rootful docker daemon and aarch64 emulation
This commit is contained in:
@@ -17,12 +17,16 @@ in
|
|||||||
|
|
||||||
|
|
||||||
config = {
|
config = {
|
||||||
# Docker rootless user service, only if pc
|
# Install system-wide docker because rootless causes issues with binfmt
|
||||||
# Unfortunately, not implemented in home-manager yet
|
virtualisation.docker.enable = config.lumpiasty.pc;
|
||||||
virtualisation.docker.rootless = {
|
|
||||||
enable = config.lumpiasty.pc;
|
# Binfmt for aarch64 emulation
|
||||||
setSocketVariable = true;
|
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
||||||
};
|
boot.binfmt.preferStaticEmulators = true;
|
||||||
|
# Pass the binary to the interpreter as an open file descriptor, instead of a path.
|
||||||
|
# Fixes issue inside containers.
|
||||||
|
boot.binfmt.registrations.aarch64-linux.openBinary = true;
|
||||||
|
boot.binfmt.registrations.aarch64-linux.fixBinary = true;
|
||||||
|
|
||||||
# Flatpak
|
# Flatpak
|
||||||
services.flatpak.enable = true;
|
services.flatpak.enable = true;
|
||||||
@@ -34,7 +38,12 @@ in
|
|||||||
home-manager.useUserPackages = true;
|
home-manager.useUserPackages = true;
|
||||||
|
|
||||||
# User user
|
# User user
|
||||||
users.users.user = mkUser cfg.user ../../users/user/config.nix;
|
users.users.user = lib.mkMerge [
|
||||||
|
(mkUser cfg.user ../../users/user/config.nix)
|
||||||
|
{
|
||||||
|
extraGroups = lib.mkIf config.lumpiasty.pc [ "docker" ];
|
||||||
|
}
|
||||||
|
];
|
||||||
home-manager.users.user = mkHome cfg.user ../../users/user/home.nix;
|
home-manager.users.user = mkHome cfg.user ../../users/user/home.nix;
|
||||||
|
|
||||||
# User drugi
|
# User drugi
|
||||||
|
|||||||
Reference in New Issue
Block a user