[WIP] Use the Systemd [Container] directive

app/models/opentofu_worker.rb

@@ -57,7 +57,7 @@ def container_image
   end
 
   def enable_systemd_unit
-    super
+    create_cid_runfile
     create_tls_certs
     create_podman_secret
   end
@@ -83,6 +83,12 @@ def configure_service_worker_deployment(definition)
     end
   end
 
+  def create_cid_runfile
+    cid_runfile = Pathname.new("/run/opentofu-runner.cid")
+    cid_runfile.write(nil)
+    cid_runfile.chown(manageiq_uid, manageiq_gid)
+  end
+
   def create_tls_certs
     opentofu_runner_certs_dir = Pathname.new("#{OPENTOFU_RUNTIME_DIR}/certs")
     unless opentofu_runner_certs_dir.exist?

systemd/opentofu-runner.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Opentofu Runner Container
+After=local-fs.target
+
+[Container]
+Image=${OPENTOFU_RUNNER_IMAGE}
+PodmanArgs=--root /var/www/miq/vmdb/data/containers/storage
+ContainerName=opentofu-runner
+Secret=opentofu-runner-secret
+Volume=/var/lib/manageiq/opentofu-runner/certs:/opt/app-root/src/config/cert:z
+Environment=DATABASE_HOSTNAME=${DATABASE_HOSTNAME}
+Environment=DATABASE_NAME=${DATABASE_NAME}
+Environment=DATABASE_USERNAME=${DATABASE_USERNAME}
+Environment=MEMCACHE_SERVERS=${MEMCACHE_SERVERS}
+ExposeHostPort=6000
+Network=host
+
+[Service]
+Restart=on-failure
+User=manageiq
+Group=manageiq
+Slice=manageiq.slice