Any file format for "permissions profiles" similar to flatpak permissions, but for containers?

[castedo]

Cnest 1.x currently uses trivial shell scripts as the "file format" for permission profiles. That is, the profile of extra permission, chosen at nest container creation time, to be allowed for that container. This is kind of similar to flatpak users and developers can choose from a selection of high-level permissions to be enabled or disabled.

Is there a file format that cnest (or similar tools) could use to determine what permissions should be granted when a nest container is created? Ideally, this file format could be used in a merge of user preferences plus image builder requirements. Similar to how flatseal lets users negotiate what permissions installed apps get above or below what a flatpak app has requested.

[castedo]

Possible alternative to permission profiles as mini shell scripts setting podman run parameters:

• the yaml files that are used for running pods?
• containers.conf toml files?