container-registry: add local OCI registry infrastructure

Add container registry support for Yocto container workflows:
- container-registry.bbclass with helper functions
- container-registry-index.bb generates helper script with baked paths
- docker-registry-config.bb for Docker daemon on targets
- container-oci-registry-config.bb for Podman/Skopeo/Buildah targets
- IMAGE_FEATURES container-registry for easy target configuration

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 61 insertions, 0 deletions

diff --git a/recipes-containers/container-registry/files/container-registry-dev.yml b/recipes-containers/container-registry/files/container-registry-dev.yml
new file mode 100644
index 00000000..ed0a7c88
--- /dev/null
+++ b/recipes-containers/container-registry/files/container-registry-dev.yml
@@ -0,0 +1,61 @@
+# Container Registry Development Configuration
+# ============================================
+#
+# This is a simple configuration for running a local container registry
+# for development purposes. It uses filesystem storage and listens on
+# port 5000 without TLS.
+#
+# Usage:
+#   oe-run-native docker-distribution-native registry serve \
+#       /path/to/container-registry-dev.yml
+#
+# Or with explicit paths:
+#   /path/to/sysroot-native/usr/sbin/registry serve \
+#       /path/to/container-registry-dev.yml
+#
+# For production, consider:
+#   - Enabling TLS
+#   - Adding authentication
+#   - Using cloud storage (S3, GCS, Azure)
+#   - Setting up garbage collection
+#
+# See: https://distribution.github.io/distribution/about/configuration/
+
+version: 0.1
+
+log:
+  level: info
+  formatter: text
+  fields:
+    service: container-registry
+
+storage:
+  filesystem:
+    # Storage directory - override with REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY env var
+    rootdirectory: /tmp/container-registry
+  # Don't redirect to external storage
+  redirect:
+    disable: true
+  # Maintenance settings
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h    # 1 week
+      interval: 24h
+      dryrun: false
+
+http:
+  addr: :5000
+  headers:
+    X-Content-Type-Options: [nosniff]
+  # For development - allow HTTP. In production, use TLS.
+  # tls:
+  #   certificate: /path/to/cert.pem
+  #   key: /path/to/key.pem
+
+# Health check endpoint
+health:
+  storagedriver:
+    enabled: true
+    interval: 10s
+    threshold: 3