From c5fb7f599cca8fd3e646a7156028a0174db12b4c Mon Sep 17 00:00:00 2001
From: uumas <gitcommit@uumas.fi>
Date: Tue, 16 Sep 2025 12:36:58 +0300
Subject: [PATCH] podman: Login to registries

---
 roles/podman/defaults/main.yaml       |  2 ++
 roles/podman/meta/argument_specs.yaml | 21 ++++++++++++++++++++-
 roles/podman/tasks/main.yaml          |  8 ++++++++
 3 files changed, 30 insertions(+), 1 deletion(-)
 create mode 100644 roles/podman/defaults/main.yaml

diff --git a/roles/podman/defaults/main.yaml b/roles/podman/defaults/main.yaml
new file mode 100644
index 0000000..eea9c4d
--- /dev/null
+++ b/roles/podman/defaults/main.yaml
@@ -0,0 +1,2 @@
+---
+podman_registry_accounts: []
diff --git a/roles/podman/meta/argument_specs.yaml b/roles/podman/meta/argument_specs.yaml
index 9002728..3e4eee8 100644
--- a/roles/podman/meta/argument_specs.yaml
+++ b/roles/podman/meta/argument_specs.yaml
@@ -2,4 +2,23 @@
 argument_specs:
   main:
     description: Installs podman
-    options: {}
+    options:
+      podman_registry_accounts:
+        description: Dict of accounts for container repositories
+        type: list
+        required: false
+        default: []
+        elements: dict
+        options:
+          registry:
+            description: Registry server to login to
+            type: str
+            required: true
+          username:
+            description: Username
+            type: str
+            required: true
+          password:
+            description: Password / token
+            type: str
+            required: true
diff --git a/roles/podman/tasks/main.yaml b/roles/podman/tasks/main.yaml
index 666dc09..02b0893 100644
--- a/roles/podman/tasks/main.yaml
+++ b/roles/podman/tasks/main.yaml
@@ -10,3 +10,11 @@
     name: podman-auto-update.timer
     state: started
     enabled: true
+
+- name: Login to registries
+  containers.podman.podman_login:
+    registry: "{{ item.registry }}"
+    username: "{{ item.username }}"
+    password: "{{ item.password }}"
+    authfile: /run/containers/0/auth.json
+  loop: "{{ podman_registry_accounts }}"