nixos-config/hosts/thinkpad/modules/virtualisation/default.nix

32 lines
700 B
Nix

{ pkgs, ... }:
{
virtualisation = {
docker = {
rootless = {
enable = true;
setSocketVariable = true;
daemon.settings = {
iptables = false;
};
};
};
libvirtd = {
enable = true;
qemu = {
runAsRoot = false;
swtpm.enable = true;
ovmf.packages = [
(pkgs.OVMF.override ({ tpmSupport = true; secureBoot = true; })).fd
];
};
};
spiceUSBRedirection.enable = true;
};
# allow libvirts internal network stuff
networking.firewall.trustedInterfaces = [ "virbr0" ];
programs.virt-manager.enable = true;
environment.systemPackages = with pkgs; [
virt-viewer
];
}