about summary refs log tree commit diff
path: root/nixos/modules/virtualisation
Commit message (Collapse)AuthorAge
* Merge branch 'master' into amazon-ec2-amisRok Garbas2024-03-13
|\
| * nixos/incus: fix systemd service pathAzat Bahawi2024-03-12
| | | | | | | | Fixes a regression introduced in #294754.
| * nixos/incus: add openvswitch supportcmspam2024-03-12
| | | | | | | | | | 1. Added openvswitch integration to incus service. 2. Added tests to test openvswitch functionality with incus.
| * Merge pull request #292552 from diogotcorreia/oci-containers-fix-stop-one-shotSandro2024-03-07
| |\ | | | | | | nixos/oci-containers: ignore nonexistent container when stopping
| | * nixos/oci-containers: ignore nonexistent container when stoppingDiogo Correia2024-03-01
| | | | | | | | | | | | Fixes #292551
| * | Merge pull request #288579 from blitz/vbox-kvm-2adisbladis2024-03-05
| |\ \ | | | | | | | | virtualboxKvm: init
| | * | nixos/virtualbox-host: expose option to run with KVMJulian Stecklina2024-02-28
| | |/
* | / nixos/amazon-ec2-amis: Add NixOS 23.11Arian van Putten2024-03-02
|/ / | | | | | | | | | | | | Note that this list will stop being updated from now on. Please use https://nixos.github.io/amis/ and https://nixos.github.io/amis/images.json instead. We are working on integrating this in the https://nixos.org/ website These get updated for every channel bump.
* | Merge pull request #292636 from ↵nikstur2024-03-02
|\ \ | | | | | | | | | | | | RaitoBezarius/smm-works-for-something-else-than-x86-actually OVMF: remove invalid `assert` on SMM
| * | nixos/qemu-vm: remove implicit dependency on SSMnikstur2024-03-01
| |/ | | | | | | | | | | | | | | The qemu module shouldn't implicitly (and for all architectures) enable SSM when enabling Secure Boot. Additionally, this breaks aarch64 Secure Boot tests because this module doesn't use the right machine type for anything but X86.
* | Merge pull request #290976 from adamcstephens/incus/nftMaciej Krüger2024-03-02
|\ \ | | | | | | nixos/incus: assert nftables is used when firewall is enabled
| * | nixos/incus: assert nftables is used when firewall is enabledAdam Stephens2024-02-23
| | | | | | | | | | | | | | | | | | | | | | | | incus manages its own firewall rules and prefers nftables. The advantages of nftables for segmenting multiple tools managing firewall rules is sufficient to require nftables with incus. https://linuxcontainers.org/incus/docs/main/howto/network_bridge_firewalld/#use-incus-firewall
* | | Merge pull request #290449 from Kiskae/patch-2Sandro2024-03-01
|\ \ \ | |_|/ |/| | nixos/podman: pass proxy variables to podman API
| * | nixos/podman: pass proxy variables to podman APIKiskae2024-02-21
| | |
* | | Merge pull request #284874 from shlevy/ovmf-msAdam C. Stephens2024-02-25
|\ \ \ | | | | | | | | Enable MS-compatible secure boot with OVMF
| * | | OVMF: Add test with secure boot enabledShea Levy2024-02-15
| | | | | | | | | | | | | | | | Co-authored-by: Arthur Gautier <arthur.gautier@arista.com>
* | | | Merge pull request #289166 from thanegill/remove-grub-versionSandro2024-02-25
|\ \ \ \ | | | | | | | | | | treewide: remove deprecated grub.version references
| * | | | treewide: remove deprecated grub.version referencesThane Gill2024-02-25
| | | | |
* | | | | Merge pull request #289856 from pennae/supfs-setRyan Lahfa2024-02-25
|\ \ \ \ \ | |/ / / / |/| | | | nixos/filesystems: make supportedFilesystems an attrset
| * | | | nixos/filesystems: make supportedFilesystems an attrsetpennae2024-02-19
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | this lets us *dis*able filesystem explicitly, as is required by e.g. the zfs-less installer images. currently that specifically is only easily possible by adding an overlay that stubs out `zfs`, with the obvious side-effect of also removing tooling that could run without the kernel module loaded.
* | | | Merge pull request #288215 from budimanjojo/patch-1Peder Bergebakken Sundt2024-02-25
|\ \ \ \ | |_|_|/ |/| | | nixos/oci-containers: don't login if image exists locally
| * | | nixos/oci-containers: check if image exists locally before failingbudimanjojo2024-02-19
| | | | | | | | | | | | | | | | Signed-off-by: budimanjojo <budimanjojo@gmail.com>
* | | | Merge pull request #284507 from ereslibre/containers-cdiSomeone2024-02-22
|\ \ \ \ | | | | | | | | | | NixOS: Add support for CDI
| * | | | services/hardware: add nvidia-container-toolkitRafael Fernández López2024-02-21
| | | | |
| * | | | virtualisation/containers: add support for providing static CDI definitionsRafael Fernández López2024-02-17
| | |/ / | |/| |
* | | | nixos/lxc-container: link to prepare-root when boot.initrd.systemd.enable is onMaciej Krüger2024-02-20
| |_|/ |/| | | | | | | | | | | | | | | | | | | | Previously we were doing some parts like activation in the init script, so linking to that works for non-systemd init With boot.initrd.systemd.enable we no longer run activation in the init script, but instead a new script named prepare-root, which is used instead.
* | | modules/incus: add ui flagMaciej Krüger2024-02-17
|/ /
* | Merge pull request #268979 from con-f-use/warn_docker_storage_driverSandro2024-02-12
|\ \ | |/ |/| nixos/docker: warn about changing storageDriver and remove `devicemapper` value
| * nixos/docker: warn about changing storageDrivercon-f-use2023-11-21
| | | | | | | | | | | | Add warning to the documentation of `virtualisation.docker.storageDriver` that changing will cause any existing containers and images to become inaccessible.
* | Merge pull request #287445 from fricklerhandwerk/qemu-env-varsWill Fancher2024-02-10
|\ \ | | | | | | doc: expand on parameters passed to QEMU VMs
| * | use code for env var notationValentin Gagarin2024-02-09
| | |
| * | doc: expand on parameters passed to QEMU VMsValentin Gagarin2024-02-09
| | |
* | | Merge pull request #248315 from apeschar/oci-containers-backend-stopPeder Bergebakken Sundt2024-02-10
|\ \ \ | | | | | | | | nixos/oci-containers: stop container using backend
| * | | nixos/oci-containers: stop container using backendAlbert Peschar2023-10-26
| | | | | | | | | | | | | | | | | | | | | | | | Make systemd actually call `podman stop` when stopping a container unit. Fixes #249332
* | | | nixos/amazon-image: Take over maintainershipArian van Putten2024-02-09
| | | | | | | | | | | | | | | | | | | | I am actively working on bringing back Amazon Images for 24.05. Please track progress in https://github.com/nixos/amis
* | | | Merge pull request #287438 from fricklerhandwerk/qemu-docs-linkValentin Gagarin2024-02-09
|\ \ \ \
| * | | | doc: add link to QEMU reference documentation in QEMU moduleValentin Gagarin2024-02-09
| | |/ / | |/| |
* / | | nixos/qemu-vm: convert tmpfiles rules to settingsWilliButz2024-02-07
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change replaces the previously hard-coded `/boot` path with a reference to `efiSysMountPoint` and more importantly this change makes it possible to override these rules in scenarios in which they are not desired. One such scenario would be when `systemd-gpt-auto-generator(8)` is used to automount the ESP. Consider this section from the mentioned manpage: > The ESP is mounted to /boot/ if that directory exists and is not used > for XBOOTLDR, and otherwise to /efi/. Same as for /boot/, an automount > unit is used. The mount point will be created if necessary. Prior to this change, the ESP would be automounted under `/efi` on first boot, then the previous tmpfiles rules caused `/boot` to be created. Following the quote above, this meant that the ESP is mounted under `/boot` for each subsequent boot.
* | | nixos/libvirt: changing process priority for oom killerIzorkin2024-02-04
| | |
* | | nixos/incus: add zfs/lib/udev to pathAdam Stephens2024-02-02
| | | | | | | | | | | | | | | | | | | | | | | | Incus needs to find zvol_id for some operations, but zfs does not put this executable in the bin directory. Exposing lib/udev into the Incus path solves discovery of the executable https://github.com/lxc/incus/blob/e5690705e842d3961d8a1d18c0ec002c25345af8/internal/server/storage/drivers/driver_zfs_volumes.go#L1820C1-L1820C41
* | | Merge pull request #281186 from Sohalt/podman-dns-firewallFranz Pletz2024-01-19
|\ \ \
| * | | nixos/podman: open firewall for aardvark-dnssohalt2024-01-15
| | | |
* | | | nixos: fix remaining services for network-online dep fixJade Lovelace2024-01-19
| | | |
* | | | nixos: fix a bunch of services missing dep on network-online.targetJade Lovelace2024-01-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was done by generating a truly hilarious configuration: rg 'services\.[^.]+\.enable\t' opts-tags | cut -f1 > allonconfig.nix The following were not tested due to other evaluation errors. They should probably be manually audited. services.amule services.castopod services.ceph services.chatgpt-retrieval-plugin services.clamsmtp services.clight services.dante services.dex services.discourse services.dwm-status services.engelsystem services.foundationdb services.frigate services.frp services.grocy services.guacamole-client services.hedgedoc services.home-assistant services.honk services.imaginary services.jitsi-meet services.kerberos_server services.limesurvey services.mastodon services.mediawiki services.mobilizon services.moodle services.mosquitto services.nextcloud services.nullmailer services.patroni services.pfix-srsd services.pgpkeyserver-lite services.postfixadmin services.roundcube services.schleuder services.self-deploy services.slskd services.spacecookie services.statsd services.step-ca services.sympa services.tsmBackup services.vdirsyncer services.vikunja services.yandex-disk services.zabbixWeb
* | | | Merge pull request #278753 from adamcstephens/incus/migrate-testAdam C. Stephens2024-01-18
|\ \ \ \ | | | | | | | | | | incus, lxd: ensure lxd->incus migration is supported and tested
| * | | | nixos/tests/incus: add lxd-to-incus migration testAdam Stephens2024-01-14
| | | | |
* | | | | nixos/libvirtd: support out-of-tree vhost-user driversAlois Wohlschlager2024-01-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add an option allowing packages containing out-of-tree vhost-user drivers for QEMU to be specified. The relevant configurations are then linked at runtime where libvirt expects them. An example use case for this is virtiofs.
* | | | | Merge pull request #274813 from pbsds/lxd-package-option-fixPeder Bergebakken Sundt2024-01-09
|\ \ \ \ \ | |/ / / / |/| | | | nixos/lxd: convert cfg.package and company to mkPackageOption
| * | | | nixos/lxd: convert cfg.package to mkPackageOptionPeder Bergebakken Sundt2023-12-16
| | | | | | | | | | | | | | | | | | | | Also fixes the documentation of `virtualisation.lxd.ui.package`, which currently says the package is `pkgs.ui`
* | | | | nixos/lxd-agent: fix evaluation regression caused by nixos/nixpkgs#271326Philip Taron2023-12-30
| | | | |