summary refs log tree commit diff
path: root/nixos/modules/virtualisation/lxd.nix
Commit message (Collapse)AuthorAge
* Merge pull request #97692 from ryneeverett/lockkernelmodules-lxdMaciej Krüger2021-06-05
|\
| * nixos/lxd: explicitly load xt_CHECKSUM moduleryneeverett2021-04-29
| | | | | | | | | | | | | | | | This module is needed to create bridge networks such as the default lxdbr0 created by `lxd init`. Without this module, running `lxc network create lxdbr0` errors with: > Error: Failed to create network 'lxdbr0': Failed to run: iptables -w -t mangle -I POSTROUTING -o lxdbr0 -p udp --dport 68 -j CHECKSUM --checksum-fill -m comment --comment generated for LXD network lxdbr0: iptables v1.8.5 (legacy): unknown option "--checksum-fill"
| * nixos/lxd: explicitly load kernel modulesryneeverett2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is analogous to #70447 and #76487. These are all needed to attach a container to the default bridge network, without which the final line of the following script fails with the error for each respective kernel module listed below. ```sh lxc storage create foo dir lxc launch -s foo ubuntu:trusty bar lxc network attach lxdbr0 bar ``` veth ---- > Error: Failed to start device 'lxdbr0': Failed to create the veth interfaces vethefbc3cd6 and vetha4abbcbc: Failed to run: ip link add dev vethefbc3cd6 type veth peer name vetha4abbcbc: RTNETLINK answers: Operation not supported iptable_mangle -------------- > lvl=eror msg="Failed to bring up network" err="Failed to list ipv4 rules for LXD network lxdbr0 (table mangle)" name=lxdbr0 xt_comment ---------- > lvl=error msg="Failed to bring up network" err="Failed to run: iptables -w -t filter -I INPUT -i lxdbr0 -p udp --dport 67 -j ACCEPT -m comment --comment generated for LXD network lxdbr0: iptables v1.8.4 (legacy): Couldn't load match `comment':No such file or directory\n\nTry `iptables -h' or 'iptables --help' for more information." name=lxdbr0 xt_MASQUERADE ------------- > vl=eror msg="Failed to bring up network" err="Failed to run: iptables -w -t nat -I POSTROUTING -s 10.0.107.0/24 ! -d 10.0.107.0/24 -j MASQUERADE -m comment --comment generated for LXD network lxdbr0: iptables v1.8.4 (legacy): Couldn't load target `MASQUERADE':No such file or directory\n\nTry `iptables -h' or 'iptables --help' for more information." name=lxdbr0
* | Revert "Revert "apparmor: fix and improve the service""Julien Moutinho2021-04-23
|/ | | | This reverts commit 420f89ceb267b461eed5d025b6c3c0e57703cc5c.
* nixos/lxd: fixup of 4adcb006rnhmjoj2021-03-03
|
* nixos/lxd: make start timeout configurablernhmjoj2021-02-28
|
* nixos/lxd: cleanup and misc fixesrnhmjoj2021-02-28
| | | | | | | | | | - Actually use the zfsSupport option - Add documentation URI to lxd.service - Add lxd.socket to enable socket activatation - Add proper dependencies and remove systemd-udev-settle from lxd.service - Set up /var/lib/lxc/rootfs using systemd.tmpfiles - Configure safe start and shutdown of lxd.service - Configure restart on failures of lxd.service
* nixos/lxd: refactor to use zfs.package/enabled propertyJörg Thalheim2021-02-01
|
* nixos/lxd: disable cgroup v2 when LXD is activePatryk Wychowaniec2021-01-04
|
* Revert "apparmor: fix and improve the service"Vladimír Čunát2020-10-07
| | | | | | | | | | | | This reverts commit fb6d63f3fdd95a5468d43a0693c8ca7c1894363f. I really hope this finally fixes #99236: evaluation on Hydra. This time I really did check basically the same commit on Hydra: https://hydra.nixos.org/eval/1618011 Right now I don't have energy to find what exactly is wrong in the commit, and it doesn't seem important in comparison to nixos-unstable channel being stuck on a commit over one week old.
* apparmor: fix and improve the serviceJulien Moutinho2020-09-06
|
* lxd: When `lxcfs` is enabled, start `lxd` with explicit ↵Patryk Wychowaniec2020-06-05
| | | | `LXD_LXC_TEMPLATE_CONFIG`
* lxd: Add proper support for `nftables`Patryk Wychowaniec2020-06-05
|
* nixos/*: use $out instead of $bin with buildGoPackagezowoq2020-04-28
|
* lxd: also use default text for other package optionsJörg Thalheim2020-01-30
|
* nixos/lxd: add package options for LXC, LXD and ZFSHugo Geoffroy2019-12-23
| | | | | | Currently, LXD always use pkgs.zfs, even if boot.zfs.enableUnstable is set. This change provides the option to change the LXC, LXD and ZFS packages, and determines the default ZFS package based on zfs.enableUnstable.
* nixos/lxd: add recommendedSysctlSettingsmt_caret2019-12-14
| | | | | | * nixos/lxd: add productionSetup option * nixos/lxd: enable some settings by default * nixos/lxd: rename option
* nixos/modules: users.(extraUsers|extraGroup->users|group)Florian Klink2018-06-30
|
* lxd: 2.16 -> 3.0.0Jörg Thalheim2018-04-14
|
* nixos/lxd: partial fixMasayuki Takeda2018-02-10
|
* lxd: 2.0.2 -> 2.12 (#25685)Bastian Köcher2017-05-24
| | | | | | * Upgrades lxd to version 2.12 * Adds missing packages to path for lxd
* lxd: `pkg.lxd` does not point to the binariesZack Piper2016-06-19
| | | | `pkg.lxd.bin` does
* btrfsProgs -> canonical btrfs-progsTobias Geerinckx-Rice2016-01-03
|
* nixos/lxd: Add serviceWilliam A. Kennington III2015-09-13