nrabulinski/settei
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

common/incus: make bridge trusted, add user as admin

Browse source
This commit is contained in:
Nikodem Rabuliński 2024-05-26 18:36:35 +02:00
parent 32d458c26e
commit ab99281d76
3 changed files with 35 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/legion/default.nix
View file

@ -30,7 +30,6 @@
hostName = "legion";
hostId = builtins.substring 0 8 (builtins.readFile ./machine-id);
networkmanager.enable = true;
nftables.enable = true;
};
systemd.services.NetworkManager-wait-online.enable = false;

1
hosts/ude/default.nix
View file

@ -19,7 +19,6 @@
loader.systemd-boot.configurationLimit = 1;
loader.efi.canTouchEfiVariables = true;
};
networking.nftables.enable = true;
common.hercules.enable = true;
services.hercules-ci-agent.settings.concurrentTasks = 6;

61
modules/system/common/incus.nix
View file

@ -3,6 +3,7 @@
lib,
config,
pkgs,
username,
...
}:
let
@ -14,33 +15,41 @@ let
environment.systemPackages = [ cfg.clientPackage ];
};
linuxConfig = lib.optionalAttrs isLinux {
virtualisation.incus = lib.mkIf (!cfg.clientOnly) {
enable = true;
inherit (cfg) package clientPackage;
preseed = {
networks = [
{
name = "incusbr0";
type = "bridge";
config = {
"ipv4.address" = "10.0.100.1/24";
"ipv4.nat" = "true";
};
}
];
storage_pools = [
{
name = "default";
driver = "dir";
config = {
source = "/var/lib/incus/storage-pools/default";
};
}
];
linuxConfig = lib.optionalAttrs isLinux (
lib.mkIf (!cfg.clientOnly) {
virtualisation.incus = {
enable = true;
inherit (cfg) package clientPackage;
preseed = {
# TODO: Default profile with storage pool
networks = [
{
name = "incusbr0";
type = "bridge";
config = {
"ipv4.address" = "10.0.100.1/24";
"ipv4.nat" = "true";
};
}
];
storage_pools = [
{
name = "default";
driver = "dir";
config = {
source = "/var/lib/incus/storage-pools/default";
};
}
];
};
};
};
};
networking = {
nftables.enable = true;
firewall.trustedInterfaces = [ "incusbr0" ];
};
users.users.${username}.extraGroups = [ "incus-admin" ];
}
);
darwinConfig = lib.optionalAttrs (!isLinux) {
assertions = [