christoph/flake-nixinator
1
Fork 0
Code Activity

System/Nixinator: Disable rootless docker

Browse Source
This commit is contained in:
Christoph Urlacher
2026-01-18 01:19:04 +01:00
parent eaa36cfce2
commit 5e422d05c9
3 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
system/default.nix
View File

@ -46,12 +46,9 @@ with mylib.networking; {
docker = { docker = {
enable = true; enable = true;
podman = false;
# Use podman on the desktops, the servers are docker.rootless = false;
# already configured using docker though... docker.buildkit = true;
# TODO: Use podman on the servers
podman = !headless;
docker.rootless = true;
}; };
fonts = { fonts = {

5
system/modules/docker/default.nix
View File

@ -18,6 +18,10 @@ in {
networking.firewall.trustedInterfaces = ["docker0" "podman0"]; networking.firewall.trustedInterfaces = ["docker0" "podman0"];
# Needed for default bridge network to automatically work
# boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
# boot.kernel.sysctl."net.ipv6.ip_forward" = 1;
virtualisation = { virtualisation = {
docker = { docker = {
enable = !docker.podman; enable = !docker.podman;
@ -25,6 +29,7 @@ in {
extraPackages = with pkgs; [docker-compose]; extraPackages = with pkgs; [docker-compose];
# TODO: Rootless docker has no internet?
rootless = { rootless = {
enable = docker.docker.rootless; enable = docker.docker.rootless;
setSocketVariable = true; setSocketVariable = true;

2
system/modules/impermanence/default.nix
View File

@ -162,7 +162,7 @@ in {
(mkUDir ".config/Zeal" m755) (mkUDir ".config/Zeal" m755)
# Share # Share
(mkUDir ".local/share/containers" m755) # (mkUDir ".local/share/containers" m755) # Rootless docker
(mkUDir ".local/share/direnv" m755) (mkUDir ".local/share/direnv" m755)
(mkUDir ".local/share/docker" m755) (mkUDir ".local/share/docker" m755)
(mkUDir ".local/share/fish" m755) (mkUDir ".local/share/fish" m755)