···

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
rec {

     

       
4
       
4
       
 
       


     

       
5
       
5
       
+
       
  # Copy configuration files to avoid having the entire sources in the system closure

     

       
6
       
6
       
+
       
  copyFile = filePath: pkgs.runCommandNoCC (builtins.unsafeDiscardStringContext (builtins.baseNameOf filePath)) {} ''

     

       
7
       
7
       
+
       
    cp ${filePath} $out

     

       
8
       
8
       
+
       
  '';

     

       
9
       
9
       
+
       


     

       
5
       
10
       
 
       
  # Check whenever fileSystem is needed for boot.  NOTE: Make sure

     

       
6
       
11
       
 
       
  # pathsNeededForBoot is closed under the parent relationship, i.e. if /a/b/c

     

       
7
       
12
       
 
       
  # is in the list, put /a and /a/b in as well.

     

···

       
1
       
1
       
-
       
{ config, lib, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, lib, pkgs, utils, ... }:

     

       
2
       
2
       
 
       
let

     

       
3
       
3
       
 
       
  cfg = config.virtualisation.containers;

     

       
4
       
4
       
 
       


     
···

       
13
       
13
       
 
       
    json2toml "$valuePath" "$out"

     

       
14
       
14
       
 
       
  '';

     

       
15
       
15
       
 
       


     

       
16
       
16
       
-
       
  # Copy configuration files to avoid having the entire sources in the system closure

     

       
17
       
17
       
-
       
  copyFile = filePath: pkgs.runCommandNoCC (builtins.unsafeDiscardStringContext (builtins.baseNameOf filePath)) {} ''

     

       
18
       
18
       
-
       
    cp ${filePath} $out

     

       
19
       
19
       
-
       
  '';

     

       
20
       
16
       
 
       
in

     

       
21
       
17
       
 
       
{

     

       
22
       
18
       
 
       
  meta = {

     
···

       
136
       
132
       
 
       


     

       
137
       
133
       
 
       
    environment.etc."containers/policy.json".source =

     

       
138
       
134
       
 
       
      if cfg.policy != {} then pkgs.writeText "policy.json" (builtins.toJSON cfg.policy)

     

       
139
       
139
       
-
       
      else copyFile "${pkgs.skopeo.src}/default-policy.json";

     

       
135
       
135
       
+
       
      else utils.copyFile "${pkgs.skopeo.src}/default-policy.json";

     

       
140
       
136
       
 
       
  };

     

       
141
       
137
       
 
       


     

       
142
       
138
       
 
       
}

     

···

       
1
       
1
       
-
       
{ config, lib, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, lib, pkgs, utils, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
with lib;

     

       
4
       
4
       
 
       
let

     
···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  crioPackage = (pkgs.cri-o.override { inherit (cfg) extraPackages; });

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
  # Copy configuration files to avoid having the entire sources in the system closure

     

       
10
       
10
       
-
       
  copyFile = filePath: pkgs.runCommandNoCC (builtins.unsafeDiscardStringContext (builtins.baseNameOf filePath)) { } ''

     

       
11
       
11
       
-
       
    cp ${filePath} $out

     

       
12
       
12
       
-
       
  '';

     

       
13
       
9
       
 
       
in

     

       
14
       
10
       
 
       
{

     

       
15
       
11
       
 
       
  imports = [

     
···

       
89
       
85
       
 
       
  config = mkIf cfg.enable {

     

       
90
       
86
       
 
       
    environment.systemPackages = [ cfg.package pkgs.cri-tools ];

     

       
91
       
87
       
 
       


     

       
92
       
92
       
-
       
    environment.etc."crictl.yaml".source = copyFile "${pkgs.cri-o-unwrapped.src}/crictl.yaml";

     

       
88
       
88
       
+
       
    environment.etc."crictl.yaml".source = utils.copyFile "${pkgs.cri-o-unwrapped.src}/crictl.yaml";

     

       
93
       
89
       
 
       


     

       
94
       
90
       
 
       
    environment.etc."crio/crio.conf.d/00-default.conf".text = ''

     

       
95
       
91
       
 
       
      [crio]

     
···

       
116
       
112
       
 
       
      ''}

     

       
117
       
113
       
 
       
    '';

     

       
118
       
114
       
 
       


     

       
119
       
119
       
-
       
    environment.etc."cni/net.d/10-crio-bridge.conf".source = copyFile "${pkgs.cri-o-unwrapped.src}/contrib/cni/10-crio-bridge.conf";

     

       
120
       
120
       
-
       
    environment.etc."cni/net.d/99-loopback.conf".source = copyFile "${pkgs.cri-o-unwrapped.src}/contrib/cni/99-loopback.conf";

     

       
115
       
115
       
+
       
    environment.etc."cni/net.d/10-crio-bridge.conf".source = utils.copyFile "${pkgs.cri-o-unwrapped.src}/contrib/cni/10-crio-bridge.conf";

     

       
116
       
116
       
+
       
    environment.etc."cni/net.d/99-loopback.conf".source = utils.copyFile "${pkgs.cri-o-unwrapped.src}/contrib/cni/99-loopback.conf";

     

       
121
       
117
       
 
       


     

       
122
       
118
       
 
       
    # Enable common /etc/containers configuration

     

       
123
       
119
       
 
       
    virtualisation.containers.enable = true;

     

···

       
1
       
1
       
-
       
{ config, lib, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, lib, pkgs, utils, ... }:

     

       
2
       
2
       
 
       
let

     

       
3
       
3
       
 
       
  cfg = config.virtualisation.podman;

     

       
4
       
4
       
 
       


     
···

       
19
       
19
       
 
       
      basename=$(basename $f | sed s/podman/docker/g)

     

       
20
       
20
       
 
       
      ln -s $f $man/share/man/man1/$basename

     

       
21
       
21
       
 
       
    done

     

       
22
       
22
       
-
       
  '';

     

       
23
       
23
       
-
       


     

       
24
       
24
       
-
       
  # Copy configuration files to avoid having the entire sources in the system closure

     

       
25
       
25
       
-
       
  copyFile = filePath: pkgs.runCommandNoCC (builtins.unsafeDiscardStringContext (builtins.baseNameOf filePath)) {} ''

     

       
26
       
26
       
-
       
    cp ${filePath} $out

     

       
27
       
22
       
 
       
  '';

     

       
28
       
23
       
 
       


     

       
29
       
24
       
 
       
in

     
···

       
88
       
83
       
 
       
    environment.systemPackages = [ cfg.package ]

     

       
89
       
84
       
 
       
      ++ lib.optional cfg.dockerCompat dockerCompat;

     

       
90
       
85
       
 
       


     

       
91
       
91
       
-
       
    environment.etc."cni/net.d/87-podman-bridge.conflist".source = copyFile "${pkgs.podman-unwrapped.src}/cni/87-podman-bridge.conflist";

     

       
86
       
86
       
+
       
    environment.etc."cni/net.d/87-podman-bridge.conflist".source = utils.copyFile "${pkgs.podman-unwrapped.src}/cni/87-podman-bridge.conflist";

     

       
92
       
87
       
 
       


     

       
93
       
88
       
 
       
    # Enable common /etc/containers configuration

     

       
94
       
89
       
 
       
    virtualisation.containers.enable = true;