···

       
242
       
242
       
 
       
      # containers cannot reach aardvark-dns otherwise

     

       
243
       
243
       
 
       
      networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];

     

       
244
       
244
       
 
       


     

       
245
       
245
       
-
       
      virtualisation.podman.extraPackages = [

     

       
246
       
246
       
-
       
        pkgs.iptables

     

       
247
       
247
       
-
       
      ]

     

       
248
       
248
       
-
       
      ++ lib.optional config.networking.nftables.enable pkgs.nftables;

     

       
249
       
245
       
 
       
      virtualisation.containers = {

     

       
250
       
246
       
 
       
        enable = true; # Enable common /etc/containers configuration

     

       
251
       
247
       
 
       
        containersConf.settings = {

     

···

       
25
       
25
       
 
       
  extraRuntimes ? lib.optionals stdenv.hostPlatform.isLinux [ runc ], # e.g.: runc, gvisor, youki

     

       
26
       
26
       
 
       
  fuse-overlayfs,

     

       
27
       
27
       
 
       
  util-linuxMinimal,

     

       
28
       
28
       
+
       
  nftables,

     

       
29
       
29
       
+
       
  iptables,

     

       
28
       
30
       
 
       
  iproute2,

     

       
29
       
31
       
 
       
  catatonit,

     

       
30
       
32
       
 
       
  gvproxy,

     
···

       
44
       
46
       
 
       
    lib.optionals stdenv.hostPlatform.isLinux [

     

       
45
       
47
       
 
       
      fuse-overlayfs

     

       
46
       
48
       
 
       
      util-linuxMinimal

     

       
49
       
49
       
+
       
      iptables

     

       
47
       
50
       
 
       
      iproute2

     

       
51
       
51
       
+
       
      nftables

     

       
48
       
52
       
 
       
    ]

     

       
49
       
53
       
 
       
    ++ lib.optionals stdenv.hostPlatform.isDarwin [

     

       
50
       
54
       
 
       
      vfkit