lew/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

use dedicated podman user for rootless containers

Browse source 
Adds a system user 'podman' (uid 900) with subuid/subgid ranges
and linger for running OCI containers. Removes podman-specific
settings from lew user. DokuWiki switches to sdnotify=healthy
since the image has a built-in healthcheck.
This commit is contained in:
Lewis Wynne 2026-04-04 23:53:32 +01:00
parent 71f32ba49c
commit 102b195d27
4 changed files with 15 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

12
hosts/lab/default.nix
View file

@ -23,6 +23,18 @@
security.sudo.wheelNeedsPassword = false;
users.users.podman = {
isSystemUser = true;
group = "podman";
home = "/var/lib/podman";
createHome = true;
uid = 900;
linger = true;
subUidRanges = [{ startUid = 100000; count = 65536; }];
subGidRanges = [{ startGid = 100000; count = 65536; }];
};
users.groups.podman = {};
virtualisation.containers.enable = true;
virtualisation.podman = {
enable = true;