AtaraxiaDev/nixos-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix: trust libvirt interfaces

Browse Source
This commit is contained in:
Dmitriy Kholkin 2025-07-16 19:37:24 +03:00
parent deebcd7140
commit 16af5ab8aa
Signed by: AtaraxiaDev
GPG Key ID: FD266B810DF48DF2
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/andromedae/default.nix
View File

@ -149,6 +149,11 @@ in
useRoutingFeatures = "client"; useRoutingFeatures = "client";
}; };
networking.firewall.trustedInterfaces = [
"virbr-lan"
"virbr-wan"
];
# Mesa from unstable channel # Mesa from unstable channel
hardware.graphics.package = pkgs.mesaUnstable; hardware.graphics.package = pkgs.mesaUnstable;
hardware.graphics.package32 = pkgs.mesaUnstablei686; hardware.graphics.package32 = pkgs.mesaUnstablei686;

2
modules/nixos/virtualisation/virtualisation.nix
View File

@ -110,6 +110,8 @@ in
]; ];
}; };
networking.firewall.trustedInterfaces = mkIf cfg.libvirt [ "virbr0" ];
security.unprivilegedUsernsClone = true; security.unprivilegedUsernsClone = true;
persist.state.directories = [ persist.state.directories = [