diff --git a/modules/k3s/default.nix b/modules/k3s/default.nix index 6ffa720..d418a8d 100644 --- a/modules/k3s/default.nix +++ b/modules/k3s/default.nix @@ -19,6 +19,9 @@ in }; config = mkIf cfg.enable { + + boot.kernelModules = [ "fuse" ]; + programs.fuse.userAllowOther = true; networking.firewall.allowedTCPPorts = [ 6443 # k3s, api server diff --git a/modules/k3s/deployments/storage-combo.nix b/modules/k3s/deployments/storage-combo.nix index fbe0f14..415e04d 100644 --- a/modules/k3s/deployments/storage-combo.nix +++ b/modules/k3s/deployments/storage-combo.nix @@ -18,6 +18,7 @@ securityContext = { runAsUser = 1000; runAsGroup = 1000; + capabilities.add = ["SYS_ADMIN"]; }; containers = [ { @@ -30,6 +31,18 @@ containerPort = 2222; } ]; + volumeMounts = [ + { + name = "fuse-device"; + mountPath = "/dev/fuse"; + } + ]; + } + ]; + volumes = [ + { + name = "fuse-device"; + hostpath.path = "/dev/fuse"; } ]; }; diff --git a/modules/k3s/images/rsshfs-client.nix b/modules/k3s/images/rsshfs-client.nix index 5e4c0a5..d8b1a22 100644 --- a/modules/k3s/images/rsshfs-client.nix +++ b/modules/k3s/images/rsshfs-client.nix @@ -69,7 +69,7 @@ let # MAIN SCRIPT echo "[ Creating ssh connection socket ]" - $SSHCMD -MfNx dev@$host + $SSHCMD -MfNx dev@$Host echo "[ Opening ssh reverse proxy ]" PORT=$($SSHCMD -O forward -R 0:localhost:2222 null)