eliribble
/
nixos-systems
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add podman-service unit 

This enables the service for binding to podman over a socket which is in
turn used by Tealok for managing the services on the server.
This commit is contained in:
Eli Ribble 2024-09-21 10:39:58 -07:00
parent 2caa4810fd
commit 46dbe52b16
1 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
quinn/etc/nixos/configuration.nix
View File

@ -64,6 +64,7 @@
# Enable touchpad support (enabled default in most desktopManager). # Enable touchpad support (enabled default in most desktopManager).
# services.libinput.enable = true; # services.libinput.enable = true;
users.groups.podman-service = {};
users.groups.scanner = {}; users.groups.scanner = {};
users.groups.step = {}; users.groups.step = {};
@ -77,6 +78,12 @@
# tree # tree
# ]; # ];
}; };
users.users.podman-service = {
group = "podman-service";
isNormalUser = false;
isSystemUser = true;
description = "User for podman daemon";
};
users.users.scanner = { users.users.scanner = {
group = "scanner"; group = "scanner";
isNormalUser = false; isNormalUser = false;
@ -312,6 +319,17 @@
# Useful for debugging systemd networkd # Useful for debugging systemd networkd
systemd.services.systemd-networkd.environment.SYSTEMD_LOG_LEVEL = "debug"; systemd.services.systemd-networkd.environment.SYSTEMD_LOG_LEVEL = "debug";
systemd.services.podman-api = {
enable = true;
wantedBy = [ "multi-user.target" ];
after = [ "network.target" ];
description = "Daemon for handling podman requests from Tealok";
serviceConfig = {
User = "root";
WorkingDirectory = "/tmp";
ExecStart = "${pkgs.podman}/bin/podman system service -t 0";
};
};
systemd.services.scan-uploader = { systemd.services.scan-uploader = {
enable = true; enable = true;
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
@ -331,6 +349,5 @@
# Enable podman since we are on NixOS 21.05 # Enable podman since we are on NixOS 21.05
virtualisation.docker.enable = false; virtualisation.docker.enable = false;
virtualisation.podman.enable = true; virtualisation.podman.enable = true;
virtualisation.podman.dockerSocket.enable = true;
} }