c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

Compare commits

base: c3d2:0b4b8108b9353221af6ffcd21d698d3bf885a2e1
Branches Tags
c3d2:master
c3d2:flake-update
c3d2:gitea-actions-runner
c3d2:nixos-23.11
c3d2:ds-future
c3d2:container/radius
...
compare: c3d2:24872f0b75676658c4cd07b13b238499b47ac312
Branches Tags
c3d2:flake-update
c3d2:master
c3d2:gitea-actions-runner
c3d2:nixos-23.11
c3d2:ds-future
c3d2:container/radius

2 Commits
0b4b8108b9 ... 24872f0b75

Author SHA1 Message Date
Astro 24872f0b75 flake.nix: don't pull the microvm module into skyflake vms 
This is forbidden for security reasons.
 2023-05-23 20:55:22 +02:00
Astro 69a5ebae1c modules/microvm-defaults: remove firewall.autoLoadConntrackHelpers 
> Failed assertions:
> - conntrack helper autoloading has been removed from kernel 6.0
>   and newer
 2023-05-23 20:37:15 +02:00
2 changed files with 0 additions and 4 deletions
Show Stats Expand all files Collapse all files

1
flake.nix
View File

@ -790,7 +790,6 @@
cluster-network = ./modules/cluster/network.nix;
cluster-options.imports = [
deployment.nixosModules.deployment-options
microvm.nixosModules.microvm
./modules/microvm-defaults.nix
];
microvm.imports = [

3
modules/microvm-defaults.nix
View File

@ -27,9 +27,6 @@
hardware.enableRedistributableFirmware = false;
# required that sysctl contains net.netfilter.nf_conntrack_max on boot
networking.firewall.autoLoadConntrackHelpers = true;
# nix store is mounted read only
nix.gc.automatic = false;