feat: add containers system user for rootless podman
This commit is contained in:
@@ -18,6 +18,18 @@
|
|||||||
home = "/home/deploy";
|
home = "/home/deploy";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
users.users.containers = {
|
||||||
|
isSystemUser = true;
|
||||||
|
group = "containers";
|
||||||
|
extraGroups = [ "podman" ];
|
||||||
|
home = "/var/lib/containers";
|
||||||
|
createHome = true;
|
||||||
|
subUidRanges = [{ startUid = 100000; count = 65536; }];
|
||||||
|
subGidRanges = [{ startGid = 100000; count = 65536; }];
|
||||||
|
linger = true;
|
||||||
|
};
|
||||||
|
users.groups.containers = {};
|
||||||
|
|
||||||
security.sudo.extraRules = [
|
security.sudo.extraRules = [
|
||||||
{
|
{
|
||||||
users = [ "phoenix" "deploy" ];
|
users = [ "phoenix" "deploy" ];
|
||||||
|
|||||||
Reference in New Issue
Block a user