feat: add containers system user for rootless podman

2026-07-18 03:59:47 +01:00
parent 8ef97da319
commit 04a6669da8
1 changed files with 12 additions and 0 deletions
--- a/modules/common/users.nix
+++ b/modules/common/users.nix
@@ -18,6 +18,18 @@
    home = "/home/deploy";
  };

+  users.users.containers = {
+    isSystemUser = true;
+    group = "containers";
+    extraGroups = [ "podman" ];
+    home = "/var/lib/containers";
+    createHome = true;
+    subUidRanges = [{ startUid = 100000; count = 65536; }];
+    subGidRanges = [{ startGid = 100000; count = 65536; }];
+    linger = true;
+  };
+  users.groups.containers = {};
+
  security.sudo.extraRules = [
    {
      users = [ "phoenix" "deploy" ];