From 06ac2a84cf48558297aab06888f68e6b86d94c1b Mon Sep 17 00:00:00 2001
From: Frank <frank@dankware>
Date: Wed, 19 Aug 2026 00:00:42 -0700
Subject: [PATCH] SearXNG quadlet: use AddDevice= (the generator rejects
 Device=)

Device= in [Container] is a [Volume]-group key; the container device key is
AddDevice= (maps to podman --device). Update the /dev/net/tun device line and
the test seam.
---
 dankclaw/searxng/quadlet/gluetun.container | 2 +-
 tests/searxng_quadlet.bats                 | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/dankclaw/searxng/quadlet/gluetun.container b/dankclaw/searxng/quadlet/gluetun.container
index 577f4b3..2c65744 100644
--- a/dankclaw/searxng/quadlet/gluetun.container
+++ b/dankclaw/searxng/quadlet/gluetun.container
@@ -18,7 +18,7 @@ ContainerName=gluetun
 Network=searxng.network
 Image=docker.io/qmcgaw/gluetun:latest
 AddCapability=NET_ADMIN
-Device=/dev/net/tun:/dev/net/tun
+AddDevice=/dev/net/tun:/dev/net/tun
 Environment=VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER}
 Environment=VPN_TYPE=${VPN_TYPE}
 Environment=WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
diff --git a/tests/searxng_quadlet.bats b/tests/searxng_quadlet.bats
index 4797982..42679e7 100644
--- a/tests/searxng_quadlet.bats
+++ b/tests/searxng_quadlet.bats
@@ -39,8 +39,8 @@ QDIR="$REPO_ROOT/dankclaw/searxng/quadlet"
 @test "gluetun has NET_ADMIN and the /dev/net/tun device" {
     grep -qE '^AddCapability=NET_ADMIN' "$QDIR/gluetun.container" \
         || { echo "gluetun.container must set AddCapability=NET_ADMIN"; return 1; }
-    grep -qE '^Device=/dev/net/tun' "$QDIR/gluetun.container" \
-        || { echo "gluetun.container must set Device=/dev/net/tun"; return 1; }
+    grep -qE '^AddDevice=/dev/net/tun' "$QDIR/gluetun.container" \
+        || { echo "gluetun.container must set AddDevice=/dev/net/tun"; return 1; }
 }
 
 @test "valkey joins searxng.network and is reachable by the name valkey" {