73 lines
2.2 KiB
Nix
73 lines
2.2 KiB
Nix
{
|
|
lib,
|
|
config,
|
|
...
|
|
}: {
|
|
options.host.podman = {
|
|
enable = lib.mkEnableOption "should podman be enabled on this computer";
|
|
macvlan = {
|
|
subnet = lib.mkOption {
|
|
type = lib.types.str;
|
|
description = "Subnet for macvlan address range";
|
|
};
|
|
gateway = lib.mkOption {
|
|
type = lib.types.str;
|
|
description = "Gateway for macvlan";
|
|
# TODO: see if we can default this to systemd network gateway
|
|
};
|
|
networkInterface = lib.mkOption {
|
|
type = lib.types.str;
|
|
description = "Parent network interface for macvlan";
|
|
# TODO: see if we can default this some interface?
|
|
};
|
|
};
|
|
};
|
|
config = lib.mkIf config.host.podman.enable {
|
|
systemd = {
|
|
services = {
|
|
# "podman-network-macvlan" = {
|
|
# path = [pkgs.podman];
|
|
# serviceConfig = {
|
|
# Type = "oneshot";
|
|
# RemainAfterExit = true;
|
|
# ExecStop = "podman network rm -f macvlan";
|
|
# };
|
|
# script = ''
|
|
# podman network inspect macvlan || podman network create --driver macvlan --subnet ${config.host.podman.macvlan.subnet} --gateway ${config.host.podman.macvlan.gateway} --opt parent=${config.host.podman.macvlan.networkInterface} macvlan
|
|
# '';
|
|
# partOf = ["podman-compose-root.target"];
|
|
# wantedBy = ["podman-compose-root.target"];
|
|
# };
|
|
};
|
|
# disable computer sleeping
|
|
targets = {
|
|
# Root service
|
|
# When started, this will automatically create all resources and start
|
|
# the containers. When stopped, this will teardown all resources.
|
|
"podman-compose-root" = {
|
|
unitConfig = {
|
|
Description = "Root target for podman targets.";
|
|
};
|
|
wantedBy = ["multi-user.target"];
|
|
};
|
|
};
|
|
};
|
|
|
|
virtualisation = {
|
|
# Runtime
|
|
podman = {
|
|
enable = true;
|
|
autoPrune.enable = true;
|
|
dockerCompat = true;
|
|
# defaultNetwork.settings = {
|
|
# # Required for container networking to be able to use names.
|
|
# dns_enabled = true;
|
|
# };
|
|
};
|
|
|
|
oci-containers = {
|
|
backend = "podman";
|
|
};
|
|
};
|
|
};
|
|
}
|