46 lines
1.1 KiB
Nix

{ config, pkgs, lib, inputs, ... }: {
imports = with inputs.self; [
customProfiles.virtualisation
];
deviceSpecific.enableVirtualisation = true;
boot.kernelModules = [ "x_tables" ];
virtualisation = {
docker.enable = lib.mkForce false;
podman.defaultNetwork.settings.dns_enabled = lib.mkForce true;
podman.extraPackages = [ pkgs.zfs ];
spiceUSBRedirection.enable = lib.mkForce false;
containers.storage.settings.storage.graphroot = lib.mkForce "/var/lib/podman/storage";
};
# networking.dhcpcd.denyInterfaces = [ "podman0" ];
# systemd.network = {
# netdevs."60-podman0" = {
# netdevConfig = {
# Kind = "bridge";
# Name = "podman0";
# };
# };
# networks."50-podman" = {
# matchConfig = {
# Name = "podman0";
# };
# linkConfig = {
# Unmanaged = true;
# ActivationPolicy = "manual";
# };
# };
# };
users.users.${config.mainuser} = {
subUidRanges = [{
count = 1000;
startUid = 10000;
}];
subGidRanges = [{
count = 1000;
startGid = 10000;
}];
};
}