From 6607188f81ee74b276e9b73d904425336d1c7294 Mon Sep 17 00:00:00 2001 From: Aleksandr Lebedev Date: Mon, 2 Mar 2026 17:16:13 +0100 Subject: [PATCH] Allods --- .../x86_64-linux/stargate/services/allods.nix | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 systems/x86_64-linux/stargate/services/allods.nix diff --git a/systems/x86_64-linux/stargate/services/allods.nix b/systems/x86_64-linux/stargate/services/allods.nix new file mode 100644 index 0000000..fafa239 --- /dev/null +++ b/systems/x86_64-linux/stargate/services/allods.nix @@ -0,0 +1,24 @@ +{ + pkgs, + lib, + config, + ... +}: { + systemd.targets.machines.enable = true; + systemd.nspawn."allods" = { + enable = true; + execConfig = { + Boot = true; + CapabilityBoundingSet = ""; + PrivateUsers = true; + }; + + filesConfig = { BindReadOnly = [ "/etc/resolv.conf:/etc/resolv.conf" ]; }; + networkConfig = { Private = false; }; + }; + systemd.services."systemd-nspawn@allods" = { + enable = true; + requiredBy = [ "machines.target" ]; + overrideStrategy = "asDropin"; + }; +}