nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-29 02:13:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Backport release-24.11] nixos-containers: fix enableTun option (#358484)

Browse Source
This commit is contained in:
Franz Pletz 2024-11-23 17:24:00 +01:00 committed by GitHub
commit b3e5402d7e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/virtualisation/nixos-containers.nix
View File

@ -705,7 +705,7 @@ in
allowedDevices = mkOption { allowedDevices = mkOption {
type = with types; listOf (submodule allowedDeviceOpts); type = with types; listOf (submodule allowedDeviceOpts);
default = []; default = [];
example = [ { node = "/dev/net/tun"; modifier = "rw"; } ]; example = [ { node = "/dev/net/tun"; modifier = "rwm"; } ];
description = '' description = ''
A list of device nodes to which the containers has access to. A list of device nodes to which the containers has access to.
''; '';
@ -835,7 +835,7 @@ in
optionalAttrs cfg.enableTun optionalAttrs cfg.enableTun
{ {
allowedDevices = cfg.allowedDevices allowedDevices = cfg.allowedDevices
++ [ { node = "/dev/net/tun"; modifier = "rw"; } ]; ++ [ { node = "/dev/net/tun"; modifier = "rwm"; } ];
additionalCapabilities = cfg.additionalCapabilities additionalCapabilities = cfg.additionalCapabilities
++ [ "CAP_NET_ADMIN" ]; ++ [ "CAP_NET_ADMIN" ];
} }