Commit Graph

43 Commits

Author SHA1 Message Date
Wolfgang Walther
91a8fee3aa treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Moraxyc
1368a8174d nixos/incus,incus{,-lts}: add multi-platform incus-agent support 2025-09-26 23:40:32 +08:00
Adam C. Stephens
886fdecdc4 nixos/incus: avoid restart on switch for incus-startup
This service exists to avoid extra instance restarts. While its dependencies
are slim, there are still some, so disable restartIfChanged to avoid any
switches from affecting instances.
2025-09-20 16:05:17 -04:00
Wolfgang Walther
5a0711127c treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
MakiseKurisu
dd5faa98ae nixos/incus: update AppArmor profile for new versions 2025-06-09 00:32:43 +08:00
Adam C. Stephens
21197daa39 incus: build and expose documentation 2025-04-03 16:00:08 +00:00
Adam C. Stephens
62d611a22b nixos/incus: add AppArmor rules (#386060) 2025-04-01 12:51:34 -04:00
Adam C. Stephens
9ff6900615 incus: 6.10.1 -> 6.11.0
https://discuss.linuxcontainers.org/t/incus-6-11-has-been-released/23322
https://github.com/lxc/incus/releases/tag/v6.11.0
2025-03-28 16:58:33 -04:00
MakiseKurisu
9b7d65ad87 nixos/incus: add AppArmor rules to allow access to Nix store
Fix #350012
2025-03-26 21:01:14 +08:00
evplus
c3f61d1cbd nixos/incus ensure br_netfilter module is enabled 2025-03-19 22:56:07 +01:00
Adam C. Stephens
ad53a8451f incus-ui-canonical: rename from incus.ui 2025-02-16 17:33:03 -05:00
Adam C. Stephens
0619ac75c2 nixos/incus: condition nvidia support, ensuring nvidia_uvm module is enabled 2025-01-31 15:53:38 -05:00
Adam C. Stephens
80e73d690a nixos/incus: add lxc hook path to service env
Fixes nvidia.runtime container passing
2025-01-17 10:11:08 -05:00
Adam C. Stephens
274e0fd934 incus: support per-instance lxcfs
This was added in 6.4 and backported to LTS 6.0.2
2025-01-17 10:11:06 -05:00
Adam C. Stephens
9b660dff6d incus: fix instance shutdown when softDaemonRestart enabled 2025-01-17 10:11:04 -05:00
Adam C. Stephens
cbe221c56a nixos/incus: seabios is x86_64 only 2024-12-20 19:18:09 +00:00
Adam C. Stephens
6cd3dd3c64 incus: fix CSM support 2024-12-18 23:45:33 -05:00
Dawid Dziurla
ea9923c62f nixos/incus: add incus-user service and socket 2024-11-13 12:25:40 +01:00
Adam Stephens
ee30c817cb incus-lts: 6.0.1 -> 6.0.2
https://discuss.linuxcontainers.org/t/incus-6-0-2-lts-has-been-released/21633
2024-09-19 12:17:17 -04:00
Adam Stephens
28922c4421 incus: fix OVMF path backward compatibility
incus 6.3.0 changed the OVMF path, but our module needs to support LTS
as well. Also move the newer OCI deps to be conditional on version.
2024-07-20 09:54:07 -04:00
Bruno Bigras
856651fda8 nixos/incus: INCUS_OVMF_PATH -> INCUS_EDK2_PATH 2024-07-15 12:10:50 -04:00
Bruno Bigras
c2a12db1a4 nixos/incus: add skopeo and umoci 2024-07-12 16:34:17 -04:00
éclairevoyant
7d8742da87 treewide: fix mkEnableOption usage 2024-06-14 02:41:42 -04:00
Adam Stephens
7d5b333dcd nixos/incus: add support for soft daemon restart
This is a feature supported out of the box by upstream and allows the
incusd service to be restarted without impacting running
instances. While this does give up a bit of reproducibility, qemu and
lxc for example, there are clear benefits in allowing the host to
apply updates without impacting instances.

Modeled after the zabbly implementation: 2a67c3e260/systemd/incus-startup.service

This will now be the default.
2024-05-09 09:01:12 -04:00
Adam Stephens
4ca0d88d17 nixos/incus: add missing packages to path
I manually audited all `RunCommand` and `exec.LookPath` calls in the incus repo, combined with the following information

/run/wrappers/bin
lxc usable-cub 20240427123718.368 WARN     idmap_utils - ../src/lxc/idmap_utils.c:lxc_map_ids:165 - newuidmap binary is missing

iw
lxc 20240427123830.358 ERROR    network - ../src/lxc/network.c:lxc_netdev_move_wlan:1679 - Couldn't find the application iw in PATH

minio-client
https://github.com/lxc/incus/pull/777

ceph-client
Added, but could be missing bits to actually work
May need full ceph package for `radosgw-admin` for object storage?
2024-04-27 09:55:36 -04:00
Adam C. Stephens
2a899c07e4 Merge pull request #301564 from adamcstephens/lxc/6
lxc: 5.0.3 -> 6.0.0
2024-04-26 16:26:14 -04:00
Martin Weinelt
8541ec6d85 nixos/incus: add support for software TPMs
Was previously broken due to a missing runtime dependency.

> Error: Failed to start device "vtpm": Failed to validate environment: Required tool 'swtpm' is missing
2024-04-23 12:04:14 +02:00
Adam Stephens
f171f4ffd4 nixos/lxc: add package option and use for incus/lxd 2024-04-22 08:31:05 -04:00
Adam Stephens
dce92a3114 incus-lts: init at 6.0.0 and make default 2024-04-08 14:18:02 -04:00
Adam Stephens
cf4a88db79 nixos/incus: fix OVMF path for existing VMs 2024-03-29 15:33:26 -04:00
Adam Stephens
a5a4da89ba incus: 0.6 -> 0.7 2024-03-26 20:08:43 -04:00
Adam Stephens
deb5be50c4 incus: move wrapper to nixos module 2024-03-19 22:48:07 -04:00
Azat Bahawi
d3e30a442b nixos/incus: fix systemd service path
Fixes a regression introduced in #294754.
2024-03-12 20:03:36 +03:00
cmspam
701fcd7982 nixos/incus: add openvswitch support
1. Added openvswitch integration to incus service.
2. Added tests to test openvswitch functionality with incus.
2024-03-12 01:03:39 +00:00
Adam Stephens
6a0ad369f2 nixos/incus: assert nftables is used when firewall is enabled
incus manages its own firewall rules and prefers nftables. The
advantages of nftables for segmenting multiple tools managing firewall
rules is sufficient to require nftables with incus.

https://linuxcontainers.org/incus/docs/main/howto/network_bridge_firewalld/#use-incus-firewall
2024-02-23 15:49:33 -05:00
Maciej Krüger
a6e237a86a modules/incus: add ui flag 2024-02-17 16:49:32 +01:00
Adam Stephens
7585f26855 nixos/incus: add zfs/lib/udev to path
Incus needs to find zvol_id for some operations, but zfs does not put
this executable in the bin directory. Exposing lib/udev into the Incus
path solves discovery of the executable

e5690705e8/internal/server/storage/drivers/driver_zfs_volumes.go (L1820C1-L1820C41)
2024-02-02 12:36:41 -05:00
Adam Stephens
ffdcec2d94 nixos/tests/incus: add lxd-to-incus migration test 2024-01-14 09:26:49 -05:00
Adam Stephens
6765aac154 treewide/lxc: set lxc team as maintainer 2023-12-04 10:06:50 -05:00
h7x4
79d3d59f58 treewide: replace mkPackageOptionMD with mkPackageOption 2023-11-30 19:03:14 +01:00
Adam Stephens
3132ba6cda nixos/incus: shutdown instances on service stop 2023-11-02 19:54:11 -04:00
Adam Stephens
3087595a6b nixos/incus: preseed should not trigger socket-activation 2023-11-02 19:54:04 -04:00
Adam Stephens
1fff6a9031 nixos/incus: init module and tests 2023-11-02 19:54:02 -04:00