container-systemd-base: replace ROOTFS_POSTPROCESS_COMMAND with package

Factor systemd service masking into container-systemd-config package
that installs mask symlinks via do_install. This replaces the
ROOTFS_POSTPROCESS_COMMAND approach which is ignored in multi-layer
OCI mode.

The mask list is customizable via CONTAINER_SYSTEMD_MASK variable.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 31 insertions, 0 deletions

diff --git a/recipes-extended/container-systemd-config/container-systemd-config_1.0.bb b/recipes-extended/container-systemd-config/container-systemd-config_1.0.bb
new file mode 100644
index 00000000..a808fcd1
--- /dev/null
+++ b/recipes-extended/container-systemd-config/container-systemd-config_1.0.bb
@@ -0,0 +1,31 @@
+SUMMARY = "Systemd service masking for container use"
+DESCRIPTION = "Masks systemd services that are inappropriate inside containers \
+    (udev, hwdb, serial-getty, etc.). Installed as a package so it works \
+    with both single-layer and multi-layer OCI images."
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302"
+
+inherit allarch
+
+# Default services to mask in containers
+# Customizable: CONTAINER_SYSTEMD_MASK:pn-container-systemd-config:append = " extra.service"
+CONTAINER_SYSTEMD_MASK ?= "\
+    systemd-udevd.service \
+    systemd-udevd-control.socket \
+    systemd-udevd-kernel.socket \
+    proc-sys-fs-binfmt_misc.automount \
+    sys-fs-fuse-connections.mount \
+    sys-kernel-debug.mount \
+    systemd-hwdb-update.service \
+    serial-getty@ttyS0.service \
+    dev-ttyS0.device \
+    console-getty.service \
+    serial-getty@.service \
+"
+
+do_install() {
+    install -d ${D}${sysconfdir}/systemd/system
+    for service in ${CONTAINER_SYSTEMD_MASK}; do
+        ln -sf /dev/null ${D}${sysconfdir}/systemd/system/$service
+    done
+}