commit a209d563cdec4710438e5b4a58f7b706804005f8 · pyrox.dev/nixpkgs

+32

nixos/doc/manual/from_md/release-notes/rl-2111.section.xml

···

       1563
        
                 when they are socket-activated.

     

       1564
        
               </para>

     

       1565
        
             </listitem>

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       1566
        
           </itemizedlist>

     

       1567
        
         </section>

     

       1568
        
       </section>

···

       1563
        
                 when they are socket-activated.

     

       1564
        
               </para>

     

       1565
        
             </listitem>

     

       1566
       +
             <listitem>

     

       1567
       +
               <para>

     

       1568
       +
                 The <literal>virtualisation.libvirtd</literal> module has been

     

       1569
       +
                 refactored and updated with new options:

     

       1570
       +
               </para>

     

       1571
       +
               <itemizedlist spacing="compact">

     

       1572
       +
                 <listitem>

     

       1573
       +
                   <para>

     

       1574
       +
                     <literal>virtualisation.libvirtd.qemu*</literal> options

     

       1575
       +
                     (e.g.:

     

       1576
       +
                     <literal>virtualisation.libvirtd.qemuRunAsRoot</literal>)

     

       1577
       +
                     were moved to

     

       1578
       +
                     <link xlink:href="options.html#opt-virtualisation.libvirtd.qemu"><literal>virtualisation.libvirtd.qemu</literal></link>

     

       1579
       +
                     submodule,

     

       1580
       +
                   </para>

     

       1581
       +
                 </listitem>

     

       1582
       +
                 <listitem>

     

       1583
       +
                   <para>

     

       1584
       +
                     software TPM1/TPM2 support (e.g.: Windows 11 guests)

     

       1585
       +
                     (<link xlink:href="options.html#opt-virtualisation.libvirtd.qemu.swtpm"><literal>virtualisation.libvirtd.qemu.swtpm</literal></link>),

     

       1586
       +
                   </para>

     

       1587
       +
                 </listitem>

     

       1588
       +
                 <listitem>

     

       1589
       +
                   <para>

     

       1590
       +
                     custom OVMF package (e.g.:

     

       1591
       +
                     <literal>pkgs.OVMFFull</literal> with HTTP, CSM and Secure

     

       1592
       +
                     Boot support)

     

       1593
       +
                     (<link xlink:href="options.html#opt-virtualisation.libvirtd.qemu.ovmf.package"><literal>virtualisation.libvirtd.qemu.ovmf.package</literal></link>).

     

       1594
       +
                   </para>

     

       1595
       +
                 </listitem>

     

       1596
       +
               </itemizedlist>

     

       1597
       +
             </listitem>

     

       1598
        
           </itemizedlist>

     

       1599
        
         </section>

     

       1600
        
       </section>

nixos/doc/manual/release-notes/rl-2111.section.md

···

       451
        
       - `networking.sits` now supports Foo-over-UDP encapsulation.

     

       452
        
       

     

       453
        
       - Changing systemd `.socket` units now restarts them and stops the service that is activated by them. Additionally, services with `stopOnChange = false` don't break anymore when they are socket-activated.

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0

···

       451
        
       - `networking.sits` now supports Foo-over-UDP encapsulation.

     

       452
        
       

     

       453
        
       - Changing systemd `.socket` units now restarts them and stops the service that is activated by them. Additionally, services with `stopOnChange = false` don't break anymore when they are socket-activated.

     

       454
       +
       

     

       455
       +
       -  The `virtualisation.libvirtd` module has been refactored and updated with new options:

     

       456
       +
           - `virtualisation.libvirtd.qemu*` options (e.g.: `virtualisation.libvirtd.qemuRunAsRoot`) were moved to [`virtualisation.libvirtd.qemu`](options.html#opt-virtualisation.libvirtd.qemu) submodule,

     

       457
       +
           - software TPM1/TPM2 support (e.g.: Windows 11 guests) ([`virtualisation.libvirtd.qemu.swtpm`](options.html#opt-virtualisation.libvirtd.qemu.swtpm)),

     

       458
       +
           - custom OVMF package (e.g.: `pkgs.OVMFFull` with HTTP, CSM and Secure Boot support) ([`virtualisation.libvirtd.qemu.ovmf.package`](options.html#opt-virtualisation.libvirtd.qemu.ovmf.package)).

+153 -84

nixos/modules/virtualisation/libvirtd.nix

···

       13
        
         '';

     

       14
        
         ovmfFilePrefix = if pkgs.stdenv.isAarch64 then "AAVMF" else "OVMF";

     

       15
        
         qemuConfigFile = pkgs.writeText "qemu.conf" ''

     

       16
       -
           ${optionalString cfg.qemuOvmf ''

     

       17
        
             nvram = [ "/run/libvirt/nix-ovmf/${ovmfFilePrefix}_CODE.fd:/run/libvirt/nix-ovmf/${ovmfFilePrefix}_VARS.fd" ]

     

       18
        
           ''}

     

       19
       -
           ${optionalString (!cfg.qemuRunAsRoot) ''

     

       20
        
             user = "qemu-libvirtd"

     

       21
        
             group = "qemu-libvirtd"

     

       22
        
           ''}

     

       23
       -
           ${cfg.qemuVerbatimConfig}

     

       24
        
         '';

     

       25
        
         dirName = "libvirt";

     

       26
        
         subDirs = list: [ dirName ] ++ map (e: "${dirName}/${e}") list;

     

       27
        
       

     

       28
       -
       in {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       29
        
       

     

       30
        
         imports = [

     

       31
        
           (mkRemovedOptionModule [ "virtualisation" "libvirtd" "enableKVM" ]

     

       32
       -
             "Set the option `virtualisation.libvirtd.qemuPackage' instead.")

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       33
        
         ];

     

       34
        
       

     

       35
        
         ###### interface

     
···

       56
        
             '';

     

       57
        
           };

     

       58
        
       

     

       59
       -
           qemuPackage = mkOption {

     

       60
       -
             type = types.package;

     

       61
       -
             default = pkgs.qemu;

     

       62
       -
             defaultText = literalExpression "pkgs.qemu";

     

       63
       -
             description = ''

     

       64
       -
               Qemu package to use with libvirt.

     

       65
       -
               `pkgs.qemu` can emulate alien architectures (e.g. aarch64 on x86)

     

       66
       -
               `pkgs.qemu_kvm` saves disk space allowing to emulate only host architectures.

     

       67
       -
             '';

     

       68
       -
           };

     

       69
       -
       

     

       70
        
           extraConfig = mkOption {

     

       71
        
             type = types.lines;

     

       72
        
             default = "";

     
···

       76
        
             '';

     

       77
        
           };

     

       78
        
       

     

       79
       -
           qemuRunAsRoot = mkOption {

     

       80
       -
             type = types.bool;

     

       81
       -
             default = true;

     

       82
       -
             description = ''

     

       83
       -
               If true,  libvirtd runs qemu as root.

     

       84
       -
               If false, libvirtd runs qemu as unprivileged user qemu-libvirtd.

     

       85
       -
               Changing this option to false may cause file permission issues

     

       86
       -
               for existing guests. To fix these, manually change ownership

     

       87
       -
               of affected files in /var/lib/libvirt/qemu to qemu-libvirtd.

     

       88
       -
             '';

     

       89
       -
           };

     

       90
       -
       

     

       91
       -
           qemuVerbatimConfig = mkOption {

     

       92
       -
             type = types.lines;

     

       93
       -
             default = ''

     

       94
       -
               namespaces = []

     

       95
       -
             '';

     

       96
       -
             description = ''

     

       97
       -
               Contents written to the qemu configuration file, qemu.conf.

     

       98
       -
               Make sure to include a proper namespace configuration when

     

       99
       -
               supplying custom configuration.

     

       100
       -
             '';

     

       101
       -
           };

     

       102
       -
       

     

       103
       -
           qemuOvmf = mkOption {

     

       104
       -
             type = types.bool;

     

       105
       -
             default = true;

     

       106
       -
             description = ''

     

       107
       -
               Allows libvirtd to take advantage of OVMF when creating new

     

       108
       -
               QEMU VMs with UEFI boot.

     

       109
       -
             '';

     

       110
       -
           };

     

       111
       -
       

     

       112
       -
           qemuOvmfPackage = mkOption {

     

       113
       -
             type = types.package;

     

       114
       -
             default = pkgs.OVMF;

     

       115
       -
             defaultText = literalExpression "pkgs.OVMF";

     

       116
       -
             example = literalExpression "pkgs.OVMFFull";

     

       117
       -
             description = ''

     

       118
       -
               OVMF package to use.

     

       119
       -
             '';

     

       120
       -
           };

     

       121
       -
           qemuSwtpm = mkOption {

     

       122
       -
             type = types.bool;

     

       123
       -
             default = false;

     

       124
       -
             description = ''

     

       125
       -
               Allows libvirtd to use swtpm to create an emulated TPM.

     

       126
       -
             '';

     

       127
       -
           };

     

       128
       -
       

     

       129
        
           extraOptions = mkOption {

     

       130
        
             type = types.listOf types.str;

     

       131
        
             default = [ ];

     
···

       136
        
           };

     

       137
        
       

     

       138
        
           onBoot = mkOption {

     

       139
       -
             type = types.enum ["start" "ignore" ];

     

       140
        
             default = "start";

     

       141
        
             description = ''

     

       142
        
               Specifies the action to be done to / on the guests when the host boots.

     
···

       148
        
           };

     

       149
        
       

     

       150
        
           onShutdown = mkOption {

     

       151
       -
             type = types.enum ["shutdown" "suspend" ];

     

       152
        
             default = "suspend";

     

       153
        
             description = ''

     

       154
        
               When shutting down / restarting the host what method should

     
···

       166
        
             '';

     

       167
        
           };

     

       168
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       169
        
         };

     

       170
        
       

     

       171
        
       

     
···

       179
        
               message = "The libvirtd module currently requires Polkit to be enabled ('security.polkit.enable = true').";

     

       180
        
             }

     

       181
        
             {

     

       182
       -
               assertion = builtins.elem "fd" cfg.qemuOvmfPackage.outputs;

     

       183
        
               message = "The option 'virtualisation.libvirtd.qemuOvmfPackage' needs a package that has an 'fd' output.";

     

       184
        
             }

     

       185
        
           ];

     

       186
        
       

     

       187
        
           environment = {

     

       188
        
             # this file is expected in /etc/qemu and not sysconfdir (/var/lib)

     

       189
       -
             etc."qemu/bridge.conf".text = lib.concatMapStringsSep "\n" (e:

     

       190
       -
               "allow ${e}") cfg.allowedBridges;

     

       191
       -
             systemPackages = with pkgs; [ libressl.nc iptables cfg.package cfg.qemuPackage ];

     

       0
        
       
     

       0
        
       
     

       192
        
             etc.ethertypes.source = "${pkgs.ebtables}/etc/ethertypes";

     

       193
        
           };

     

       194
        
       

     
···

       230
        
               cp -f ${qemuConfigFile} /var/lib/${dirName}/qemu.conf

     

       231
        
       

     

       232
        
               # stable (not GC'able as in /nix/store) paths for using in <emulator> section of xml configs

     

       233
       -
               for emulator in ${cfg.package}/libexec/libvirt_lxc ${cfg.qemuPackage}/bin/qemu-kvm ${cfg.qemuPackage}/bin/qemu-system-*; do

     

       234
        
                 ln -s --force "$emulator" /run/${dirName}/nix-emulators/

     

       235
        
               done

     

       236
        
       

     

       237
        
               for helper in libexec/qemu-bridge-helper bin/qemu-pr-helper; do

     

       238
       -
                 ln -s --force ${cfg.qemuPackage}/$helper /run/${dirName}/nix-helpers/

     

       239
        
               done

     

       240
        
       

     

       241
       -
               ${optionalString cfg.qemuOvmf ''

     

       242
       -
                 ln -s --force ${cfg.qemuOvmfPackage.fd}/FV/${ovmfFilePrefix}_CODE.fd /run/${dirName}/nix-ovmf/

     

       243
       -
                 ln -s --force ${cfg.qemuOvmfPackage.fd}/FV/${ovmfFilePrefix}_VARS.fd /run/${dirName}/nix-ovmf/

     

       244
        
               ''}

     

       245
        
             '';

     

       246
        
       

     
···

       256
        
           systemd.services.libvirtd = {

     

       257
        
             requires = [ "libvirtd-config.service" ];

     

       258
        
             after = [ "libvirtd-config.service" ]

     

       259
       -
                     ++ optional vswitch.enable "ovs-vswitchd.service";

     

       260
        
       

     

       261
        
             environment.LIBVIRTD_ARGS = escapeShellArgs (

     

       262
       -
               [ "--config" configFile

     

       263
       -
                 "--timeout" "120"     # from ${libvirt}/var/lib/sysconfig/libvirtd

     

       264
       -
               ] ++ cfg.extraOptions);

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       265
        
       

     

       266
       -
             path = [ cfg.qemuPackage ] # libvirtd requires qemu-img to manage disk images

     

       267
       -
                    ++ optional vswitch.enable vswitch.package

     

       268
       -
                    ++ optional cfg.qemuSwtpm pkgs.swtpm;

     

       269
        
       

     

       270
        
             serviceConfig = {

     

       271
        
               Type = "notify";

···

       13
        
         '';

     

       14
        
         ovmfFilePrefix = if pkgs.stdenv.isAarch64 then "AAVMF" else "OVMF";

     

       15
        
         qemuConfigFile = pkgs.writeText "qemu.conf" ''

     

       16
       +
           ${optionalString cfg.qemu.ovmf.enable ''

     

       17
        
             nvram = [ "/run/libvirt/nix-ovmf/${ovmfFilePrefix}_CODE.fd:/run/libvirt/nix-ovmf/${ovmfFilePrefix}_VARS.fd" ]

     

       18
        
           ''}

     

       19
       +
           ${optionalString (!cfg.qemu.runAsRoot) ''

     

       20
        
             user = "qemu-libvirtd"

     

       21
        
             group = "qemu-libvirtd"

     

       22
        
           ''}

     

       23
       +
           ${cfg.qemu.verbatimConfig}

     

       24
        
         '';

     

       25
        
         dirName = "libvirt";

     

       26
        
         subDirs = list: [ dirName ] ++ map (e: "${dirName}/${e}") list;

     

       27
        
       

     

       28
       +
         ovmfModule = types.submodule {

     

       29
       +
           options = {

     

       30
       +
             enable = mkOption {

     

       31
       +
               type = types.bool;

     

       32
       +
               default = true;

     

       33
       +
               description = ''

     

       34
       +
                 Allows libvirtd to take advantage of OVMF when creating new

     

       35
       +
                 QEMU VMs with UEFI boot.

     

       36
       +
               '';

     

       37
       +
             };

     

       38
       +
       

     

       39
       +
             package = mkOption {

     

       40
       +
               type = types.package;

     

       41
       +
               default = pkgs.OVMF;

     

       42
       +
               defaultText = literalExpression "pkgs.OVMF";

     

       43
       +
               example = literalExpression "pkgs.OVMFFull";

     

       44
       +
               description = ''

     

       45
       +
                 OVMF package to use.

     

       46
       +
               '';

     

       47
       +
             };

     

       48
       +
           };

     

       49
       +
         };

     

       50
       +
       

     

       51
       +
         swtpmModule = types.submodule {

     

       52
       +
           options = {

     

       53
       +
             enable = mkOption {

     

       54
       +
               type = types.bool;

     

       55
       +
               default = false;

     

       56
       +
               description = ''

     

       57
       +
                 Allows libvirtd to use swtpm to create an emulated TPM.

     

       58
       +
               '';

     

       59
       +
             };

     

       60
       +
       

     

       61
       +
             package = mkOption {

     

       62
       +
               type = types.package;

     

       63
       +
               default = pkgs.swtpm;

     

       64
       +
               defaultText = literalExpression "pkgs.swtpm";

     

       65
       +
               description = ''

     

       66
       +
                 swtpm package to use.

     

       67
       +
               '';

     

       68
       +
             };

     

       69
       +
           };

     

       70
       +
         };

     

       71
       +
       

     

       72
       +
         qemuModule = types.submodule {

     

       73
       +
           options = {

     

       74
       +
             package = mkOption {

     

       75
       +
               type = types.package;

     

       76
       +
               default = pkgs.qemu;

     

       77
       +
               defaultText = literalExpression "pkgs.qemu";

     

       78
       +
               description = ''

     

       79
       +
                 Qemu package to use with libvirt.

     

       80
       +
                 `pkgs.qemu` can emulate alien architectures (e.g. aarch64 on x86)

     

       81
       +
                 `pkgs.qemu_kvm` saves disk space allowing to emulate only host architectures.

     

       82
       +
               '';

     

       83
       +
             };

     

       84
       +
       

     

       85
       +
             runAsRoot = mkOption {

     

       86
       +
               type = types.bool;

     

       87
       +
               default = true;

     

       88
       +
               description = ''

     

       89
       +
                 If true,  libvirtd runs qemu as root.

     

       90
       +
                 If false, libvirtd runs qemu as unprivileged user qemu-libvirtd.

     

       91
       +
                 Changing this option to false may cause file permission issues

     

       92
       +
                 for existing guests. To fix these, manually change ownership

     

       93
       +
                 of affected files in /var/lib/libvirt/qemu to qemu-libvirtd.

     

       94
       +
               '';

     

       95
       +
             };

     

       96
       +
       

     

       97
       +
             verbatimConfig = mkOption {

     

       98
       +
               type = types.lines;

     

       99
       +
               default = ''

     

       100
       +
                 namespaces = []

     

       101
       +
               '';

     

       102
       +
               description = ''

     

       103
       +
                 Contents written to the qemu configuration file, qemu.conf.

     

       104
       +
                 Make sure to include a proper namespace configuration when

     

       105
       +
                 supplying custom configuration.

     

       106
       +
               '';

     

       107
       +
             };

     

       108
       +
       

     

       109
       +
             ovmf = mkOption {

     

       110
       +
               type = ovmfModule;

     

       111
       +
               default = { };

     

       112
       +
               description = ''

     

       113
       +
                 QEMU's OVMF options.

     

       114
       +
               '';

     

       115
       +
             };

     

       116
       +
       

     

       117
       +
             swtpm = mkOption {

     

       118
       +
               type = swtpmModule;

     

       119
       +
               default = { };

     

       120
       +
               description = ''

     

       121
       +
                 QEMU's swtpm options.

     

       122
       +
               '';

     

       123
       +
             };

     

       124
       +
           };

     

       125
       +
         };

     

       126
       +
       in

     

       127
       +
       {

     

       128
        
       

     

       129
        
         imports = [

     

       130
        
           (mkRemovedOptionModule [ "virtualisation" "libvirtd" "enableKVM" ]

     

       131
       +
             "Set the option `virtualisation.libvirtd.qemu.package' instead.")

     

       132
       +
           (mkRenamedOptionModule

     

       133
       +
             [ "virtualisation" "libvirtd" "qemuPackage" ]

     

       134
       +
             [ "virtualisation" "libvirtd" "qemu" "package" ])

     

       135
       +
           (mkRenamedOptionModule

     

       136
       +
             [ "virtualisation" "libvirtd" "qemuRunAsRoot" ]

     

       137
       +
             [ "virtualisation" "libvirtd" "qemu" "runAsRoot" ])

     

       138
       +
           (mkRenamedOptionModule

     

       139
       +
             [ "virtualisation" "libvirtd" "qemuVerbatimConfig" ]

     

       140
       +
             [ "virtualisation" "libvirtd" "qemu" "verbatimConfig" ])

     

       141
       +
           (mkRenamedOptionModule

     

       142
       +
             [ "virtualisation" "libvirtd" "qemuOvmf" ]

     

       143
       +
             [ "virtualisation" "libvirtd" "qemu" "ovmf" "enable" ])

     

       144
       +
           (mkRenamedOptionModule

     

       145
       +
             [ "virtualisation" "libvirtd" "qemuOvmfPackage" ]

     

       146
       +
             [ "virtualisation" "libvirtd" "qemu" "ovmf" "package" ])

     

       147
       +
           (mkRenamedOptionModule

     

       148
       +
             [ "virtualisation" "libvirtd" "qemuSwtpm" ]

     

       149
       +
             [ "virtualisation" "libvirtd" "qemu" "swtpm" "enable" ])

     

       150
        
         ];

     

       151
        
       

     

       152
        
         ###### interface

     
···

       173
        
             '';

     

       174
        
           };

     

       175
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       176
        
           extraConfig = mkOption {

     

       177
        
             type = types.lines;

     

       178
        
             default = "";

     
···

       182
        
             '';

     

       183
        
           };

     

       184
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       185
        
           extraOptions = mkOption {

     

       186
        
             type = types.listOf types.str;

     

       187
        
             default = [ ];

     
···

       192
        
           };

     

       193
        
       

     

       194
        
           onBoot = mkOption {

     

       195
       +
             type = types.enum [ "start" "ignore" ];

     

       196
        
             default = "start";

     

       197
        
             description = ''

     

       198
        
               Specifies the action to be done to / on the guests when the host boots.

     
···

       204
        
           };

     

       205
        
       

     

       206
        
           onShutdown = mkOption {

     

       207
       +
             type = types.enum [ "shutdown" "suspend" ];

     

       208
        
             default = "suspend";

     

       209
        
             description = ''

     

       210
        
               When shutting down / restarting the host what method should

     
···

       222
        
             '';

     

       223
        
           };

     

       224
        
       

     

       225
       +
           qemu = mkOption {

     

       226
       +
             type = qemuModule;

     

       227
       +
             default = { };

     

       228
       +
             description = ''

     

       229
       +
               QEMU related options.

     

       230
       +
             '';

     

       231
       +
           };

     

       232
        
         };

     

       233
        
       

     

       234
        
       

     
···

       242
        
               message = "The libvirtd module currently requires Polkit to be enabled ('security.polkit.enable = true').";

     

       243
        
             }

     

       244
        
             {

     

       245
       +
               assertion = builtins.elem "fd" cfg.qemu.ovmf.package.outputs;

     

       246
        
               message = "The option 'virtualisation.libvirtd.qemuOvmfPackage' needs a package that has an 'fd' output.";

     

       247
        
             }

     

       248
        
           ];

     

       249
        
       

     

       250
        
           environment = {

     

       251
        
             # this file is expected in /etc/qemu and not sysconfdir (/var/lib)

     

       252
       +
             etc."qemu/bridge.conf".text = lib.concatMapStringsSep "\n"

     

       253
       +
               (e:

     

       254
       +
                 "allow ${e}")

     

       255
       +
               cfg.allowedBridges;

     

       256
       +
             systemPackages = with pkgs; [ libressl.nc iptables cfg.package cfg.qemu.package ];

     

       257
        
             etc.ethertypes.source = "${pkgs.ebtables}/etc/ethertypes";

     

       258
        
           };

     

       259
        
       

     
···

       295
        
               cp -f ${qemuConfigFile} /var/lib/${dirName}/qemu.conf

     

       296
        
       

     

       297
        
               # stable (not GC'able as in /nix/store) paths for using in <emulator> section of xml configs

     

       298
       +
               for emulator in ${cfg.package}/libexec/libvirt_lxc ${cfg.qemu.package}/bin/qemu-kvm ${cfg.qemu.package}/bin/qemu-system-*; do

     

       299
        
                 ln -s --force "$emulator" /run/${dirName}/nix-emulators/

     

       300
        
               done

     

       301
        
       

     

       302
        
               for helper in libexec/qemu-bridge-helper bin/qemu-pr-helper; do

     

       303
       +
                 ln -s --force ${cfg.qemu.package}/$helper /run/${dirName}/nix-helpers/

     

       304
        
               done

     

       305
        
       

     

       306
       +
               ${optionalString cfg.qemu.ovmf.enable ''

     

       307
       +
                 ln -s --force ${cfg.qemu.ovmf.package.fd}/FV/${ovmfFilePrefix}_CODE.fd /run/${dirName}/nix-ovmf/

     

       308
       +
                 ln -s --force ${cfg.qemu.ovmf.package.fd}/FV/${ovmfFilePrefix}_VARS.fd /run/${dirName}/nix-ovmf/

     

       309
        
               ''}

     

       310
        
             '';

     

       311
        
       

     
···

       321
        
           systemd.services.libvirtd = {

     

       322
        
             requires = [ "libvirtd-config.service" ];

     

       323
        
             after = [ "libvirtd-config.service" ]

     

       324
       +
               ++ optional vswitch.enable "ovs-vswitchd.service";

     

       325
        
       

     

       326
        
             environment.LIBVIRTD_ARGS = escapeShellArgs (

     

       327
       +
               [

     

       328
       +
                 "--config"

     

       329
       +
                 configFile

     

       330
       +
                 "--timeout"

     

       331
       +
                 "120" # from ${libvirt}/var/lib/sysconfig/libvirtd

     

       332
       +
               ] ++ cfg.extraOptions

     

       333
       +
             );

     

       334
        
       

     

       335
       +
             path = [ cfg.qemu.package ] # libvirtd requires qemu-img to manage disk images

     

       336
       +
               ++ optional vswitch.enable vswitch.package

     

       337
       +
               ++ optional cfg.qemu.swtpm.enable cfg.qemu.swtpm.package;

     

       338
        
       

     

       339
        
             serviceConfig = {

     

       340
        
               Type = "notify";