Use polkit module for container services

2023-05-27 14:59:13 +02:00
parent 2aa20b78c9
commit bc89ebcffe
1 changed files with 10 additions and 0 deletions
--- a/system/modules/containers/default.nix
+++ b/system/modules/containers/default.nix
@ -121,6 +121,16 @@ in {
      });
    };

+    modules.polkit.allowed-system-services = let
+      container-services = lib.pipe virtualisation.oci-containers.containers [
+        builtins.attrNames
+        (builtins.filter (c: cfg.${c}.enable))
+        (builtins.map (c: "podman-${c}.service"))
+      ];
+    in
+      container-services;
+
+    # TODO: Rewrite with builtins.pipe
    environment.etc."rofi-containers".text = let
      containers-list = attrNames virtualisation.oci-containers.containers;
      containers-filtered = filter (c: cfg.${c}.enable) containers-list;