Lily Foster
5c5d730067
Merge pull request #262347 from adamcstephens/incus/module
...
nixos/incus: init module and tests
2023-11-03 09:42:24 -04:00
Adam Stephens
3132ba6cda
nixos/incus: shutdown instances on service stop
2023-11-02 19:54:11 -04:00
Adam Stephens
3087595a6b
nixos/incus: preseed should not trigger socket-activation
2023-11-02 19:54:04 -04:00
Adam Stephens
1fff6a9031
nixos/incus: init module and tests
2023-11-02 19:54:02 -04:00
Franz Pletz
265ca81834
Merge pull request #241908 from picnoir/nin/oci-container-pre-start-list
2023-10-31 15:53:35 +01:00
K900
6f06066e94
nixos/containers: use latest stateVersion as example
...
Hopefully this way we don't confuse people into thinking you have to set it to 21.05.
2023-10-27 12:56:12 +03:00
Robert Hensing
5dfc78a8ad
Merge pull request #262021 from Enzime/linux-builder-cross
...
linux-builder: support `x86_64-linux` on `aarch64`
2023-10-24 14:34:29 +02:00
Michael Hoang
ab1f45f3d3
linux-builder: support x86_64-linux
on aarch64
2023-10-24 13:35:37 +02:00
Maciej Krüger
1ecbbb6e3f
Merge pull request #260595 from adamcstephens/lxc/squashfs
...
lxc-container: add squashfs image support and release output
2023-10-24 02:06:36 +02:00
Ryan Lahfa
b9337215cd
Merge pull request #229035 from NixOS/qemu-vm/tpm
...
qemu-vm: support TPM usecases
2023-10-23 10:10:27 +01:00
Arthur Gautier
08f4fe2087
qemu-vm: stop the swtpm once qemu stops
...
The idea is to run an async process waiting for swtpm
and we have to ensure that `FD_CLOEXEC` is cleared on this process'
stdin file descriptor, we use `fdflags` for this, a loadable builtin in
Bash ≥ 5.
The async process when exited will terminate `swtpm`, we bind the
termination of the async process to the termination of QEMU by virtue of
having `qemu` exec in that Bash script.
Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
2023-10-23 01:02:24 +02:00
Raito Bezarius
25872524f0
nixos/qemu-vm: add virtualisation.tpm
for running TPM in QEMU infrastructure
2023-10-22 16:01:37 +02:00
Maciej Krüger
49bc1a76e0
Merge pull request #261692 from josephst/fix-lxc-container-bootloader
...
nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
2023-10-22 13:47:14 +02:00
Joseph Stahl
d156ab6c9c
nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
...
Recent change to nixos-rebuild (https://github.com/NixOS/nixpkgs/pull/258571 )
adds systemd-run, which brings with it a cleaner environment
(ie $PATH not available).
Workaround: use absolute path for ln to avoid command-not-found error
2023-10-22 03:18:15 +03:00
Robert Hensing
7096340f9e
nixos/qemu-vm: Rename nixos-disk-image -> nix-store-image
...
For the image that's actually a store image only.
Helps with visibility. The name "nixos-disk-image" has no special
significance, by grepping nixpkgs.
2023-10-21 19:13:58 +02:00
Lin Jian
fbc62319f1
Merge pull request #260291 from donovanglover/nixos-containers/optional-restart
...
nixos/nixos-containers: add restartIfChanged option
2023-10-16 20:41:32 +08:00
Maciej Krüger
afc33ef9d2
Merge pull request #260687 from mkg20001/lxd-ui
...
nixos/lxd: fix ui.enable desc
2023-10-16 01:30:58 +02:00
Adam Stephens
dbeeeb8e06
nixos/lxc-container: enable udev-trigger for nested containers
2023-10-12 15:11:09 -04:00
Adam Stephens
c2ff509e66
lxc-container: add squashfs image support and release output
2023-10-12 10:52:05 -04:00
Maciej Krüger
d934d20cd3
nixos/lxd: fix ui.enable desc
...
Otherwise it would show up as "Whether to enable Enables the (experimental) LXD UI. ."
Now is just "Whether to enable (experimental) LXD UI."
2023-10-12 15:24:01 +02:00
Donovan Glover
fd7daf9fc4
nixos/nixos-containers: add restartIfChanged option
...
This commit makes auto-restarting declarative containers optional.
This is useful when you don't want changes to your config to automatically
restart the container and thus stop any applications running inside it.
2023-10-11 21:53:42 -04:00
Sarah Brofeldt
a655e7a1aa
Merge pull request #259240 from haenoe/oci-containers-labels-option
...
nixos/oci-containers: add labels option
2023-10-09 18:52:20 +02:00
HaeNoe
2f021def6e
nixos/oci-containers: add labels option
2023-10-09 10:43:29 +02:00
ners
dccd00027e
nixos/azure: add contents module option ( #244364 )
2023-10-08 19:35:14 +02:00
nikstur
62e95d095d
nixos/qemu-vm: optionally disable overriding fileSystems
...
Allow the user to disable overriding the fileSystems option with
virtualisation.fileSystems by setting
`virtualisation.fileSystems = lib.mkForce { };`.
With this change you can use the qemu-vm module to boot from an external
image that was not produced by the qemu-vm module itself. The user can
now re-use the modularly set fileSystems option instead of having to
reproduce it in virtualisation.fileSystems.
2023-10-02 11:13:26 +02:00
K900
e53c99eb17
treewide: use pkgs.config
instead of config.nixpkgs.config
...
`pkgs` may be passed in externally, in which case `config.nixpkgs.config` will not be set.
Follow-up to #257458 .
2023-10-01 20:48:40 +03:00
Thiago Kenji Okada
e514178339
nixos/virtualisation: use mkDefault in networking.useNetworkd in oci-common
...
To make it easier to disable for those folks who don't want to use
systemd-networkd.
2023-09-28 22:05:34 +01:00
Adam Stephens
b1237da5b2
systemd: revert allow udev-trigger for lxd nested containers
2023-09-28 13:58:11 -04:00
Mario Rodas
25b9f4d2b6
Merge pull request #255116 from adamcstephens/lxd/udev-container
...
systemd: allow udev-trigger to run on lxd containers with nesting
2023-09-28 02:17:27 -05:00
Thiago Kenji Okada
d5d4b08488
nixos/virtualisation: always use EFI for OCI
2023-09-21 22:57:39 +01:00
Thiago Kenji Okada
cd67657ae2
nixos/virtualisation: use systemd-networkd for OCI
2023-09-21 22:57:39 +01:00
Thiago Kenji Okada
5eae6db9e3
nixos/virtualisation: remove deprecated option from OCI common
2023-09-21 22:57:39 +01:00
Samuel Dionne-Riel
2eb41eb208
nixos/virtualization: Allow building EFI / A1 OCI images
...
A couple notes:
---------------
Adding invalid `console=` parameters is not an issue. Any invalid
console is unused. The kernel will use the "rightmost" (last) valid
`console=` parameter as the default output. Thus the SBBR-mandated AMA0
on A1, and ttyS0 on x86_64 as documented by Oracle.
`nvme_core.shutdown_timeout=10` was added as it was written this way in
the A1 images. Unclear whether `nvme.shutdown_timeout=10` is wrong. At
worst this is a no-op.
2023-09-21 22:57:38 +01:00
Samuel Dionne-Riel
d944fb4a19
nixos/virtualization: Allow building EFI OCI images
2023-09-21 22:57:38 +01:00
Samuel Dionne-Riel
9849ccb241
nixos: Add OCI image options
...
Follows what amazon images does.
2023-09-21 22:57:38 +01:00
Samuel Dionne-Riel
3a35abf169
nixos/oci-image: Minor cleanup
2023-09-21 22:15:22 +01:00
ilian
362d1d6218
oci-image: init scripts to build and upload image
...
Add image configuration for Oracle Cloud Infrastructure and scripts to
build and upload the image as a Custom Image.
2023-09-21 22:15:22 +01:00
louib
66100e22f6
nixos/virtualisation: allow configuring openssh root login on GCE
...
This commit makes the OpenSSH option `PermitRootLogin` available to be
configured by other NixOS modules when using the Google Cloud Engine
(GCE) NixOS image builder. Other options like `PasswordAuthentication`
were already configurable, so I think it makes sense to make `PermitRootLogin`
configurable as well is order to disable it completely, for example.
2023-09-16 19:43:02 -04:00
Valentin Gagarin
295a5e1e2b
fix capitalization ( #254542 )
2023-09-15 09:59:11 +02:00
Adam Stephens
8565cd862a
systemd: allow udev-trigger to run on lxd containers with nesting
2023-09-14 09:17:33 -04:00
Michele Guerini Rocco
704c791a90
Merge pull request #253146 from rnhmjoj/pr-anbox
...
anbox: unbreak
2023-09-05 23:46:54 +02:00
Adam Stephens
a90385c62b
nixos/lxd: add preseed option
2023-09-05 15:28:00 +00:00
Adam Stephens
85c14ff2ff
nixos/lxd: remove with lib
2023-09-05 15:28:00 +00:00
Samuel Dionne-Riel
7425d9254d
nixos/anbox: use --daemon
to squash warning
...
As noted in https://github.com/NixOS/nixpkgs/pull/102341 this is not
actually running as a forked process. It only tells the process that it
is running "as a daemon, so shut the warning up".
See `daemon_` here
- 9de4e87cdd/src/anbox/cmds/container_manager.cpp (L38-L79)
It is **strictly** used to hide that message.
Co-authored-by: Matt Votava <mvnetbiz@gmail.com>
2023-09-05 10:09:44 +02:00
Samuel Dionne-Riel
7fa154f3ee
nixos/anbox: allow applying changes to the image
2023-09-05 10:09:43 +02:00
Samuel Dionne-Riel
cdc51c811a
nixos/anbox: handle new kernel configurations
2023-09-05 10:09:43 +02:00
Samuel Dionne-Riel
708e1eb8ba
nixos/anbox: mark anbox0 as unmanaged with NetworkManager
2023-09-05 10:09:42 +02:00
Adam Stephens
efd1605be6
nixos/lxd: add virtual-machine support, image and module
2023-09-03 20:06:44 -04:00
github-actions[bot]
4a9909e0db
Merge master into staging-next
2023-08-19 00:01:42 +00:00
Adam Stephens
1403486d17
nixos/lxd-agent: init module from distrobuilder generator
2023-08-18 22:28:59 +00:00