Add flags that allow podman to run the program

boinkor-net · Aug 29, 2023 · cfae929 · cfae929
1 parent 91bd25c
commit cfae929
Showing 1 changed file with 13 additions and 3 deletions.
diff --git a/nixos/default.nix b/nixos/default.nix
@@ -276,9 +276,19 @@ in {
                 # The tsnet auth key.
                 "${config.virtualisation.oci-sidecars.tsnsrv.authKeyPath}:${config.virtualisation.oci-sidecars.tsnsrv.authKeyPath}"
               ];
-              extraOptions = [
-                "--network=container:${sidecar.forContainer}"
-              ];
+              extraOptions =
+                [
+                  "--network=container:${sidecar.forContainer}"
+                ]
+                ++ (
+                  if (config.virtualisation.oci-containers.backend == "podman")
+                  then [
+                    "--passwd"
+                    "--hostuser=${config.users.users.tsnsrv-sidecar.name}"
+                    "--group-add=keep-groups"
+                  ]
+                  else []
+                );
               cmd =
                 ["-stateDir=/state"]
                 ++ (serviceArgs {