Use portable rootless networking and publish IPv6 ports

2 files changed, 48 insertions, 0 deletions

diff --git a/infra/host-retire-docker.sh b/infra/host-retire-docker.sh
new file mode 100644
index 0000000..08923b7
--- /dev/null
+++ b/infra/host-retire-docker.sh
@@ -0,0 +1,31 @@
+#!/bin/sh
+# Copyright (C) 2026 Doan Luu Duc Tai <doan@luuduct.ai>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as
+# published by the Free Software Foundation, either version 3 of the
+# License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+set -eu
+[ "$(id -u)" = 0 ] || exit 1
+[ -z "$(docker ps -q)" ] || { echo 'Docker still has running containers'; exit 1; }
+for host in doan.luuduct.ai git.doan.luuduct.ai search.doan.luuduct.ai; do
+    curl --fail --silent --resolve "$host:443:127.0.0.1" "https://$host/" >/dev/null
+done
+systemctl disable --now docker.service docker.socket containerd.service
+apt-get purge -y docker-ce docker-ce-cli docker-buildx-plugin docker-compose-plugin containerd.io
+for old in /var/lib/docker /var/lib/containerd /etc/docker /etc/containerd; do
+    if [ -d "$old" ] && [ ! -L "$old" ]; then find "$old" -depth -delete; fi
+done
+for old in /etc/apt/sources.list.d/docker.list /etc/apt/keyrings/docker.asc; do
+    if [ -f "$old" ]; then find "$old" -maxdepth 0 -delete; fi
+done
+echo 'Retired Docker packages, storage, and repository removed.'
diff --git a/infra/podman.conf b/infra/podman.conf
new file mode 100644
index 0000000..5e6965d
--- /dev/null
+++ b/infra/podman.conf
@@ -0,0 +1,17 @@
+# Copyright (C) 2026 Doan Luu Duc Tai <doan@luuduct.ai>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as
+# published by the Free Software Foundation, either version 3 of the
+# License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+[network]
+default_rootless_network_cmd = "slirp4netns"