rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2024-11-15 05:13:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

thinkpad: reenable all modules

Browse source
This commit is contained in:
Rouven Seifert 2024-03-23 00:31:32 +01:00
parent a16bc598a4
commit a8d2ace6ab
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
3 changed files with 19 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
hosts/thinkpad/default.nix
View file

@ -25,12 +25,12 @@
boot = { boot = {
kernelModules = [ "v4l2loopback" ]; kernelModules = [ "v4l2loopback" ];
kernelPackages = pkgs.linuxPackages_latest; kernelPackages = pkgs.linuxPackages_latest;
extraModulePackages = [ # extraModulePackages = [
config.boot.kernelPackages.v4l2loopback # config.boot.kernelPackages.v4l2loopback
]; # ];
extraModprobeConfig = '' # extraModprobeConfig = ''
options v4l2loopback exclusive_caps=1 card_label="Virtual Camera" # options v4l2loopback exclusive_caps=1 card_label="Virtual Camera"
''; # '';
tmp.useTmpfs = true; tmp.useTmpfs = true;
}; };

16
hosts/thinkpad/modules/security/default.nix
View file

@ -35,13 +35,13 @@
# This setting is usually set to true in configuration.nix # This setting is usually set to true in configuration.nix
# generated at installation time. So we force it to false # generated at installation time. So we force it to false
# for now. # for now.
loader.systemd-boot.enable = lib.mkForce true; loader.systemd-boot.enable = lib.mkForce false;
# lanzaboote = { lanzaboote = {
# enable = true; enable = true;
# pkiBundle = "/etc/secureboot"; pkiBundle = "/etc/secureboot";
# configurationLimit = 10; configurationLimit = 10;
# }; };
# loader.systemd-boot.editor = false; loader.systemd-boot.editor = false;
# loader.efi.canTouchEfiVariables = true; loader.efi.canTouchEfiVariables = true;
}; };
} }

7
hosts/thinkpad/modules/virtualisation/default.nix
View file

@ -1,7 +1,10 @@
{ pkgs, ... }: { pkgs, ... }:
{ {
virtualisation = { virtualisation = {
docker.enable = true; docker = {
enable = true;
extraOptions = "--iptables=false";
};
libvirtd = { libvirtd = {
enable = true; enable = true;
qemu = { qemu = {
@ -15,7 +18,7 @@
spiceUSBRedirection.enable = true; spiceUSBRedirection.enable = true;
}; };
# allow libvirts internal network stuff # allow libvirts internal network stuff
networking.firewall.trustedInterfaces = [ "virbr0" "br0" ]; networking.firewall.trustedInterfaces = [ "virbr0" "br0" "docker0" ];
programs.virt-manager.enable = true; programs.virt-manager.enable = true;
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
virt-viewer virt-viewer