Commit Graph

24 Commits

Author SHA1 Message Date
Matteo Sozzi
389de87aed
lxc: added option for unprivileged containers.
Added extra option to enable unprivileged containers. This includes a
patch to remove the hard-coded path to `lxc-user-nic` and a new security
wrapper to set SUID to `lxc-user-nic`.
2024-08-28 09:18:23 -04:00
Adam Stephens
4d2a0cfb34
nixos/tests/incus: fix container importing 2024-08-28 09:18:17 -04:00
Adam Stephens
094f2b6c9d
nixos/incus: add incus-only vm and container images 2024-08-10 13:23:36 -04:00
Adam Stephens
e58c57a868
nixos/tests/incus: enable testing both LTS and non-LTS 2024-05-09 10:03:07 -04:00
Adam Stephens
7d5b333dcd
nixos/incus: add support for soft daemon restart
This is a feature supported out of the box by upstream and allows the
incusd service to be restarted without impacting running
instances. While this does give up a bit of reproducibility, qemu and
lxc for example, there are clear benefits in allowing the host to
apply updates without impacting instances.

Modeled after the zabbly implementation: 2a67c3e260/systemd/incus-startup.service

This will now be the default.
2024-05-09 09:01:12 -04:00
Martin Weinelt
8541ec6d85
nixos/incus: add support for software TPMs
Was previously broken due to a missing runtime dependency.

> Error: Failed to start device "vtpm": Failed to validate environment: Required tool 'swtpm' is missing
2024-04-23 12:04:14 +02:00
Adam Stephens
76c69af624
nixos/lxd-virtual-machine: enable CPU hotplug for x86 VMs 2024-04-18 10:36:55 -04:00
Adam Stephens
deb5be50c4
incus: move wrapper to nixos module 2024-03-19 22:48:07 -04:00
Adam Stephens
9d411861b5
nixos/tests/incus: add storage test and exercise zfs integration 2024-03-15 20:39:54 -04:00
cmspam
701fcd7982 nixos/incus: add openvswitch support
1. Added openvswitch integration to incus service.
2. Added tests to test openvswitch functionality with incus.
2024-03-12 01:03:39 +00:00
Maciej Krüger
8a274e0c18
nixosTests.incus.*: enable nftables to fix tests 2024-03-09 17:23:03 +01:00
Adam Stephens
5f1b65f75f
nixos/tests/incus: ensure sysctl rules apply successfully to lxc containers 2024-02-28 11:59:39 -05:00
Maciej Krüger
c607e70f70
nixosTests.incus: add test with old and new init 2024-02-20 23:42:59 +01:00
Maciej Krüger
f1ed39535e
nixosTests.incus: add ui test 2024-02-17 17:05:35 +01:00
Adam Stephens
5f087b3221
incus: lxd-to-incus is now part of main package
Previously upstream was packaging this separately due to the inclusion
of lxd in the go dependencies. This has been dropped and the package
has been merged into the main go.mod file.
2024-02-02 13:04:13 -05:00
Adam Stephens
cdcb919ff7
nixos/tests/incus: check system is running for verifying up
It can can take a few seconds for the generator to initialize in slow
environments. Switch to using systemctl is-system-running which should
reflect the system is fully booted.
2024-02-02 10:13:16 -05:00
Adam Stephens
ffdcec2d94
nixos/tests/incus: add lxd-to-incus migration test 2024-01-14 09:26:49 -05:00
Adam Stephens
3f8b1d2d26
nixos/lxd-agent: add system path for exec 2023-12-28 14:27:05 -05:00
Adam Stephens
56e9ca19b3
lxcfs: 4.0.12 -> 5.0.4
Diff: https://github.com/lxc/lxcfs/compare/lxcfs-4.0.12...lxcfs-5.0.4

Changelog: https://linuxcontainers.org/lxcfs/news/
2023-12-21 23:10:27 -05:00
Adam Stephens
6765aac154
treewide/lxc: set lxc team as maintainer 2023-12-04 10:06:50 -05:00
Adam Stephens
2cd9619801
nixos/lxc-container: use lxc systemd generator 2023-11-28 15:14:43 -05:00
Adam Stephens
f12af77bd8
nixos/tests/incus: improve test resiliency under load 2023-11-02 22:09:37 -04:00
Adam Stephens
3087595a6b
nixos/incus: preseed should not trigger socket-activation 2023-11-02 19:54:04 -04:00
Adam Stephens
1fff6a9031
nixos/incus: init module and tests 2023-11-02 19:54:02 -04:00