From dd81a54403ca2a154585caf67b11e5f9df7d3e0d Mon Sep 17 00:00:00 2001
From: DerGrumpf
Date: Wed, 26 Mar 2025 15:36:46 +0100
Subject: [PATCH] Changed: Podman
---
modules/system.nix | 32 +++++++++++++++++---------------
users/phil/nixos.nix | 2 --
2 files changed, 17 insertions(+), 17 deletions(-)
diff --git a/modules/system.nix b/modules/system.nix
index 85ef948..0b9fab9 100644
--- a/modules/system.nix
+++ b/modules/system.nix
@@ -10,7 +10,7 @@
users.users.${username} = {
isNormalUser = true;
description = username;
- extraGroups = ["networkmanager" "wheel"];
+ extraGroups = ["networkmanager" "wheel" "podman"];
};
# given the users in this list the right to specify additional substituters via:
# 1. `nixConfig.substituers` in `flake.nix`
@@ -106,6 +106,7 @@
services.gvfs.enable = true;
services.tumbler.enable = true;
+# Virtualisation
virtualisation = {
containers.enable = true;
@@ -114,24 +115,20 @@
dockerCompat = true;
defaultNetwork.settings.dns_enabled = true;
};
-
- docker = {
- enable = true;
- rootless = {
- enable = true;
- setSocketVariable = true;
- };
- daemon.settings = {
- data-root = "/docker/containers";
- userland-proxy = false;
- experimental = true;
- metrics-addr = "0.0.0.0:9323";
- ipv6 = true;
- fixed-cidr-v6 = "fd00::/80";
+
+ oci-containers = {
+ backend = "podman";
+ containers = {
+ /*container-name = {
+ image = "image";
+ autoStart = true;
+ ports = [ "127.0.0.1:1234:1234" ];
+ };*/
};
};
};
+
# networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether.
@@ -195,6 +192,11 @@
unzip
p7zip
xz
+
+# Virtualisation
+ podman-compose # docker-compose alternative
+ dive # docker layer viewer
+ podman-tui # status of containers in terminal
];
# Enable sound with pipewire.
diff --git a/users/phil/nixos.nix b/users/phil/nixos.nix
index 3531201..96ee780 100644
--- a/users/phil/nixos.nix
+++ b/users/phil/nixos.nix
@@ -12,8 +12,6 @@
openssh.authorizedKeys.keys = [
"ssh-rsa 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 phil@web.cyperpunk.de"
];
- isNormalUser = true;
- extraGroups = [ "networkmanager" "podman" ];
shell = pkgs.fish;
};