feat(virtualisation): enable gvisor for containers

This commit is contained in:
Felix Schröter 2024-03-07 20:47:24 +01:00
parent 4eab62fe3b
commit 5da5d66d6a
Signed by: felschr
GPG key ID: 671E39E6744C807D
4 changed files with 12 additions and 1 deletions

View file

@ -37,6 +37,8 @@ let
config.age.secrets.immich-typesense-env.path
];
extraOptions = [
"--runtime-flag=directfs=false"
"--runtime-flag=network=host"
"--uidmap=0:65534:1"
"--gidmap=0:65534:1"
"--uidmap=${toString uid}:${toString uid}:1"