76 lines
1.5 KiB
Nix
76 lines
1.5 KiB
Nix
|
# LXC Configuration
|
||
|
|
|
||
|
|
{ config, lib, pkgs, ... }:
|
||
|
|
|
||
|
|
with lib;
|
||
|
|
|
||
|
|
let
|
||
|
|
|
||
|
|
cfg = config.virtualisation.lxc;
|
||
|
|
|
||
|
|
in
|
||
|
|
|
||
|
|
{
|
||
|
|
###### interface
|
||
|
|
|
||
|
|
options.virtualisation.lxc = {
|
||
|
|
enable =
|
||
|
|
mkOption {
|
||
|
|
type = types.bool;
|
||
|
|
default = false;
|
||
|
|
description =
|
||
|
|
''
|
||
|
|
This enables Linux Containers (LXC), which provides tools
|
||
|
|
for creating and managing system or application containers
|
||
|
|
on Linux.
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
|
||
|
|
systemConfig =
|
||
|
|
mkOption {
|
||
|
|
type = types.lines;
|
||
|
|
default = "";
|
||
|
|
description =
|
||
|
|
''
|
||
|
|
This is the system-wide LXC config. See lxc.system.conf(5).
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
|
||
|
|
defaultConfig =
|
||
|
|
mkOption {
|
||
|
|
type = types.lines;
|
||
|
|
default = "";
|
||
|
|
description =
|
||
|
|
''
|
||
|
|
Default config (default.conf) for new containers, i.e. for
|
||
|
|
network config. See lxc.container.conf(5).
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
|
||
|
|
usernetConfig =
|
||
|
|
mkOption {
|
||
|
|
type = types.lines;
|
||
|
|
default = "";
|
||
|
|
description =
|
||
|
|
''
|
||
|
|
This is the config file for managing unprivileged user network
|
||
|
|
administration access in LXC. See lxc-user-net(5).
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
###### implementation
|
||
|
|
|
||
|
|
config = mkIf cfg.enable {
|
||
|
|
|
||
|
|
environment.systemPackages = [ pkgs.lxc ];
|
||
|
|
|
||
|
|
environment.etc."lxc/lxc.conf".text = cfg.systemConfig;
|
||
|
|
environment.etc."lxc/lxc-usernet".text = cfg.usernetConfig;
|
||
|
|
environment.etc."lxc/default.conf".text = cfg.defaultConfig;
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
}
|