ustetind/gitea-runners: fix podman dns
All checks were successful
Eval nix flake / evals (push) Successful in 4m25s

This commit is contained in:
Oystein Kristoffer Tveit 2024-12-09 23:25:44 +01:00
parent 04a838fc62
commit 40dd069a52
2 changed files with 31 additions and 12 deletions

View File

@ -16,11 +16,9 @@
networking.hostName = "ustetind"; networking.hostName = "ustetind";
networking.useHostResolvConf = lib.mkForce false; networking.useHostResolvConf = lib.mkForce false;
# systemd.network.enable = lib.mkForce false;
# networking.useDHCP = lib.mkForce true;
# networking.address = with values.hosts.georg; [ (ipv4 + "/25") (ipv6 + "/64") ];
systemd.network.networks."30-lxc-veth" = values.defaultNetworkConfig // { systemd.network.networks = {
"30-lxc-eth" = values.defaultNetworkConfig // {
matchConfig = { matchConfig = {
Type = "ether"; Type = "ether";
Kind = "veth"; Kind = "veth";
@ -30,6 +28,17 @@
}; };
address = with values.hosts.ustetind; [ (ipv4 + "/25") (ipv6 + "/64") ]; address = with values.hosts.ustetind; [ (ipv4 + "/25") (ipv6 + "/64") ];
}; };
"40-podman-veth" = values.defaultNetworkConfig // {
matchConfig = {
Type = "ether";
Kind = "veth";
Name = [
"veth*"
];
};
DHCP = "yes";
};
};
system.stateVersion = "24.11"; system.stateVersion = "24.11";
} }

View File

@ -27,5 +27,15 @@ lib.mkMerge [
(mkRunner "alpha") (mkRunner "alpha")
(mkRunner "beta") (mkRunner "beta")
(mkRunner "epsilon") (mkRunner "epsilon")
{ virtualisation.podman.enable = true; } {
virtualisation.podman = {
enable = true;
defaultNetwork.settings.dns_enabled = true;
autoPrune.enable = true;
};
networking.dhcpcd.IPv6rs = false;
networking.firewall.interfaces."podman+".allowedUDPPorts = [53 5353];
}
] ]