summary refs log tree commit diff
path: root/nixos/modules/virtualisation
diff options
context:
space:
mode:
authorMaciej Krüger <mkg20001@gmail.com>2021-06-05 01:27:27 +0200
committerGitHub <noreply@github.com>2021-06-05 01:27:27 +0200
commit26b3751de79105836a68195bb5bcd70d608c1d3f (patch)
treeef5b4df5eebfd024fbf3a7ea5e03dab53fd55b07 /nixos/modules/virtualisation
parent3255d05cacd9e21d78326986bd7d3c4591580fdd (diff)
parent161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2 (diff)
downloadnixpkgs-26b3751de79105836a68195bb5bcd70d608c1d3f.tar
nixpkgs-26b3751de79105836a68195bb5bcd70d608c1d3f.tar.gz
nixpkgs-26b3751de79105836a68195bb5bcd70d608c1d3f.tar.bz2
nixpkgs-26b3751de79105836a68195bb5bcd70d608c1d3f.tar.lz
nixpkgs-26b3751de79105836a68195bb5bcd70d608c1d3f.tar.xz
nixpkgs-26b3751de79105836a68195bb5bcd70d608c1d3f.tar.zst
nixpkgs-26b3751de79105836a68195bb5bcd70d608c1d3f.zip
Merge pull request #97692 from ryneeverett/lockkernelmodules-lxd
Diffstat (limited to 'nixos/modules/virtualisation')
-rw-r--r--nixos/modules/virtualisation/lxd.nix3
1 files changed, 3 insertions, 0 deletions
diff --git a/nixos/modules/virtualisation/lxd.nix b/nixos/modules/virtualisation/lxd.nix
index 6b6f4b6e652..cde29f7bf59 100644
--- a/nixos/modules/virtualisation/lxd.nix
+++ b/nixos/modules/virtualisation/lxd.nix
@@ -175,5 +175,8 @@ in {
       "net.ipv6.neigh.default.gc_thresh3" = 8192;
       "kernel.keys.maxkeys" = 2000;
     };
+
+    boot.kernelModules = [ "veth" "xt_comment" "xt_CHECKSUM" "xt_MASQUERADE" ]
+      ++ optionals (!config.networking.nftables.enable) [ "iptable_mangle" ];
   };
 }