diff --git a/nixos/modules/virtualisation/oci-containers.nix b/nixos/modules/virtualisation/oci-containers.nix index be9ff405a4cc..664743157328 100644 --- a/nixos/modules/virtualisation/oci-containers.nix +++ b/nixos/modules/virtualisation/oci-containers.nix @@ -542,7 +542,7 @@ let Environment = "PODMAN_SYSTEMD_UNIT=%n"; Type = "notify"; NotifyAccess = "all"; - Delegate = mkIf (container.podman.sdnotify == "healthy") true; + Delegate = true; User = effectiveUser; RuntimeDirectory = escapedName; }; @@ -630,13 +630,9 @@ in inherit (config.users.users.${podman.user}) linger; in warnings - ++ lib.optional (podman.user != "root" && linger && podman.sdnotify == "conmon") '' - Podman container ${name} is configured as rootless (user ${podman.user}) - with `--sdnotify=conmon`, but lingering for this user is turned on. - '' - ++ lib.optional (podman.user != "root" && !linger && podman.sdnotify == "healthy") '' - Podman container ${name} is configured as rootless (user ${podman.user}) - with `--sdnotify=healthy`, but lingering for this user is turned off. + ++ lib.optional (podman.user != "root" && !linger) '' + Podman container ${name} is configured as rootless (user ${podman.user}), + but lingering for this user is turned off. '' ) [ ] cfg.containers ); diff --git a/nixos/tests/oci-containers.nix b/nixos/tests/oci-containers.nix index 34f0f9f3955b..c31aa20f7c81 100644 --- a/nixos/tests/oci-containers.nix +++ b/nixos/tests/oci-containers.nix @@ -88,7 +88,7 @@ let isSystemUser = true; group = "redis"; home = "/var/lib/redis"; - linger = type == "healthy"; + linger = true; createHome = true; uid = 2342; subUidRanges = [ diff --git a/pkgs/by-name/po/podman/package.nix b/pkgs/by-name/po/podman/package.nix index aa1092a7115f..6057168de143 100644 --- a/pkgs/by-name/po/podman/package.nix +++ b/pkgs/by-name/po/podman/package.nix @@ -157,6 +157,8 @@ buildGoModule (finalAttrs: { podman-tls-ghostunnel ; oci-containers-podman = nixosTests.oci-containers.podman; + oci-containers-podman-rootless-conmon = nixosTests.oci-containers.podman-rootless-conmon; + oci-containers-podman-rootless-healthy = nixosTests.oci-containers.podman-rootless-healthy; }; # do not add qemu to this wrapper, store paths get written to the podman vm config and break when GCed binPath = lib.makeBinPath (