EditRegistriesConfig edits, IN PLACE, the /etc/containers/registries.conf configuration provided in config, to: - Mark scope entries in insecureScopes as insecure (TLS is not required, and TLS certificate verification is not required when TLS is used) - Mark scope entries in blockedScopes as blocked (any attempts to access them fail) - Implement ImageContentSourcePolicy rules in icspRules.

IsValidRegistriesConfScope returns true if scope is a valid scope for the Prefix key in registries.conf This function can be used to validate the registries entries prior to calling EditRegistriesConfig in the MCO or builds code.

ScopeIsNestedInsideScope returns true if a subScope value (as in sysregistriesv2.Registry.Prefix / sysregistriesv2.Endpoint.Location) is a sub-scope of superScope.