···

       
232
       
 
       
      # containers cannot reach aardvark-dns otherwise

     

       
233
       
 
       
      networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];

     

       
234
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
235
       
 
       
      virtualisation.containers = {

     

       
236
       
 
       
        enable = true; # Enable common /etc/containers configuration

     

       
237
       
 
       
        containersConf.settings = {

     

       
238
       
-
       
          network.network_backend = "netavark";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
239
       
 
       
        };

     

       
240
       
 
       
      };

     

       
241
       
 
       


     

···

       
232
       
 
       
      # containers cannot reach aardvark-dns otherwise

     

       
233
       
 
       
      networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];

     

       
234
       
 
       


     

       
235
       
+
       
      virtualisation.podman.extraPackages = [

     

       
236
       
+
       
        pkgs.iptables

     

       
237
       
+
       
      ]

     

       
238
       
+
       
      ++ lib.optional config.networking.nftables.enable pkgs.nftables;

     

       
239
       
 
       
      virtualisation.containers = {

     

       
240
       
 
       
        enable = true; # Enable common /etc/containers configuration

     

       
241
       
 
       
        containersConf.settings = {

     

       
242
       
+
       
          network = {

     

       
243
       
+
       
            network_backend = "netavark";

     

       
244
       
+
       
            firewall_driver = lib.mkIf config.networking.nftables.enable "nftables";

     

       
245
       
+
       
          };

     

       
246
       
 
       
        };

     

       
247
       
 
       
      };

     

       
248
       
 
       


     

···

       
25
       
 
       
  extraRuntimes ? lib.optionals stdenv.hostPlatform.isLinux [ runc ], # e.g.: runc, gvisor, youki

     

       
26
       
 
       
  fuse-overlayfs,

     

       
27
       
 
       
  util-linuxMinimal,

     

       
28
       
-
       
  iptables,

     

       
29
       
 
       
  iproute2,

     

       
30
       
 
       
  catatonit,

     

       
31
       
 
       
  gvproxy,

     
···

       
43
       
 
       
    lib.optionals stdenv.hostPlatform.isLinux [

     

       
44
       
 
       
      fuse-overlayfs

     

       
45
       
 
       
      util-linuxMinimal

     

       
46
       
-
       
      iptables

     

       
47
       
 
       
      iproute2

     

       
48
       
 
       
    ]

     

       
49
       
 
       
    ++ lib.optionals stdenv.hostPlatform.isDarwin [

     

···

       
25
       
 
       
  extraRuntimes ? lib.optionals stdenv.hostPlatform.isLinux [ runc ], # e.g.: runc, gvisor, youki

     

       
26
       
 
       
  fuse-overlayfs,

     

       
27
       
 
       
  util-linuxMinimal,

     

       
0
       
 
       

     

       
28
       
 
       
  iproute2,

     

       
29
       
 
       
  catatonit,

     

       
30
       
 
       
  gvproxy,

     
···

       
42
       
 
       
    lib.optionals stdenv.hostPlatform.isLinux [

     

       
43
       
 
       
      fuse-overlayfs

     

       
44
       
 
       
      util-linuxMinimal

     

       
0
       
 
       

     

       
45
       
 
       
      iproute2

     

       
46
       
 
       
    ]

     

       
47
       
 
       
    ++ lib.optionals stdenv.hostPlatform.isDarwin [