Improve systemd / podman coupling

Implements the same strategy as outlined by the 'quadlet' project in
https://github.com/containers/quadlet/blob/main/docs/ContainerSetup.md
with respect to robust container shutdown.

roles/float-base-docker/templates/run.sh.j2

@@ -120,6 +120,8 @@ exec /usr/bin/podman run \
   --no-healthcheck \
   --replace \
   --log-driver=none \
+  --sdnotify=conmon \
+  --pull=never \
   $opts \
 {% for opt in g.options %}
   {{ opt }} \
@@ -132,5 +134,6 @@ exec /usr/bin/systemd-docker --env run \
 {% for opt in g.options %}
   {{ opt }} \
 {% endfor %}
+  "$@" \
   {{ item.container.image }} {{ item.container.get('args', '') }}
 {% endif %}

roles/float-base-docker/templates/systemd.j2

@@ -6,14 +6,16 @@ Requires=docker.service
 {% endif %}
 
 [Service]
-ExecStart=/usr/lib/float/docker/run-{{ item.service }}-{{ item.container.name }}.sh
-ExecStop=/usr/bin/{{ container_runtime }} stop --time 20 {{ item.service }}-{{ item.container.name }}
-ExecStopPost=-/usr/bin/{{ container_runtime }} kill {{ item.service }}-{{ item.container.name }} 2>/dev/null
+ExecStartPre=-rm -f %t/%N.cid
+ExecStart=/usr/lib/float/docker/run-{{ item.service }}-{{ item.container.name }}.sh -d --cidfile=%t/%N.cid
+ExecStopPost=-/usr/bin/{{ container_runtime }} rm -f -i --cidfile=%t/%N.cid
+ExecStopPost=-rm -f %t/%N.cid
 TimeoutStopSec=60
-KillMode=control-group
+KillMode=mixed
 Restart=always
 RestartSec=3s
-Type=simple
+Type=notify
+NotifyAccess=all
 SyslogIdentifier={{ item.service }}-{{ item.container.name }}
 
 {% if item.container.resources is defined %}