summary refs log tree commit diff
path: root/nixos/modules/virtualisation/containers.nix
Commit message (Collapse)AuthorAge
* nixos/treewide: remove boolean examples for optionsFranz Pletz2017-03-17
| | | | | | | They contain no useful information and increase the length of the autogenerated options documentation. See discussion in #18816.
* nixos-container: break lines in description of forwardPorts.Ian-Woo Kim2017-02-15
|
* nixos-container: hostPort -> forwardPort and forwardPort is now a list of ↵Ian-Woo Kim2017-02-15
| | | | (protocol,hostPort,containerPort).
* nixos-container: support multiple port forwarding. change type of hostPort ↵Ian-Woo Kim2017-02-15
| | | | from 'string' to 'listOf str'
* nixos-container: introduce hostPort in declarative container options.Ian-Woo Kim2017-02-15
|
* nixos-container: add --port option for nixos-container (forward network ↵Ian-Woo Kim2017-02-15
| | | | ports to systemd-nspawn container)
* containers: fix broken /etc/hosts entries when localAddress contains a netmaskmontag4512016-12-12
|
* Add macvlan support for declarative containersmontag4512016-12-12
|
* containers: disable dhcpcd on veth bridge interfacesFranz Pletz2016-12-04
|
* containers module: Add tmpfs options (#20557)Christian Kampka2016-11-22
| | | | | | Allows one or more directories to be mounted as a read-only file system. This makes it convenient to run volatile containers that do not retain application state.
* container: fix extraVeth submodule usageArnold Krille2016-10-09
| | | | the submodule needs options, not a plain set.
* container module: allowedDevices type to submoduleEric Sagnes2016-10-02
| | | | The optionSet type is deprecated in favor of submodule
* Merge pull request #18511 from ericsagnes/feat/remove-optionSetJoachim F2016-10-01
|\ | | | | modules: optionSet -> submodule
| * containers module: optionSet -> submoduleEric Sagnes2016-09-13
| |
* | Merge pull request #18822 from wlhlm/containers-dev-tunJörg Thalheim2016-10-01
|\ \ | | | | | | Allow access to /dev/net/tun inside containers
| * | containers module: Add option to enable tunnel accessWilhelm Schuster2016-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds the containers.<name>.enableTun option allowing containers to access /dev/net/tun. This is required by openvpn, tinc, etc. in order to work properly inside containers. The new option builds on top of two generic options containers.<name>.additionalCapabilities and containers.<name>.allowedDevices which also can be used for example when adding support for FUSE later down the road.
* | | containers: fix dynamic hash lookupJörg Thalheim2016-09-24
|/ / | | | | | | | | we want the content of attribute as a key: b9df84cd4f6b70bdfa395a91dbf3d712adc7e18d broke this
* / nixos-container: Syntax fixesEelco Dolstra2016-09-22
|/ | | | | | | | Get rid of the "or null" stuff. Also change 'cfg . "foo"' to 'cfg.foo'. Also fixed what appears to be an actual bug: in postStartScript, cfg.attribute (where attribute is a function argument) should be cfg.${attribute}.
* nixos/containers: Process config like toplevel options (#17365)Guillaume Maudoux2016-08-29
|
* declarative containers: additional vethsArnold Krille2016-07-28
| | | | | | | | With these changes, a container can have more then one veth-pair. This allows for example to have LAN and DMZ as bridges on the host and add dedicated containers for proxies, ipv4-firewall and ipv6-firewall. Or to have a bridge for normal WAN, one bridge for administration and one bridge for customer-internal communication. So that web-server containers can be reached from outside per http, from the management via ssh and can talk to their database via the customer network. The scripts to set up the containers are now rendered several times instead of just one template. The scripts now contain per-container code to configure the extra veth interfaces. The default template without support for extra-veths is still rendered for the imperative containers. Also a test is there to see if extra veths can be placed into host-bridges or can be reached via routing.
* nixos-containers: Set DevicePolicy=closedEelco Dolstra2016-07-28
| | | | | | This makes the container a bit more secure, by preventing root creating device nodes to access the host file system, for instance. (Reference: systemd-nspawn@.service in systemd.)
* nixos-containers: Use systemd 231's --notify-ready flagEelco Dolstra2016-07-28
|
* nixos-containers: init package (#16959)Eric Merritt2016-07-19
| | | | | This moves nixos-containers into its own package so that it can be relied upon by other packages/systems. This should make development using dynamic containers much easier.
* nixos/containers: Create an empty machine-id fileaszlig2016-05-29
| | | | | | | | | | | | | | Since systemd version 230, it is required to have a machine-id file prior to the startup of the container. If the file is empty, a transient machine ID is generated by systemd-nspawn. See systemd/systemd#3014 for more details on the matter. This unbreaks all of the containers-* NixOS tests. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Cc: @edolstra Closes: #15808
* Fix failure to start old containersEelco Dolstra2016-05-26
| | | | | | | The existence of $root/var/lib/private/host-notify as a socket prevented a bind mount: container foo[8083]: Failed to create mount point /var/lib/containers/foo/var/lib/private/host-notify: No such device or address
* containers: Make declarative containers real systemd servicesArnold Krille2016-04-02
| | | | | | | | Without the templating (which is still present for imperative containers), it will be possible to set individual dependencies. Like depending on the network only if the hostbridge or hardware interfaces are used. Ported from #3021
* containers: Add a hostbridge and ipv6 addressesArnold Krille2016-04-02
| | | | | | This allows the containers to have their interface in a bridge on the host. Also this adds IPv6 addresses to the containers both with bridged and unbridged network.
* Merge branch 'master' into extra-bindsIan-Woo Kim2015-09-28
|\
| * nixos: fix some typesJan Malakhovski2015-09-18
| |
| * nixos-container: Add bash completion for "nixos-container" commandMatthias Beyer2015-09-16
| |
| * nixos containers: fix system path when reloadingLuca Bruno2015-09-11
| |
| * containers: fix interfaces option bugsBoris Sukholitko2015-08-26
| | | | | | | | | | The default should be [], no need to check it for INTERFACES variable.
| * containers: add interfaces config option.Boris Sukholitko2015-08-22
| | | | | | | | | | It uses systemd-nspawn's --network-interface to move existing interfaces into the container.
* | minor changesIan-Woo Kim2015-09-28
| |
* | nixos-containers: bindMounts: change default to readOnly. use EXTRA_NSPAWN_FLAGSIan-Woo Kim2015-05-26
| |
* | nixos-container: rename extraBinds to bindMounts and use attribute set format.Ian-Woo Kim2015-05-26
| |
* | unify extraBindsRW/RO into extraBinds. Now arbitrary mount point is supported.Ian-Woo Kim2015-05-25
| |
* | extraBindsRO/extraBindsRWIan-Woo Kim2015-05-24
|/
* Don't use machinectl to shut down containersEelco Dolstra2015-02-28
| | | | | | | | If the host is shutting down, machinectl may fail because it's bus-activated and D-Bus will be shutting down. So just send a signal to the leader process directly. Fixes #6212.
* Fix rebooting containers where resolv.conf is a symlinkLane Seppala2015-02-27
|
* Fix "systemctl reload container@"Eelco Dolstra2015-02-27
| | | | Fixes #5179.
* nixos/containers: make containers in containers possibleJaka Hudoklin2015-01-28
|
* NixOS containers: Create /root with 700 permissionEelco Dolstra2015-01-15
| | | | | | Systemd-nspawn creates /root with 755 permission if it doesn't exist, which is bad. So we have to create it ourselves before calling systemd-nspawn.
* Add auto-start option to containers.mokasin2015-01-12
|
* containers: remove obsolete commentAristid Breitkreuz2014-11-23
|
* Merge recent master into stagingVladimír Čunát2014-09-13
| | | | Hydra nixpkgs: ?compare=1151601
* Merge remote-tracking branch 'origin/systemd-216' into stagingEelco Dolstra2014-09-08
|\
| * Merge remote-tracking branch 'origin/master' into systemd-216Eelco Dolstra2014-09-02
| |\
| * | NixOS containers: Use exit status 133 for rebootsEelco Dolstra2014-08-24
| | |
* | | Merge recent master into stagingVladimír Čunát2014-08-30
|\ \ \ | | |/ | |/| | | | | | | | | | | | | | | | | | | Hydra: ?compare=1149952 Conflicts: nixos/doc/manual/configuration.xml (changed split file) nixos/modules/config/users-groups.nix (choosing filterNull instead of inline definition) pkgs/development/libraries/readline/readline6.3.nix (auto-solved)
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-08-07 20:10:37 +0000