mirror of
https://github.com/nix-community/home-manager
synced 2024-11-24 12:09:46 +01:00
1743615b61
Adds a new Podman module for creating user containers and networks as systemd services. These are installed to the user's `$XDG_CONFIG/systemd/user` directory.
60 lines
1.6 KiB
Nix
60 lines
1.6 KiB
Nix
{ ... }:
|
|
|
|
{
|
|
services.podman = {
|
|
enable = true;
|
|
containers = {
|
|
"my-container" = {
|
|
description = "home-manager test";
|
|
autoStart = true;
|
|
autoUpdate = "registry";
|
|
devices = [ "/dev/null:/dev/null" ];
|
|
entrypoint = "/sleep.sh";
|
|
environment = {
|
|
"VAL_A" = "A";
|
|
"VAL_B" = 2;
|
|
"VAL_C" = false;
|
|
};
|
|
extraPodmanArgs = [ "--security-opt=no-new-privileges" ];
|
|
extraConfig = {
|
|
Container = {
|
|
ReadOnlyTmpfs = true;
|
|
NetworkAlias = "test-alias-2";
|
|
};
|
|
Service.Restart = "on-failure";
|
|
Unit.Before = "fake.target";
|
|
};
|
|
image = "docker.io/alpine:latest";
|
|
# Should not generate Requires/After for network because there is no
|
|
# services.podman.networks.mynet.
|
|
network = "mynet";
|
|
networkAlias = [ "test-alias-1" ];
|
|
ports = [ "8080:80" ];
|
|
volumes = [ "/tmp:/tmp" ];
|
|
};
|
|
|
|
"my-container-2" = {
|
|
image = "docker.io/alpine:latest";
|
|
extraConfig = {
|
|
Container.ContainerName = "some-other-container-name";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
test.asserts.assertions.expected = [
|
|
''
|
|
In 'my-container-2' config. Container.ContainerName: 'some-other-container-name' does not match expected type: value "my-container-2" (singular enum)''
|
|
];
|
|
|
|
nmt.script = ''
|
|
configPath=home-files/.config/systemd/user
|
|
containerFile=$configPath/podman-my-container.service
|
|
|
|
assertFileExists $containerFile
|
|
|
|
containerFile=$(normalizeStorePaths $containerFile)
|
|
|
|
assertFileContent $containerFile ${./container-expected.service}
|
|
'';
|
|
}
|