fix(?): rootless docker

This commit is contained in:
2026-01-17 16:52:13 -05:00
parent cb725d9f1a
commit c19ff6e778
+12 -2
View File
@@ -88,7 +88,7 @@
isNormalUser = true; isNormalUser = true;
description = "Wyatt"; description = "Wyatt";
shell = pkgs.zsh; shell = pkgs.zsh;
extraGroups = [ "networkmanager" "wheel" "docker" ]; extraGroups = [ "networkmanager" "wheel" "docker" "dialout" ];
}; };
home-manager.users.l-wyatt = import /home/l-wyatt/.config/home-manager/home.nix; home-manager.users.l-wyatt = import /home/l-wyatt/.config/home-manager/home.nix;
@@ -101,6 +101,10 @@
firefox firefox
vmware-workstation vmware-workstation
cacert cacert
lunar-client
jetbrains.rust-rover
code-cursor
obsidian
]; ];
# Some programs need SUID wrappers, can be configured further or are # Some programs need SUID wrappers, can be configured further or are
@@ -128,7 +132,7 @@
# this value at the release version of the first install of this system. # this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option # Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "25.05"; # Did you read the comment? system.stateVersion = "25.11"; # Did you read the comment?
### Start of self configuration ### Start of self configuration
# Configure grub to provide ubuntu option # Configure grub to provide ubuntu option
@@ -153,6 +157,11 @@
nix.settings.experimental-features = [ "nix-command" "flakes" ]; nix.settings.experimental-features = [ "nix-command" "flakes" ];
# Enable docker # Enable docker
boot.kernel.sysctl = {
"kernel.unprivileged_userns_clone" = 1;
"user.max_user_namespaces" = 28633;
};
virtualisation.docker = { virtualisation.docker = {
enable = true; enable = true;
rootless = { rootless = {
@@ -229,4 +238,5 @@
ENV{ID_VENDOR}=="Yubico",\ ENV{ID_VENDOR}=="Yubico",\
RUN+="${pkgs.systemd}/bin/loginctl lock-sessions" RUN+="${pkgs.systemd}/bin/loginctl lock-sessions"
''; '';
fonts.packages = [ pkgs.nerd-fonts._0xproto ];
} }