NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

test udev rule

Browse source
This commit is contained in:
nyxerinys 2026-06-30 10:14:11 -05:00
parent f859848fe0
commit 565e54ec90
2 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/k3s/default.nix
View file

@ -23,6 +23,10 @@ in
boot.kernelModules = [ "fuse" ]; boot.kernelModules = [ "fuse" ];
programs.fuse.userAllowOther = true; programs.fuse.userAllowOther = true;
services.udev.extraRules = ''
KERNEL=="fuse", MODE="0666", OWNER="root", GROUP="root"
'';
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
6443 # k3s, api server 6443 # k3s, api server
2379 # k3s, etcd clients 2379 # k3s, etcd clients
@ -69,7 +73,6 @@ in
images = import ./images args; images = import ./images args;
disable = []; disable = [];
}; };
# systemd.services.k3s.serviceConfig.DeviceAllow = mkForce [ "/dev/fuse rwm" ];
systemd.services.k3s = { systemd.services.k3s = {
restartTriggers = [ restartTriggers = [
(builtins.toJSON config.services.k3s.manifests) (builtins.toJSON config.services.k3s.manifests)

5
modules/k3s/deployments/storage-combo.nix
View file

@ -36,7 +36,10 @@
mountPath = "/dev/fuse"; mountPath = "/dev/fuse";
} }
]; ];
securityContext.capabilities.add = ["SYS_ADMIN"]; securityContext = {
capabilities.add = ["SYS_ADMIN"];
# privileged = true;
};
} }
]; ];
volumes = [ volumes = [