From b869f1a55f431ffdaaa49b3ec789c533881f3a0a Mon Sep 17 00:00:00 2001
From: Ahmed Abdelhalim <pm@a14m.dev>
Date: Fri, 6 Feb 2026 22:16:30 +0100
Subject: Fix intermitten network issues with local testing

Co-authored-by: Claude.ai
---
 roles/podman/tasks/main.yml | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

(limited to 'roles')

diff --git a/roles/podman/tasks/main.yml b/roles/podman/tasks/main.yml
index 87462880..bfd673ff 100644
--- a/roles/podman/tasks/main.yml
+++ b/roles/podman/tasks/main.yml
@@ -30,11 +30,17 @@
     dest: "{{ ansible_facts['env']['HOME'] }}/.config/containers/containers.conf"
     mode: "0644"
     content: |
-      [containers]
-      cgroup_manager = "cgroupfs"
-
+      # Use systemd cgroup manager for proper integration with the host's
+      # resource management on cgroup v2 systems. Requires cgroup delegation
+      # (cpu, memory, pids controllers) in the user's systemd slice.
       [engine]
-      cgroup_manager = "cgroupfs"
+      cgroup_manager = "systemd"
+
+      # Lower the default pasta MTU to prevent intermittent TLS errors
+      # (SSL_ERROR_SYSCALL, unexpected eof) caused by packet fragmentation
+      # in rootless podman's pasta networking layer.
+      [network]
+      pasta_options = ["--mtu", "1280"]
 
 - name: "Configure container registries"
   become: true
-- 
cgit v1.2.3