meta: Add docker engine layer

Install the Docker Engine as per guidelines.
Add a new very light-weight profile which pulls this in.

Author: learmj

meta/app-container/docker/engine-bookworm.yaml

@@ -0,0 +1,29 @@
+---
+name: docker-engine
+description: https://docs.docker.com/engine/install/debian/
+mmdebstrap:
+  architectures:
+    - arm64
+  mirrors:
+    - deb https://download.docker.com/linux/debian bookworm stable
+  setup-hooks:
+    - mkdir -p $1/usr/share/keyrings/
+    - curl -fsSL https://download.docker.com/linux/debian/gpg -o $1/usr/share/keyrings/docker.asc
+    - chmod a+r $1/usr/share/keyrings/docker.asc
+    - cp -p $1/usr/share/keyrings/docker.asc $IGconf_apt_keydir
+  packages:
+    - docker-ce
+    - docker-ce-cli
+    - containerd.io
+    - docker-buildx-plugin
+    - docker-compose-plugin
+  customize-hooks:
+    - mkdir -p $1/etc/apt/sources.list.d
+    - |-
+      cat <<- EOF > $1/etc/apt/sources.list.d/docker.list
+      deb [arch=arm64 signed-by=/usr/share/keyrings/docker.asc] https://download.docker.com/linux/debian bookworm stable
+      EOF
+    - sed -i '/download\.docker\.com/d' $1/etc/apt/sources.list
+    # https://docs.docker.com/engine/security/#docker-daemon-attack-surface
+    #- chroot $1 sh -c "groupadd -f -r docker"
+    #- chroot $1 sh -c "adduser $IGconf_first_user_name docker"

profile/bookworm/apt-min-docker64

@@ -0,0 +1,12 @@
+# Minimal system with v8 kernel, apt, docker runtime engine and wired networking
+
+debian/bookworm/arm64/base-apt
+rpi/debian/bookworm/apt
+rpi/boot-firmware
+rpi/arm64/linux-image-v8
+rpi/user-credentials
+rpi/misc-skel
+sys-apps/systemd-net-min
+sys-apps/fake-hwclock
+app-container/docker/engine-bookworm
+app-misc/ca-certificates