NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

try cdi

Browse source
This commit is contained in:
nyxerinys 2026-07-02 18:54:57 -05:00
parent 7001c58d39
commit 7a4fe282de
4 changed files with 42 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

19
modules/k3s/default.nix
View file

@ -22,6 +22,25 @@ in
boot.kernelModules = [ "fuse" ];
programs.fuse.userAllowOther = true;
environment.etc."cdi/fuse.json".text = builtins.toJSON {
cdiVersion = "1.1.0";
kind = "cdi.nyxerinys.dev/fuse";
devices = [
{
name = "rw";
containerEdits = {
deviceNodes = [
{
path = "/dev/fuse";
type = "c";
fileMode = 438;
permissions = "rw";
}
];
};
}
];
};
networking.firewall.allowedTCPPorts = [
6443 # k3s, api server

37
modules/k3s/deployments/storage-combo.nix
View file

@ -26,29 +26,30 @@
containerPort = 2222;
}
];
volumeMounts = [
{
name = "fuse-device";
mountPath = "/dev/fuse";
}
];
# volumeMounts = [
# {
# name = "fuse-device";
# mountPath = "/dev/fuse";
# }
# ];
resources.requests."cdi.k8s.io/cdi.nyxerinys.dev_fuse" = "1";
securityContext = {
capabilities.add = ["SYS_ADMIN"];
privileged = false;
runAsUser = 0;
runAsGroup = 0;
};
}
];
volumes = [
{
name = "fuse-device";
hostPath = {
path = "/dev/fuse";
type = "CharDevice";
# privileged = false;
# runAsUser = 0;
# runAsGroup = 0;
};
}
];
# volumes = [
# {
# name = "fuse-device";
# hostPath = {
# path = "/dev/fuse";
# type = "CharDevice";
# };
# }
# ];
};
};
};

6
modules/k3s/images/rsshfs-server.nix
View file

@ -26,8 +26,8 @@ let
KbdInteractiveAuthentication no
PubkeyAuthentication no
PermitRootLogin yes
AllowUsers root
PermitRootLogin no
AllowUsers dev
AllowTcpForwarding yes
X11Forwarding no
@ -81,7 +81,7 @@ pkgs.dockerTools.buildLayeredImage {
mkdir -p ./var/empty
chmod 755 ./var/empty
mkdir -p ./home/dev/.ssh
mkdir -p ./home/dev/
chown -R 1000:1000 ./home/dev
mkdir -p ./containers