all the mounts, none of the secure
This commit is contained in:
parent
5faf1fc556
commit
69931d4db9
1 changed files with 13 additions and 0 deletions
|
|
@ -36,6 +36,9 @@
|
||||||
internalInterfaces = ["ve-+"];
|
internalInterfaces = ["ve-+"];
|
||||||
externalInterface = "ens18";
|
externalInterface = "ens18";
|
||||||
};
|
};
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
fuse-overlayfs
|
||||||
|
];
|
||||||
|
|
||||||
containers.gitlab-runner = {
|
containers.gitlab-runner = {
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
|
|
@ -55,6 +58,15 @@
|
||||||
hostPath = "/var/lib/gitlab-runner";
|
hostPath = "/var/lib/gitlab-runner";
|
||||||
isReadOnly = false;
|
isReadOnly = false;
|
||||||
};
|
};
|
||||||
|
"/proc" = {
|
||||||
|
hostPath = "/run/proc";
|
||||||
|
};
|
||||||
|
"/sys" = {
|
||||||
|
hostPath = "/run/sys";
|
||||||
|
};
|
||||||
|
"/dev/fuse" = {
|
||||||
|
hostPath = "/dev/fuse";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# Guest (inside the nspawn container)
|
# Guest (inside the nspawn container)
|
||||||
|
|
@ -91,6 +103,7 @@
|
||||||
docker
|
docker
|
||||||
git
|
git
|
||||||
crun
|
crun
|
||||||
|
fuse-overlayfs
|
||||||
];
|
];
|
||||||
systemd.services."enable-linger-gitlab-runner" = {
|
systemd.services."enable-linger-gitlab-runner" = {
|
||||||
description = "Enable linger for gitlab-runner";
|
description = "Enable linger for gitlab-runner";
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue