#!/bin/execlineb -P

# privileged:
#s6-softlimit -p = -o 1048576
#exec /usr/bin/containerd

# rootless:
envfile /etc/s6-rc/config/containerd.conf
importas -iu containerd_namespace containerd_namespace
export CONTAINERD_NAMESPACE ${containerd_namespace}

importas -iu containerd_snapshotter containerd_snapshotter
export CONTAINERD_SNAPSHOTTER ${containerd_snapshotter}

importas -iu containerd_rootless_net containerd_rootless_net
export CONTAINERD_ROOTLESS_ROOTLESSKIT_NET ${containerd_rootless_net}

importas -iu containerd_rootless_port_driver containerd_rootless_port_driver
export CONTAINERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER ${containerd_rootless_port_driver}

#TODO: doesn't work because containerd doesn't listen on stdin
#and ipcserverd passes the fd to it's stdin/stdout
#
#importas -iu containerd_socket containerd_socket
#foreground { echo "retrieving..." }
#s6-fdholder-retrieve ${containerd_socket} unix:${containerd_socket}
#foreground { echo "pickup..." }
#s6-ipcserverd
#foreground { echo "exec..." }

fdmove -c 2 1
runas /usr/bin/containerd-rootless.sh