fix(?): rootless docker
This commit is contained in:
+13
-3
@@ -88,7 +88,7 @@
|
|||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
description = "Wyatt";
|
description = "Wyatt";
|
||||||
shell = pkgs.zsh;
|
shell = pkgs.zsh;
|
||||||
extraGroups = [ "networkmanager" "wheel" "docker" ];
|
extraGroups = [ "networkmanager" "wheel" "docker" "dialout" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
home-manager.users.l-wyatt = import /home/l-wyatt/.config/home-manager/home.nix;
|
home-manager.users.l-wyatt = import /home/l-wyatt/.config/home-manager/home.nix;
|
||||||
@@ -101,6 +101,10 @@
|
|||||||
firefox
|
firefox
|
||||||
vmware-workstation
|
vmware-workstation
|
||||||
cacert
|
cacert
|
||||||
|
lunar-client
|
||||||
|
jetbrains.rust-rover
|
||||||
|
code-cursor
|
||||||
|
obsidian
|
||||||
];
|
];
|
||||||
|
|
||||||
# Some programs need SUID wrappers, can be configured further or are
|
# Some programs need SUID wrappers, can be configured further or are
|
||||||
@@ -128,7 +132,7 @@
|
|||||||
# this value at the release version of the first install of this system.
|
# this value at the release version of the first install of this system.
|
||||||
# Before changing this value read the documentation for this option
|
# Before changing this value read the documentation for this option
|
||||||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||||
system.stateVersion = "25.05"; # Did you read the comment?
|
system.stateVersion = "25.11"; # Did you read the comment?
|
||||||
|
|
||||||
### Start of self configuration
|
### Start of self configuration
|
||||||
# Configure grub to provide ubuntu option
|
# Configure grub to provide ubuntu option
|
||||||
@@ -138,7 +142,7 @@
|
|||||||
boot.loader.grub.efiSupport = true;
|
boot.loader.grub.efiSupport = true;
|
||||||
# boot.loader.grub.efiInstallAsRemovable = true;
|
# boot.loader.grub.efiInstallAsRemovable = true;
|
||||||
boot.loader.efi.canTouchEfiVariables = true;
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
|
|
||||||
# Enable fingerprint sensor
|
# Enable fingerprint sensor
|
||||||
services.fprintd.enable = true;
|
services.fprintd.enable = true;
|
||||||
|
|
||||||
@@ -153,6 +157,11 @@
|
|||||||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||||
|
|
||||||
# Enable docker
|
# Enable docker
|
||||||
|
boot.kernel.sysctl = {
|
||||||
|
"kernel.unprivileged_userns_clone" = 1;
|
||||||
|
"user.max_user_namespaces" = 28633;
|
||||||
|
};
|
||||||
|
|
||||||
virtualisation.docker = {
|
virtualisation.docker = {
|
||||||
enable = true;
|
enable = true;
|
||||||
rootless = {
|
rootless = {
|
||||||
@@ -229,4 +238,5 @@
|
|||||||
ENV{ID_VENDOR}=="Yubico",\
|
ENV{ID_VENDOR}=="Yubico",\
|
||||||
RUN+="${pkgs.systemd}/bin/loginctl lock-sessions"
|
RUN+="${pkgs.systemd}/bin/loginctl lock-sessions"
|
||||||
'';
|
'';
|
||||||
|
fonts.packages = [ pkgs.nerd-fonts._0xproto ];
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user