nixos/modules/virtualisation/lxc-instance-common.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

{ lib, ... }:

{
  meta = {
    teams = [ lib.teams.lxc ];
  };

  imports = [
    ./lxc-image-metadata.nix

    ../installer/cd-dvd/channel.nix
    ../profiles/clone-config.nix
    ../profiles/minimal.nix
  ];

  # Allow the user to login as root without password.
  users.users.root.initialHashedPassword = lib.mkOverride 150 "";

  # Some more help text.
  services.getty.helpLine = ''

    Log in as "root" with an empty password.
  '';

  # Containers should be light-weight, so start sshd on demand.
  services.openssh.enable = lib.mkDefault true;
  services.openssh.startWhenNeeded = lib.mkDefault true;

  # friendlier defaults than minimal profile provides
  # but we can't use mkDefault since minimal uses it
  documentation.enable = lib.mkOverride 890 true;
  documentation.nixos.enable = lib.mkOverride 890 true;
  services.logrotate.enable = true;
}