commit 85c14ff2ff52d44ed05990ea57f1551f175ecece · pyrox.dev/nixpkgs

+25 -27
nixos/modules/virtualisation/lxd.nix
···

       2
       2
        
       

     

       3
       3
        
       { config, lib, pkgs, ... }:

     

       4
       4
        
       

     

       5
       5
       -
       with lib;

     

       6
       6
       -
       

     

       7
       5
        
       let

     

       8
       6
        
         cfg = config.virtualisation.lxd;

     

       9
       7
        
       in {

     

       10
       8
        
         imports = [

     

       11
       11
       -
           (mkRemovedOptionModule [ "virtualisation" "lxd" "zfsPackage" ] "Override zfs in an overlay instead to override it globally")

     

       9
       9
       +
           (lib.mkRemovedOptionModule [ "virtualisation" "lxd" "zfsPackage" ] "Override zfs in an overlay instead to override it globally")

     

       12
       10
        
         ];

     

       13
       11
        
       

     

       14
       12
        
         ###### interface

     

       15
       13
        
       

     

       16
       14
        
         options = {

     

       17
       15
        
           virtualisation.lxd = {

     

       18
       18
       -
             enable = mkOption {

     

       19
       19
       -
               type = types.bool;

     

       16
       16
       +
             enable = lib.mkOption {

     

       17
       17
       +
               type = lib.types.bool;

     

       20
       18
        
               default = false;

     

       21
       19
        
               description = lib.mdDoc ''

     

       22
       20
        
                 This option enables lxd, a daemon that manages

     
···

       32
       30
        
               '';

     

       33
       31
        
             };

     

       34
       32
        
       

     

       35
       35
       -
             package = mkOption {

     

       36
       36
       -
               type = types.package;

     

       33
       33
       +
             package = lib.mkOption {

     

       34
       34
       +
               type = lib.types.package;

     

       37
       35
        
               default = pkgs.lxd;

     

       38
       38
       -
               defaultText = literalExpression "pkgs.lxd";

     

       36
       36
       +
               defaultText = lib.literalExpression "pkgs.lxd";

     

       39
       37
        
               description = lib.mdDoc ''

     

       40
       38
        
                 The LXD package to use.

     

       41
       39
        
               '';

     

       42
       40
        
             };

     

       43
       41
        
       

     

       44
       44
       -
             lxcPackage = mkOption {

     

       45
       45
       -
               type = types.package;

     

       42
       42
       +
             lxcPackage = lib.mkOption {

     

       43
       43
       +
               type = lib.types.package;

     

       46
       44
        
               default = pkgs.lxc;

     

       47
       47
       -
               defaultText = literalExpression "pkgs.lxc";

     

       45
       45
       +
               defaultText = lib.literalExpression "pkgs.lxc";

     

       48
       46
        
               description = lib.mdDoc ''

     

       49
       47
        
                 The LXC package to use with LXD (required for AppArmor profiles).

     

       50
       48
        
               '';

     

       51
       49
        
             };

     

       52
       50
        
       

     

       53
       53
       -
             zfsSupport = mkOption {

     

       54
       54
       -
               type = types.bool;

     

       51
       51
       +
             zfsSupport = lib.mkOption {

     

       52
       52
       +
               type = lib.types.bool;

     

       55
       53
        
               default = config.boot.zfs.enabled;

     

       56
       56
       -
               defaultText = literalExpression "config.boot.zfs.enabled";

     

       54
       54
       +
               defaultText = lib.literalExpression "config.boot.zfs.enabled";

     

       57
       55
        
               description = lib.mdDoc ''

     

       58
       56
        
                 Enables lxd to use zfs as a storage for containers.

     

       59
       57
        
       

     
···

       62
       60
        
               '';

     

       63
       61
        
             };

     

       64
       62
        
       

     

       65
       65
       -
             recommendedSysctlSettings = mkOption {

     

       66
       66
       -
               type = types.bool;

     

       63
       63
       +
             recommendedSysctlSettings = lib.mkOption {

     

       64
       64
       +
               type = lib.types.bool;

     

       67
       65
        
               default = false;

     

       68
       66
        
               description = lib.mdDoc ''

     

       69
       67
        
                 Enables various settings to avoid common pitfalls when

     
···

       75
       73
        
               '';

     

       76
       74
        
             };

     

       77
       75
        
       

     

       78
       78
       -
             startTimeout = mkOption {

     

       79
       79
       -
               type = types.int;

     

       76
       76
       +
             startTimeout = lib.mkOption {

     

       77
       77
       +
               type = lib.types.int;

     

       80
       78
        
               default = 600;

     

       81
       79
        
               apply = toString;

     

       82
       80
        
               description = lib.mdDoc ''

     
···

       91
       89
        
                 Enables the (experimental) LXD UI.

     

       92
       90
        
               '');

     

       93
       91
        
       

     

       94
       94
       -
               package = mkPackageOption pkgs.lxd-unwrapped "ui" { };

     

       92
       92
       +
               package = lib.mkPackageOption pkgs.lxd-unwrapped "ui" { };

     

       95
       93
        
             };

     

       96
       94
        
           };

     

       97
       95
        
         };

     

       98
       96
        
       

     

       99
       97
        
         ###### implementation

     

       100
       100
       -
         config = mkIf cfg.enable {

     

       98
       98
       +
         config = lib.mkIf cfg.enable {

     

       101
       99
        
           environment.systemPackages = [ cfg.package ];

     

       102
       100
        
       

     

       103
       101
        
           # Note: the following options are also declared in virtualisation.lxc, but

     
···

       139
       137
        
             wantedBy = [ "multi-user.target" ];

     

       140
       138
        
             after = [

     

       141
       139
        
               "network-online.target"

     

       142
       142
       -
               (mkIf config.virtualisation.lxc.lxcfs.enable "lxcfs.service")

     

       140
       140
       +
               (lib.mkIf config.virtualisation.lxc.lxcfs.enable "lxcfs.service")

     

       143
       141
        
             ];

     

       144
       142
        
             requires = [

     

       145
       143
        
               "network-online.target"

     

       146
       144
        
               "lxd.socket"

     

       147
       147
       -
               (mkIf config.virtualisation.lxc.lxcfs.enable "lxcfs.service")

     

       145
       145
       +
               (lib.mkIf config.virtualisation.lxc.lxcfs.enable "lxcfs.service")

     

       148
       146
        
             ];

     

       149
       147
        
             documentation = [ "man:lxd(1)" ];

     

       150
       148
        
       

     

       151
       149
        
             path = [ pkgs.util-linux ]

     

       152
       152
       -
               ++ optional cfg.zfsSupport config.boot.zfs.package;

     

       150
       150
       +
               ++ lib.optional cfg.zfsSupport config.boot.zfs.package;

     

       153
       151
        
       

     

       154
       154
       -
             environment = mkIf (cfg.ui.enable) {

     

       152
       152
       +
             environment = lib.mkIf (cfg.ui.enable) {

     

       155
       153
        
               "LXD_UI" = cfg.ui.package;

     

       156
       154
        
             };

     

       157
       155
        
       

     
···

       173
       171
        
               # By default, `lxd` loads configuration files from hard-coded

     

       174
       172
        
               # `/usr/share/lxc/config` - since this is a no-go for us, we have to

     

       175
       173
        
               # explicitly tell it where the actual configuration files are

     

       176
       176
       -
               Environment = mkIf (config.virtualisation.lxc.lxcfs.enable)

     

       174
       174
       +
               Environment = lib.mkIf (config.virtualisation.lxc.lxcfs.enable)

     

       177
       175
        
                 "LXD_LXC_TEMPLATE_CONFIG=${pkgs.lxcfs}/share/lxc/config";

     

       178
       176
        
             };

     

       179
       177
        
           };

     
···

       185
       183
        
             subGidRanges = [ { startGid = 1000000; count = 65536; } ];

     

       186
       184
        
           };

     

       187
       185
        
       

     

       188
       188
       -
           boot.kernel.sysctl = mkIf cfg.recommendedSysctlSettings {

     

       186
       186
       +
           boot.kernel.sysctl = lib.mkIf cfg.recommendedSysctlSettings {

     

       189
       187
        
             "fs.inotify.max_queued_events" = 1048576;

     

       190
       188
        
             "fs.inotify.max_user_instances" = 1048576;

     

       191
       189
        
             "fs.inotify.max_user_watches" = 1048576;

     
···

       197
       195
        
           };

     

       198
       196
        
       

     

       199
       197
        
           boot.kernelModules = [ "veth" "xt_comment" "xt_CHECKSUM" "xt_MASQUERADE" "vhost_vsock" ]

     

       200
       200
       -
             ++ optionals (!config.networking.nftables.enable) [ "iptable_mangle" ];

     

       198
       198
       +
             ++ lib.optionals (!config.networking.nftables.enable) [ "iptable_mangle" ];

     

       201
       199
        
         };

     

       202
       200
        
       }