felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(virtualisation): specify sub{u,g}id ranges for containers instead of root

Browse source 
Privileged podman uses `containers` user for user namespaces.
This commit is contained in:
Felix Schröter 2023-09-30 02:37:35 +02:00
parent f1219e1045
commit a19fb94480
Signed by: felschr
GPG key ID: 671E39E6744C807D
1 changed files with 5 additions and 1 deletions

6
virtualisation/containers.nix
View file

@ -20,7 +20,9 @@ _:
};
# Increase sub{u,g}id range
users.users."root" = {
users.users."containers" = {
isSystemUser = true;
group = "containers";
subUidRanges = [{
startUid = 60100000;
count = 60000000;
@ -30,4 +32,6 @@ _:
count = 60000000;
}];
};
users.groups.containers = { };
}