pin container images and run rootless under lew
This commit is contained in:
parent
07faf5c11e
commit
10a946ade3
2 changed files with 7 additions and 2 deletions
|
|
@ -8,13 +8,16 @@
|
|||
};
|
||||
|
||||
virtualisation.oci-containers.containers.foundry = {
|
||||
image = "node:22-slim";
|
||||
image = "node:22.22.2-slim";
|
||||
cmd = [ "node" "main.js" "--dataPath=/data" ];
|
||||
workdir = "/app";
|
||||
user = "1000:1000";
|
||||
volumes = [
|
||||
"/srv/foundry/app:/app:ro"
|
||||
"/srv/foundry/data:/data"
|
||||
];
|
||||
ports = [ "127.0.0.1:30000:30000" ];
|
||||
};
|
||||
|
||||
systemd.services.podman-foundry.serviceConfig.User = "lew";
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue