imnyang/nix-flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Initial commit
Some checks failed
CI / check (push) Has been cancelled
Details
CI / ida (push) Has been cancelled
Details
CI / cpt (push) Has been cancelled
Details
CI / build-nixos (ena) (push) Has been cancelled
Details
CI / build-nixos (hako) (push) Has been cancelled
Details
CI / build-nixos (kazusa) (push) Has been cancelled
Details
CI / build-nixos (mizuki) (push) Has been cancelled
Details

Browse source
This commit is contained in:
암냥 2026-07-03 16:53:49 +09:00
commit 70284509f3
No known key found for this signature in database
144 changed files with 7061 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

23
modules/nixos/features/virtualisation.nix Normal file
View file

@ -0,0 +1,23 @@
{ pkgs, ... }:
{
virtualisation.docker = {
enable = true;
};
virtualisation.libvirtd = {
enable = true;
qemu = {
package = pkgs.qemu_kvm;
runAsRoot = true;
swtpm.enable = true;
};
};
# Override the virt-secret-init-encryption service to use correct shell path
systemd.services.virt-secret-init-encryption = {
serviceConfig.ExecStart = [
""
"${pkgs.bash}/bin/bash -c 'umask 0077 && (${pkgs.coreutils}/bin/dd if=/dev/urandom status=none bs=32 count=1 | ${pkgs.systemd}/bin/systemd-creds encrypt --name=secrets-encryption-key - /var/lib/libvirt/secrets/secrets-encryption-key)'"
];
};
}