#!/bin/bash

#   Copyright The containerd Authors.

#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at

#       http://www.apache.org/licenses/LICENSE-2.0

#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.

set -euo pipefail

# necessary host configuration for CRI-O
# https://github.com/kubernetes-sigs/cri-tools/blob/ec9e336fd8c21c4bab89a6aed2c4a138c8cfae75/.github/workflows/crio.yml#L36-L45
sysctl -w net.ipv4.conf.all.route_localnet=1
iptables -t nat -I POSTROUTING -s 127.0.0.0/8 ! -d 127.0.0.0/8 -j MASQUERADE

# The target only runs CRI-O and Stargz Store for test.
cat <<EOF > /lib/systemd/system/demo.target
[Unit]
Description=testing CRI-O
Wants=stargz-store.service crio.service
EOF

exec /sbin/init --unit=demo.target
