:runtime[:autostart][:external]"
   - Dependencies auto-generated at parse time
   - Example: BUNDLED_CONTAINERS = "container-base:docker:autostart"

2. container-bundle packages (package-based):
   - Recipes inherit container-bundle.bbclass to create packages
   - Installing packages via IMAGE_INSTALL triggers processing
   - merge_installed_bundles() scans installed OCI directories
   - Runs vrunner once in batch-import mode for efficiency

Automatic dependency generation for BUNDLED_CONTAINERS:
- Parses entries at recipe parse time via python __anonymous()
- Derives recipe name from OCI dir names (strips -latest-oci/-oci suffix)
- Generates do_rootfs[depends] on recipe:do_image_complete
- Use :external tag to skip dependency for third-party blobs
- Single "bitbake container-image-host" builds containers + image

Usage in image recipe:
    inherit container-cross-install

Features:
- Automatic detection of target architecture
- Support for both Docker and Podman runtimes
- Batch import mode for efficiency with multiple containers
- Autostart support via systemd services (Docker) or Quadlet (Podman)
- Integration with vrunner for QEMU-based processing
- Backwards compatible with legacy -latest-oci naming convention

The class processes containers during do_rootfs and merges the
resulting storage into /var/lib/docker or /var/lib/containers.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 9 insertions, 2 deletions

diff --git a/recipes-containers/container-host-config/container-host-config/storage.conf b/recipes-containers/container-host-config/container-host-config/storage.conf
index cb4525f2..50cb9c91 100644
--- a/recipes-containers/container-host-config/container-host-config/storage.conf
+++ b/recipes-containers/container-host-config/container-host-config/storage.conf
@@ -14,7 +14,10 @@
 [storage]
 
 # Default Storage Driver, Must be set for proper operation.
-driver = "overlay"
+# Using VFS driver for compatibility with cross-compiled container images.
+# VFS is slower than overlay but avoids permission issues when deploying
+# pre-built containers during Yocto image build (under pseudo/fakeroot).
+driver = "vfs"
 
 # Temporary storage location
 runroot = "/run/containers/storage"
@@ -109,6 +112,9 @@ pull_options = {enable_partial_images = "false", use_hard_links = "false", ostre
 # auto-userns-max-size=65536
 
 [storage.options.overlay]
+# NOTE: Using VFS driver, so overlay options are not used but kept for reference
+# if switching back to overlay driver.
+
 # ignore_chown_errors can be set to allow a non privileged user running with
 # a single UID within a user namespace to run containers. The user can pull
 # and use any image even those with multiple uids.  Note multiple UIDs will be
@@ -125,7 +131,8 @@ pull_options = {enable_partial_images = "false", use_hard_links = "false", ostre
 #mount_program = "/usr/bin/fuse-overlayfs"
 
 # mountopt specifies comma separated list of extra mount options
-mountopt = "nodev"
+# Commented out for VFS driver compatibility
+#mountopt = "nodev"
 
 # Set to skip a PRIVATE bind mount on the storage home directory.
 # skip_mount_home = "false"