docker -> podman

Author: functora

nix/configuration.nix

@@ -485,9 +485,9 @@ in {
     networking.firewall.enable = true;
     networking.nameservers = ["8.8.8.8" "8.8.4.4"];
     virtualisation.virtualbox.host.enable = true;
-    virtualisation.docker.enable = false;
+    virtualisation.containers.enable = true;
     virtualisation.podman.enable = true;
-    virtualisation.podman.dockerSocket.enable = true;
+    virtualisation.podman.dockerCompat = true;
     virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
     users.extraGroups.vboxusers.members = [config.services.functora.userName];
     networking.extraHosts = blocked-hosts;
@@ -500,7 +500,6 @@ in {
         "wheel"
         "input"
         "uinput"
-        "docker"
         "podman"
         "plugdev"
         "adbusers"

nix/misc.nix

@@ -91,6 +91,10 @@ in
         config = mkIf config.services."${srv}".enable {
           virtualisation.oci-containers.containers.${srv} = {
             image = img;
+            #
+            # TODO : remove after bugfix https://github.com/NixOS/nixpkgs/issues/272480
+            #
+            extraOptions = ["--network=host"];
             volumes =
               (map (x: x + ":" + x + ":ro") cfg)
               ++ (map (x: x + ":" + x) mnt);

nix/rpi4.nix

@@ -56,7 +56,7 @@ in {
       password = password;
       extraGroups = [
         "wheel"
-        "docker"
+        "podman"
       ];
     };
   };
@@ -102,7 +102,10 @@ in {
     settings.PermitRootLogin = "no";
   };
   #
-  # Docker
+  # Containers
   #
-  virtualisation.docker.enable = true;
+  virtualisation.containers.enable = true;
+  virtualisation.podman.enable = true;
+  virtualisation.podman.dockerCompat = true;
+  virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
 }