NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

try new settings

Browse source
This commit is contained in:
nyxerinys 2026-07-03 08:20:43 -05:00
parent 9afa930729
commit dba75173fd
1 changed files with 22 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

41
modules/k3s/deployments/storage-combo.nix
View file

@ -13,9 +13,10 @@
template = {
metadata = {
labels.app = "storage-combo";
annotations."cdi.k8s.io/devices" = "cdi.nyxerinys.dev/fuse=rw";
annotations."cdi.k8s.io/cdi.nyxerinys.dev/fuse" = "rw";
};
spec = {
hostUsers = false;
containers = [
{
name = "storage-combo";
@ -27,29 +28,31 @@
containerPort = 2222;
}
];
# volumeMounts = [
# {
# name = "fuse-device";
# mountPath = "/dev/fuse";
# }
# ];
volumeMounts = [
{
name = "fuse-device";
mountPath = "/dev/fuse";
}
];
securityContext = {
allowPrivilegeEscalation = true;
capabilities.add = ["SYS_ADMIN"];
# privileged = false;
# runAsUser = 0;
# runAsGroup = 0;
seccompProfile.type = "RuntimeDefault";
runAsNonRoot = true;
runAsUser = 1000;
runAsGroup = 1000;
};
}
];
volumes = [
{
name = "fuse-device";
hostPath = {
path = "/dev/fuse";
type = "CharDevice";
};
}
];
# volumes = [
# {
# name = "fuse-device";
# hostPath = {
# path = "/dev/fuse";
# type = "CharDevice";
# };
# }
# ];
};
};
};