feat: add containers system user for rootless podman

This commit is contained in:
2026-07-18 03:59:47 +01:00
parent 8ef97da319
commit 04a6669da8

View File

@@ -18,6 +18,18 @@
home = "/home/deploy"; home = "/home/deploy";
}; };
users.users.containers = {
isSystemUser = true;
group = "containers";
extraGroups = [ "podman" ];
home = "/var/lib/containers";
createHome = true;
subUidRanges = [{ startUid = 100000; count = 65536; }];
subGidRanges = [{ startGid = 100000; count = 65536; }];
linger = true;
};
users.groups.containers = {};
security.sudo.extraRules = [ security.sudo.extraRules = [
{ {
users = [ "phoenix" "deploy" ]; users = [ "phoenix" "deploy" ];