project-zot / zot

zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specification)

Home Page:https://zotregistry.dev

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[Feat]: add support for systemd socket activation

rgl opened this issue · comments

Is your feature request related to a problem? Please describe.

I would like to configure zot to use a privileged port like 80 or 443 without granting it the CAP_NET_BIND_SERVICE capability.

Describe the solution you'd like

Would like to configure Zot to use systemd Socket Activation.

For more information, please see:

Describe alternatives you've considered

No response

Additional context

No response

@rgl thanks for filing this issue.
Do you want to give a shot at a PR?
https://github.com/project-zot/zot/blob/main/examples/zot.service

I can!

Just so we are on the same page, this means that I will modify the following code, OK?

https://github.com/project-zot/zot/blob/v2.0.0/pkg/api/controller.go#L145-L168

@rgl would also just add another zot.socket-service file with [Socket] directive?

@rchincha the PR is at #2186.

please be aware that I've updated the go.mod too, which I'm unsure if should be included in the PR. please advice in the PR issue.