podman: move iptables to virtualisation.podman.extraPackages
This commit is contained in:
@@ -232,6 +232,7 @@ in
|
|||||||
# containers cannot reach aardvark-dns otherwise
|
# containers cannot reach aardvark-dns otherwise
|
||||||
networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];
|
networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];
|
||||||
|
|
||||||
|
virtualisation.podman.extraPackages = [ pkgs.iptables ];
|
||||||
virtualisation.containers = {
|
virtualisation.containers = {
|
||||||
enable = true; # Enable common /etc/containers configuration
|
enable = true; # Enable common /etc/containers configuration
|
||||||
containersConf.settings = {
|
containersConf.settings = {
|
||||||
|
|||||||
@@ -25,7 +25,6 @@
|
|||||||
extraRuntimes ? lib.optionals stdenv.hostPlatform.isLinux [ runc ], # e.g.: runc, gvisor, youki
|
extraRuntimes ? lib.optionals stdenv.hostPlatform.isLinux [ runc ], # e.g.: runc, gvisor, youki
|
||||||
fuse-overlayfs,
|
fuse-overlayfs,
|
||||||
util-linuxMinimal,
|
util-linuxMinimal,
|
||||||
iptables,
|
|
||||||
iproute2,
|
iproute2,
|
||||||
catatonit,
|
catatonit,
|
||||||
gvproxy,
|
gvproxy,
|
||||||
@@ -43,7 +42,6 @@ let
|
|||||||
lib.optionals stdenv.hostPlatform.isLinux [
|
lib.optionals stdenv.hostPlatform.isLinux [
|
||||||
fuse-overlayfs
|
fuse-overlayfs
|
||||||
util-linuxMinimal
|
util-linuxMinimal
|
||||||
iptables
|
|
||||||
iproute2
|
iproute2
|
||||||
]
|
]
|
||||||
++ lib.optionals stdenv.hostPlatform.isDarwin [
|
++ lib.optionals stdenv.hostPlatform.isDarwin [
|
||||||
|
|||||||
Reference in New Issue
Block a user