Add support to interact with a local podman installation

Signed-off-by: Tobias Wolf <wolf@b1-systems.de>

Author: NotTheEvilOne

poetry.lock

@@ -12,10 +12,11 @@ python = ">=3.13"
 apt-repo = "^0.5"
 boto3 = "^1.40.57"
 click = "^8.2.1"
-cryptography = "^46.0.1"
+cryptography = "^46.0.2"
 jsonschema = "^4.25.1"
 networkx = "^3.5"
 oras = "^0.2.38"
+podman = "^5.6.0"
 pygit2 = "^1.19.0"
 pygments = "^2.19.2"
 PyYAML = "^6.0.2"
@@ -24,13 +25,13 @@ gitpython = "^3.1.45"
 [tool.poetry.group.dev.dependencies]
 bandit = "^1.8.6"
 black = "^25.1.0"
+isort = "^7.0.0"
 moto = "^5.1.12"
+pyright = "^1.1.406"
 python-dotenv = "^1.1.1"
 pytest = "^9.0.0"
 pytest-cov = "^7.0.0"
-isort = "^7.0.0"
 requests-mock = "^1.12.1"
-pyright = "^1.1.403"
 
 [tool.poetry.group.docs.dependencies]
 sphinx-rtd-theme = "^3.0.2"

pyproject.toml

@@ -161,13 +161,15 @@
 
 S3_DOWNLOADS_DIR = Path(os.path.dirname(__file__)) / ".." / "s3_downloads"
 
+GL_DEB_REPO_BASE_URL = "https://packages.gardenlinux.io/gardenlinux"
 GLVD_BASE_URL = (
     "https://security.gardenlinux.org/v1"
 )
-GL_DEB_REPO_BASE_URL = "https://packages.gardenlinux.io/gardenlinux"
 
 GARDENLINUX_GITHUB_RELEASE_BUCKET_NAME = "gardenlinux-github-releases"
 
+PODMAN_CONNECTION_MAX_IDLE_SECONDS = 3
+
 # https://github.com/gardenlinux/gardenlinux/issues/3044
 # Empty string is the 'legacy' variant with traditional root fs and still needed/supported
 IMAGE_VARIANTS = ["", "_usi", "_tpm2_trustedboot"]

src/gardenlinux/constants.py

@@ -9,5 +9,15 @@
 from .index import Index
 from .layer import Layer
 from .manifest import Manifest
+from .podman import Podman
+from .podman_context import PodmanContext
 
-__all__ = ["Container", "ImageManifest", "Index", "Layer", "Manifest"]
+__all__ = [
+    "Container",
+    "ImageManifest",
+    "Index",
+    "Layer",
+    "Manifest",
+    "Podman",
+    "PodmanContext",
+]