https://blog.prokop.dev/linux/oci-setup/