NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

try new settings

Browse source
This commit is contained in:
nyxerinys 2026-07-03 08:20:43 -05:00
parent 9afa930729
commit dba75173fd
1 changed files with 22 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

41
modules/k3s/deployments/storage-combo.nix
View file

@ -13,9 +13,10 @@
template = { template = {
metadata = { metadata = {
labels.app = "storage-combo"; labels.app = "storage-combo";
annotations."cdi.k8s.io/devices" = "cdi.nyxerinys.dev/fuse=rw"; annotations."cdi.k8s.io/cdi.nyxerinys.dev/fuse" = "rw";
}; };
spec = { spec = {
hostUsers = false;
containers = [ containers = [
{ {
name = "storage-combo"; name = "storage-combo";
@ -27,29 +28,31 @@
containerPort = 2222; containerPort = 2222;
} }
]; ];
# volumeMounts = [ volumeMounts = [
# { {
# name = "fuse-device"; name = "fuse-device";
# mountPath = "/dev/fuse"; mountPath = "/dev/fuse";
# } }
# ]; ];
securityContext = { securityContext = {
allowPrivilegeEscalation = true;
capabilities.add = ["SYS_ADMIN"]; capabilities.add = ["SYS_ADMIN"];
# privileged = false; seccompProfile.type = "RuntimeDefault";
# runAsUser = 0; runAsNonRoot = true;
# runAsGroup = 0; runAsUser = 1000;
runAsGroup = 1000;
};
}
];
volumes = [
{
name = "fuse-device";
hostPath = {
path = "/dev/fuse";
type = "CharDevice";
}; };
} }
]; ];
# volumes = [
# {
# name = "fuse-device";
# hostPath = {
# path = "/dev/fuse";
# type = "CharDevice";
# };
# }
# ];
}; };
}; };
}; };