home

commit dabb7ad1a911fb79f3d3a2a64c65187d2a8b4a77
parent f8963b3f64af11a86f3633f41ed3d27959cba27d
Author: Vincent Demeester <vincent@sbr.pm>
Date:   Thu, 24 Feb 2022 15:47:50 +0100

systems/naruhodo: enable buildkit

also fixed a flag in docker profile settings.

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

Diffstat:
M
systems/hosts/naruhodo.nix
 | 
39
+++++++++++++++++++++++++++++----------
M
systems/modules/profiles/docker.nix
 | 
2
+-

2 files changed, 30 insertions(+), 11 deletions(-)
diff --git a/systems/hosts/naruhodo.nix b/systems/hosts/naruhodo.nix
@@ -140,19 +140,38 @@ in
     syncthing.guiAddress = "${metadata.hosts.naruhodo.wireguard.addrs.v4}:8384";
   };
 
-  virtualisation.podman.enable = true;
-  virtualisation.containers = {
-    enable = true;
-    registries = {
-      search = [ "registry.fedoraproject.org" "registry.access.redhat.com" "registry.centos.org" "docker.io" "quay.io" ];
+  virtualisation = {
+    buildkitd = {
+      enable = true;
+      settings = {
+        worker.oci.enabled = true;
+        registry = {
+          "r.svc.home:5000" = {
+            http = true;
+            insecure = true;
+          };
+          "r.svc.home" = {
+            http = true;
+            insecure = true;
+          };
+        };
+      };
     };
-    policy = {
-      default = [{ type = "insecureAcceptAnything"; }];
-      transports = {
-        docker-daemon = {
-          "" = [{ type = "insecureAcceptAnything"; }];
+    podman.enable = true;
+    containers = {
+      enable = true;
+      registries = {
+        search = [ "registry.fedoraproject.org" "registry.access.redhat.com" "registry.centos.org" "docker.io" "quay.io" ];
+      };
+      policy = {
+        default = [{ type = "insecureAcceptAnything"; }];
+        transports = {
+          docker-daemon = {
+            "" = [{ type = "insecureAcceptAnything"; }];
+          };
         };
       };
     };
   };
+
 }
diff --git a/systems/modules/profiles/docker.nix b/systems/modules/profiles/docker.nix
@@ -32,7 +32,7 @@ in
             enabled = false;
           };
           worker.containerd = {
-            enable = true;
+            enabled = true;
             platforms = [ "linux/amd64" "linux/arm64" ];
             namespace = "buildkit";
           };