fix(podman): add mandatory runtime dependencies (#444116)
This commit is contained in:
@@ -242,10 +242,6 @@ in
|
|||||||
# containers cannot reach aardvark-dns otherwise
|
# containers cannot reach aardvark-dns otherwise
|
||||||
networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];
|
networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];
|
||||||
|
|
||||||
virtualisation.podman.extraPackages = [
|
|
||||||
pkgs.iptables
|
|
||||||
]
|
|
||||||
++ lib.optional config.networking.nftables.enable pkgs.nftables;
|
|
||||||
virtualisation.containers = {
|
virtualisation.containers = {
|
||||||
enable = true; # Enable common /etc/containers configuration
|
enable = true; # Enable common /etc/containers configuration
|
||||||
containersConf.settings = {
|
containersConf.settings = {
|
||||||
|
|||||||
@@ -25,6 +25,8 @@
|
|||||||
extraRuntimes ? lib.optionals stdenv.hostPlatform.isLinux [ runc ], # e.g.: runc, gvisor, youki
|
extraRuntimes ? lib.optionals stdenv.hostPlatform.isLinux [ runc ], # e.g.: runc, gvisor, youki
|
||||||
fuse-overlayfs,
|
fuse-overlayfs,
|
||||||
util-linuxMinimal,
|
util-linuxMinimal,
|
||||||
|
nftables,
|
||||||
|
iptables,
|
||||||
iproute2,
|
iproute2,
|
||||||
catatonit,
|
catatonit,
|
||||||
gvproxy,
|
gvproxy,
|
||||||
@@ -44,7 +46,9 @@ let
|
|||||||
lib.optionals stdenv.hostPlatform.isLinux [
|
lib.optionals stdenv.hostPlatform.isLinux [
|
||||||
fuse-overlayfs
|
fuse-overlayfs
|
||||||
util-linuxMinimal
|
util-linuxMinimal
|
||||||
|
iptables
|
||||||
iproute2
|
iproute2
|
||||||
|
nftables
|
||||||
]
|
]
|
||||||
++ lib.optionals stdenv.hostPlatform.isDarwin [
|
++ lib.optionals stdenv.hostPlatform.isDarwin [
|
||||||
vfkit
|
vfkit
|
||||||
|
|||||||
Reference in New Issue
Block a user