lew/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

use dedicated podman user for rootless containers

Browse source 
Adds a system user 'podman' (uid 900) with subuid/subgid ranges
and linger for running OCI containers. Removes podman-specific
settings from lew user. DokuWiki switches to sdnotify=healthy
since the image has a built-in healthcheck.
This commit is contained in:
Lewis Wynne 2026-04-04 23:53:32 +01:00
parent 71f32ba49c
commit 102b195d27
4 changed files with 15 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/lab/foundry.nix
View file

@ -11,8 +11,7 @@
image = "node:22.22.2-slim";
cmd = [ "node" "main.js" "--dataPath=/data" ];
workdir = "/app";
user = "1000:1000";
podman.user = "lew";
podman.user = "podman";
volumes = [
"/srv/foundry/app:/app:ro"
"/srv/foundry/data:/data"