Commit Graph

61 Commits

Author SHA1 Message Date
quantenzitrone
93a668bc54 squashfs-tools: rename from squashfsTools, enable structuredAttrs
upstream package is called squashfs-tools and other distros also call the package this way https://repology.org/project/squashfs-tools
2026-08-17 14:32:21 +02:00
Grimmauld
4ef20773d3 nixos/incus: Don't give up on missing apparmor rules directory 2026-07-14 12:51:26 +02:00
Freya Andromeda
2e947118ea nixos/incus: fix incus containers being wrongly restarted on package update whilst softDaemonRestart is set
When softDaemonRestart is enabled, containers and virtual machines still get restarted when incus updates
Disabling stopIfChanged on both incus-startup and incus fixes this
2026-07-08 02:40:41 +00:00
Adam C. Stephens
a403b3f7ea nixos/incus: add storage.truenas.enable option (#527154) 2026-07-04 17:14:33 +00:00
Samuel Cobb
fe3a142521 nixos/incus: remove named profile 2026-06-25 07:35:39 +02:00
Adam C. Stephens
0a03e5aed7 nixos/incus: add storage.truenas.enable option
based on https://github.com/NixOS/nixpkgs/pull/522004#issuecomment-4585131794
2026-06-02 10:20:05 -04:00
Tom Herbers
65cda367f6 nixos: incus: drop module compatibility with v6 2026-05-06 17:56:35 +02:00
Tom Herbers
622550161e nixos/incus: drop option to gate bucket support
This reverts commit 4426551578.
2026-05-05 17:43:09 +02:00
Adam C. Stephens
4426551578 nixos/incus: gate bucket support since it requires insecure minio
If upstream replaces minio for v7, we can drop this, but minio is now insecure forcing us to act.
2026-04-29 14:19:31 -04:00
Tom Herbers
ab90e57470 nixos/incus: add useACMEHost option 2026-03-28 21:46:51 +01:00
Silvan Mosberger
b513ab8192 Reapply "ci: module maintainer review requests; nixos/modules: init meta.teams"
This reverts commit 2cc2e0225f.
2026-03-13 16:53:28 +01:00
Silvan Mosberger
2cc2e0225f Revert "ci: module maintainer review requests; nixos/modules: init meta.teams" 2026-03-06 08:41:24 +01:00
Silvan Mosberger
dbb164c759 nixos/modules: Use meta.teams over meta.maintainers = lib.teams.*.members
This allows getting the team itself requested for a review instead of
the individual members
2026-03-02 10:59:09 +01:00
Adam C. Stephens
5ccfff6f42 nixos/incus: support bzip2, lz4 and zstd compression formats (#466666) 2025-12-03 18:56:43 +00:00
Adam C. Stephens
88feed68a5 nixos/incus: support bzip2 and lz4 compression
These are supported upstream, so provide full support here:

a229a7cd59/shared/archive/detect.go (L39)
2025-12-03 13:38:00 -05:00
Davis Schirmer
6f4a4bcccb nixos/incus: replace environment.PATH with path
Allows users to amend the path without updating the module.
2025-12-03 13:33:41 -05:00
Adam C. Stephens
4884b1706f nixos/incus: handle networking.firewall.backend in firewall assertion
apparently one can enable the nftables backend without enabling nftables
2025-12-01 09:40:11 -05:00
Davis Schirmer
e5bc5bf4ab nixos/incus: add zstd to serverBinPath
zstd is a supported compression algo for images:
https://linuxcontainers.org/incus/docs/main/server_config/#server-options-images
2025-11-30 16:29:30 -05:00
Wolfgang Walther
91a8fee3aa treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Moraxyc
1368a8174d nixos/incus,incus{,-lts}: add multi-platform incus-agent support 2025-09-26 23:40:32 +08:00
Adam C. Stephens
886fdecdc4 nixos/incus: avoid restart on switch for incus-startup
This service exists to avoid extra instance restarts. While its dependencies
are slim, there are still some, so disable restartIfChanged to avoid any
switches from affecting instances.
2025-09-20 16:05:17 -04:00
Wolfgang Walther
5a0711127c treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
MakiseKurisu
dd5faa98ae nixos/incus: update AppArmor profile for new versions 2025-06-09 00:32:43 +08:00
Adam C. Stephens
21197daa39 incus: build and expose documentation 2025-04-03 16:00:08 +00:00
Adam C. Stephens
62d611a22b nixos/incus: add AppArmor rules (#386060) 2025-04-01 12:51:34 -04:00
Adam C. Stephens
9ff6900615 incus: 6.10.1 -> 6.11.0
https://discuss.linuxcontainers.org/t/incus-6-11-has-been-released/23322
https://github.com/lxc/incus/releases/tag/v6.11.0
2025-03-28 16:58:33 -04:00
MakiseKurisu
9b7d65ad87 nixos/incus: add AppArmor rules to allow access to Nix store
Fix #350012
2025-03-26 21:01:14 +08:00
evplus
c3f61d1cbd nixos/incus ensure br_netfilter module is enabled 2025-03-19 22:56:07 +01:00
Adam C. Stephens
ad53a8451f incus-ui-canonical: rename from incus.ui 2025-02-16 17:33:03 -05:00
Adam C. Stephens
0619ac75c2 nixos/incus: condition nvidia support, ensuring nvidia_uvm module is enabled 2025-01-31 15:53:38 -05:00
Adam C. Stephens
80e73d690a nixos/incus: add lxc hook path to service env
Fixes nvidia.runtime container passing
2025-01-17 10:11:08 -05:00
Adam C. Stephens
274e0fd934 incus: support per-instance lxcfs
This was added in 6.4 and backported to LTS 6.0.2
2025-01-17 10:11:06 -05:00
Adam C. Stephens
9b660dff6d incus: fix instance shutdown when softDaemonRestart enabled 2025-01-17 10:11:04 -05:00
Adam C. Stephens
cbe221c56a nixos/incus: seabios is x86_64 only 2024-12-20 19:18:09 +00:00
Adam C. Stephens
6cd3dd3c64 incus: fix CSM support 2024-12-18 23:45:33 -05:00
Dawid Dziurla
ea9923c62f nixos/incus: add incus-user service and socket 2024-11-13 12:25:40 +01:00
Adam Stephens
ee30c817cb incus-lts: 6.0.1 -> 6.0.2
https://discuss.linuxcontainers.org/t/incus-6-0-2-lts-has-been-released/21633
2024-09-19 12:17:17 -04:00
Adam Stephens
28922c4421 incus: fix OVMF path backward compatibility
incus 6.3.0 changed the OVMF path, but our module needs to support LTS
as well. Also move the newer OCI deps to be conditional on version.
2024-07-20 09:54:07 -04:00
Bruno Bigras
856651fda8 nixos/incus: INCUS_OVMF_PATH -> INCUS_EDK2_PATH 2024-07-15 12:10:50 -04:00
Bruno Bigras
c2a12db1a4 nixos/incus: add skopeo and umoci 2024-07-12 16:34:17 -04:00
éclairevoyant
7d8742da87 treewide: fix mkEnableOption usage 2024-06-14 02:41:42 -04:00
Adam Stephens
7d5b333dcd nixos/incus: add support for soft daemon restart
This is a feature supported out of the box by upstream and allows the
incusd service to be restarted without impacting running
instances. While this does give up a bit of reproducibility, qemu and
lxc for example, there are clear benefits in allowing the host to
apply updates without impacting instances.

Modeled after the zabbly implementation: 2a67c3e260/systemd/incus-startup.service

This will now be the default.
2024-05-09 09:01:12 -04:00
Adam Stephens
4ca0d88d17 nixos/incus: add missing packages to path
I manually audited all `RunCommand` and `exec.LookPath` calls in the incus repo, combined with the following information

/run/wrappers/bin
lxc usable-cub 20240427123718.368 WARN     idmap_utils - ../src/lxc/idmap_utils.c:lxc_map_ids:165 - newuidmap binary is missing

iw
lxc 20240427123830.358 ERROR    network - ../src/lxc/network.c:lxc_netdev_move_wlan:1679 - Couldn't find the application iw in PATH

minio-client
https://github.com/lxc/incus/pull/777

ceph-client
Added, but could be missing bits to actually work
May need full ceph package for `radosgw-admin` for object storage?
2024-04-27 09:55:36 -04:00
Adam C. Stephens
2a899c07e4 Merge pull request #301564 from adamcstephens/lxc/6
lxc: 5.0.3 -> 6.0.0
2024-04-26 16:26:14 -04:00
Martin Weinelt
8541ec6d85 nixos/incus: add support for software TPMs
Was previously broken due to a missing runtime dependency.

> Error: Failed to start device "vtpm": Failed to validate environment: Required tool 'swtpm' is missing
2024-04-23 12:04:14 +02:00
Adam Stephens
f171f4ffd4 nixos/lxc: add package option and use for incus/lxd 2024-04-22 08:31:05 -04:00
Adam Stephens
dce92a3114 incus-lts: init at 6.0.0 and make default 2024-04-08 14:18:02 -04:00
Adam Stephens
cf4a88db79 nixos/incus: fix OVMF path for existing VMs 2024-03-29 15:33:26 -04:00
Adam Stephens
a5a4da89ba incus: 0.6 -> 0.7 2024-03-26 20:08:43 -04:00
Adam Stephens
deb5be50c4 incus: move wrapper to nixos module 2024-03-19 22:48:07 -04:00