public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/lxd: add package options for LXC, LXD and ZFS (#73902)

Browse Source 
nixos/lxd: add package options for LXC, LXD and ZFS
This commit is contained in:
Jörg Thalheim 2020-01-30 14:51:12 +00:00 committed by GitHub
commit 8a14852fd3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 37 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
nixos/modules/virtualisation/lxd.nix
View File

@ -7,6 +7,7 @@ with lib;
let let
cfg = config.virtualisation.lxd; cfg = config.virtualisation.lxd;
zfsCfg = config.boot.zfs;
in in
@ -26,11 +27,40 @@ in
<command>lxc</command> command line tool, among others. <command>lxc</command> command line tool, among others.
''; '';
}; };
package = mkOption {
type = types.package;
default = pkgs.lxd;
defaultText = "pkgs.lxd";
description = ''
The LXD package to use.
'';
};
lxcPackage = mkOption {
type = types.package;
default = pkgs.lxc;
defaultText = "pkgs.lxc";
description = ''
The LXC package to use with LXD (required for AppArmor profiles).
'';
};
zfsPackage = mkOption {
type = types.package;
default = with pkgs; if zfsCfg.enableUnstable then zfsUnstable else zfs;
defaultText = "pkgs.zfs";
description = ''
The ZFS package to use with LXD.
'';
};
zfsSupport = mkOption { zfsSupport = mkOption {
type = types.bool; type = types.bool;
default = false; default = false;
description = '' description = ''
enables lxd to use zfs as a storage for containers. Enables lxd to use zfs as a storage for containers.
This option is enabled by default if a zfs pool is configured This option is enabled by default if a zfs pool is configured
with nixos. with nixos.
''; '';
@ -54,15 +84,15 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
environment.systemPackages = [ pkgs.lxd ]; environment.systemPackages = [ cfg.package ];
security.apparmor = { security.apparmor = {
enable = true; enable = true;
profiles = [ profiles = [
"${pkgs.lxc}/etc/apparmor.d/usr.bin.lxc-start" "${cfg.lxcPackage}/etc/apparmor.d/usr.bin.lxc-start"
"${pkgs.lxc}/etc/apparmor.d/lxc-containers" "${cfg.lxcPackage}/etc/apparmor.d/lxc-containers"
]; ];
packages = [ pkgs.lxc ]; packages = [ cfg.lxcPackage ];
}; };
systemd.services.lxd = { systemd.services.lxd = {
@ -71,14 +101,14 @@ in
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
after = [ "systemd-udev-settle.service" ]; after = [ "systemd-udev-settle.service" ];
path = lib.optional cfg.zfsSupport pkgs.zfs; path = lib.optional cfg.zfsSupport cfg.zfsPackage;
preStart = '' preStart = ''
mkdir -m 0755 -p /var/lib/lxc/rootfs mkdir -m 0755 -p /var/lib/lxc/rootfs
''; '';
serviceConfig = { serviceConfig = {
ExecStart = "@${pkgs.lxd.bin}/bin/lxd lxd --group lxd"; ExecStart = "@${cfg.package.bin}/bin/lxd lxd --group lxd";
Type = "simple"; Type = "simple";
KillMode = "process"; # when stopping, leave the containers alone KillMode = "process"; # when stopping, leave the containers alone
LimitMEMLOCK = "infinity"; LimitMEMLOCK = "infinity";