pyrox.dev / nixpkgs
lol
fork atom

nixos/containers: add catatonit / init_path

https://github.com/containers/common/blob/master/docs/containers.conf.5.md

- Also drop unneeded true from ociSeccompBpfHook

zowoq 4b111227 be38dc44

options
unified split
Changed files
+2 -1
nixos
modules
virtualisation
containers.nix
+2 -1
nixos/modules/virtualisation/containers.nix 
···

       
118

       
118

       
 

       
      [network]


     

       
119

       
119

       
 

       
      cni_plugin_dirs = ["${pkgs.cni-plugins}/bin/"]


     

       
120

       
120

       
 

       



     

       
121

       

       
-

       
      ${lib.optionalString (cfg.ociSeccompBpfHook.enable == true) ''


     

       
122

       
121

       
 

       
      [engine]


     

       

       
122

       
+

       
      init_path = "${pkgs.catatonit}/bin/catatonit"


     

       

       
123

       
+

       
      ${lib.optionalString (cfg.ociSeccompBpfHook.enable) ''


     

       
123

       
124

       
 

       
      hooks_dir = [


     

       
124

       
125

       
 

       
        "${config.boot.kernelPackages.oci-seccomp-bpf-hook}",


     

       
125

       
126

       
 

       
      ]