qbit/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos-containers: fix enableTun option (#357276)

Browse Source
This commit is contained in:
Franz Pletz 2024-11-23 17:18:57 +01:00 committed by GitHub
commit c6369bb94a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/virtualisation/nixos-containers.nix
View File

@ -705,7 +705,7 @@ in
allowedDevices = mkOption {
type = with types; listOf (submodule allowedDeviceOpts);
default = [];
example = [ { node = "/dev/net/tun"; modifier = "rw"; } ];
example = [ { node = "/dev/net/tun"; modifier = "rwm"; } ];
description = ''
A list of device nodes to which the containers has access to.
'';
@ -835,7 +835,7 @@ in
optionalAttrs cfg.enableTun
{
allowedDevices = cfg.allowedDevices
++ [ { node = "/dev/net/tun"; modifier = "rw"; } ];
++ [ { node = "/dev/net/tun"; modifier = "rwm"; } ];
additionalCapabilities = cfg.additionalCapabilities
++ [ "CAP_NET_ADMIN" ];
}