44 lines
830 B
Nix
44 lines
830 B
Nix
{ config, lib, modulesPath, ... }:
|
|
|
|
{
|
|
imports = [
|
|
(modulesPath + "/profiles/minimal.nix")
|
|
(modulesPath + "/virtualisation/lxc-container.nix")
|
|
];
|
|
|
|
boot = {
|
|
isContainer = true;
|
|
loader = {
|
|
initScript.enable = true;
|
|
};
|
|
};
|
|
|
|
environment.etc."machine-id".text =
|
|
builtins.substring 0 8 (
|
|
builtins.hashString "sha256" config.networking.hostName
|
|
);
|
|
|
|
nix = {
|
|
settings = {
|
|
sandbox = false;
|
|
max-jobs = lib.mkDefault 4;
|
|
cores = lib.mkDefault 4;
|
|
};
|
|
};
|
|
|
|
systemd.services =
|
|
let
|
|
noNestOpts.serviceConfig = {
|
|
PrivateTmp = lib.mkOverride 0 false;
|
|
};
|
|
in {
|
|
nscd = noNestOpts;
|
|
systemdLogind = noNestOpts;
|
|
|
|
nix-daemon.enable = false;
|
|
};
|
|
systemd.sockets.nix-daemon.enable = false;
|
|
|
|
services.openssh.enable = false;
|
|
}
|