41 lines
1019 B
Nix
41 lines
1019 B
Nix
|
{ config, lib, pkgs, ... }:
|
||
|
|
with builtins; with lib; {
|
||
|
|
|
||
|
|
options.wsl.docker-native = with types; {
|
||
|
|
enable = mkEnableOption "Native Docker integration in NixOS.";
|
||
|
|
|
||
|
|
addToDockerGroup = mkOption {
|
||
|
|
type = bool;
|
||
|
|
default = config.security.sudo.wheelNeedsPassword;
|
||
|
|
description = ''
|
||
|
|
Wether to add the default user to the docker group.
|
||
|
|
|
||
|
|
This is not recommended, if you have a password, because it essentially permits unauthenticated root access.
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
config =
|
||
|
|
let
|
||
|
|
cfg = config.wsl.docker-native;
|
||
|
|
in
|
||
|
|
mkIf (config.wsl.enable && cfg.enable) {
|
||
|
|
nixpkgs.overlays = [
|
||
|
|
(self: super: {
|
||
|
|
docker = super.docker.override { iptables = pkgs.iptables-legacy; };
|
||
|
|
})
|
||
|
|
];
|
||
|
|
|
||
|
|
environment.systemPackages = with pkgs; [
|
||
|
|
docker
|
||
|
|
docker-compose
|
||
|
|
];
|
||
|
|
|
||
|
|
virtualisation.docker.enable = true;
|
||
|
|
|
||
|
|
users.groups.docker.members = lib.mkIf cfg.addToDockerGroup [
|
||
|
|
config.wsl.defaultUser
|
||
|
|
];
|
||
|
|
};
|
||
|
|
}
|