Merge pull request #122099 from alekna/fix/docker
nixos/docker: ensure ipv4 forwarding is enabled
commit491216df02617663358e61d701db5064cc5d15e3
authorLuke Granger-Brown <git@lukegb.com>
dateSun 9 May 2021, 12:15 (6 years ago)
parent92c9d799317570
nixos/modules/virtualisation/docker.nix+4
@@ -150,6 +150,10 @@ in
150150
151151 config = mkIf cfg.enable (mkMerge [{
152152 boot.kernelModules = [ "bridge" "veth" ];
153+ boot.kernel.sysctl = {
154+ "net.ipv4.conf.all.forwarding" = mkOverride 99 true;
155+ "net.ipv4.conf.default.forwarding" = mkOverride 99 true;
156+ };
153157 environment.systemPackages = [ cfg.package ]
154158 ++ optional cfg.enableNvidia pkgs.nvidia-docker;
155159 users.groups.docker.gid = config.ids.gids.docker;
nixos/tests/docker.nix+3
@@ -45,5 +45,8 @@ import ./make-test-python.nix ({ pkgs, ...} : {
4545
4646 # Must match version 4 times to ensure client and server git commits and versions are correct
4747 docker.succeed('[ $(docker version | grep ${pkgs.docker.version} | wc -l) = "4" ]')
48+ docker.succeed("systemctl restart systemd-sysctl")
49+ docker.succeed("grep 1 /proc/sys/net/ipv4/conf/all/forwarding")
50+ docker.succeed("grep 1 /proc/sys/net/ipv4/conf/default/forwarding")
4851 '';
4952})