mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2025-05-13 15:51:09 +02:00
46 lines
981 B
Nix
46 lines
981 B
Nix
{ pkgs, ... }:
|
|
{
|
|
virtualisation = {
|
|
podman = {
|
|
enable = true;
|
|
defaultNetwork.settings.dns_enabled = true;
|
|
};
|
|
# docker = {
|
|
# enable = true;
|
|
# };
|
|
libvirtd = {
|
|
enable = true;
|
|
qemu = {
|
|
runAsRoot = false;
|
|
swtpm.enable = true;
|
|
# ovmf.packages = [
|
|
# (pkgs.OVMF.override ({ tpmSupport = true; secureBoot = true; })).fd
|
|
# ];
|
|
};
|
|
};
|
|
spiceUSBRedirection.enable = true;
|
|
};
|
|
# allow libvirts internal network stuff
|
|
networking.firewall.trustedInterfaces = [ "virbr0" ];
|
|
programs.virt-manager.enable = true;
|
|
environment.systemPackages = with pkgs; [
|
|
virt-viewer
|
|
podman-compose
|
|
];
|
|
systemd.nspawn = {
|
|
n1 = {
|
|
networkConfig = {
|
|
Private = true;
|
|
VirtualEthernet = true;
|
|
Bridge = "br0";
|
|
};
|
|
};
|
|
n2 = {
|
|
networkConfig = {
|
|
Private = true;
|
|
VirtualEthernet = true;
|
|
Bridge = "br0";
|
|
};
|
|
};
|
|
};
|
|
}
|