all the mounts, none of the secure

This commit is contained in:
alisceon 2025-09-30 19:43:18 +02:00
parent 5faf1fc556
commit 69931d4db9

View file

@ -36,6 +36,9 @@
internalInterfaces = ["ve-+"]; internalInterfaces = ["ve-+"];
externalInterface = "ens18"; externalInterface = "ens18";
}; };
environment.systemPackages = with pkgs; [
fuse-overlayfs
];
containers.gitlab-runner = { containers.gitlab-runner = {
autoStart = true; autoStart = true;
@ -55,6 +58,15 @@
hostPath = "/var/lib/gitlab-runner"; hostPath = "/var/lib/gitlab-runner";
isReadOnly = false; isReadOnly = false;
}; };
"/proc" = {
hostPath = "/run/proc";
};
"/sys" = {
hostPath = "/run/sys";
};
"/dev/fuse" = {
hostPath = "/dev/fuse";
};
}; };
# Guest (inside the nspawn container) # Guest (inside the nspawn container)
@ -91,6 +103,7 @@
docker docker
git git
crun crun
fuse-overlayfs
]; ];
systemd.services."enable-linger-gitlab-runner" = { systemd.services."enable-linger-gitlab-runner" = {
description = "Enable linger for gitlab-runner"; description = "Enable linger for gitlab-runner";