Rootless podman, finally
This commit is contained in:
parent
3b5889e181
commit
1dfbc1384f
4 changed files with 12 additions and 2 deletions
|
|
@ -8,6 +8,7 @@
|
||||||
./networking.nix
|
./networking.nix
|
||||||
./nix.nix
|
./nix.nix
|
||||||
./packages.nix
|
./packages.nix
|
||||||
|
./security.nix
|
||||||
./services.nix
|
./services.nix
|
||||||
./users.nix
|
./users.nix
|
||||||
./virtualisation.nix
|
./virtualisation.nix
|
||||||
|
|
|
||||||
5
hosts/common/security.nix
Normal file
5
hosts/common/security.nix
Normal file
|
|
@ -0,0 +1,5 @@
|
||||||
|
{ inputs, config, pkgs, lib, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
security.unprivilegedUsernsClone = true; # Needed for rootless podman
|
||||||
|
}
|
||||||
|
|
@ -1,5 +1,9 @@
|
||||||
{ inputs, config, pkgs, lib, ... }:
|
{ inputs, config, pkgs, lib, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
virtualisation.podman.enable = true;
|
virtualisation.podman = {
|
||||||
|
enable = true;
|
||||||
|
dockerCompat = true;
|
||||||
|
defaultNetwork.settings = { dns_enabled = true; };
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
|
||||||
|
|
@ -5,7 +5,7 @@
|
||||||
bazarr = {
|
bazarr = {
|
||||||
enable = true;
|
enable = true;
|
||||||
user = "user";
|
user = "user";
|
||||||
group = "hosted";
|
group = "user";
|
||||||
};
|
};
|
||||||
|
|
||||||
jackett.enable = true;
|
jackett.enable = true;
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue