From 04a6669da8829c73cb38924f22fa70bd42cf802c Mon Sep 17 00:00:00 2001
From: Hermes-Neo <hermes-neo@noreply.localhost>
Date: Sat, 18 Jul 2026 03:59:47 +0100
Subject: [PATCH] feat: add containers system user for rootless podman

---
 modules/common/users.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/modules/common/users.nix b/modules/common/users.nix
index 12b31cc..2461211 100644
--- a/modules/common/users.nix
+++ b/modules/common/users.nix
@@ -18,6 +18,18 @@
     home = "/home/deploy";
   };
 
+  users.users.containers = {
+    isSystemUser = true;
+    group = "containers";
+    extraGroups = [ "podman" ];
+    home = "/var/lib/containers";
+    createHome = true;
+    subUidRanges = [{ startUid = 100000; count = 65536; }];
+    subGidRanges = [{ startGid = 100000; count = 65536; }];
+    linger = true;
+  };
+  users.groups.containers = {};
+
   security.sudo.extraRules = [
     {
       users = [ "phoenix" "deploy" ];