nixpkgs/nixos/doc/manual
Maximilian Bosch 7d443d378b
nixos/oci-containers: support rootless containers & healthchecks
Closes #259770
Closes #207050

The motivation for the former is to not execute the container as root,
so you don't have to `sudo -i` to perform podman management tasks.

The idea behind healthchecks is to be able to keep the unit in the
activating state until the container is healthy, only then then unit is
marked as active.

The following changes were necessary:

* Move the ctr-id into `/run/${containerName}` to make podman can
  actually write to it since it's now in its RuntimeDirectory.

* Make `sdnotify` option configurable (`healthy` for healthchecks that
  must pass, default remains `conmon`).

* Set Delegate=yes for `sdnotify=healthy` to make sure a rootless
  container can actually talk to sd_notify[1].

* Add a warning that lingering must be enabled to have a `systemd --user`
  instance running which is required for the cgroup support to work
  properly.

* Added a testcase for rootless containers with both conmon and
  healthchecks.

[1] https://github.com/containers/podman/discussions/20573#discussioncomment-7612481
2025-02-27 11:08:33 +01:00
..
administration Revert "NixOS apply script" 2024-11-01 20:18:09 -04:00
configuration manual: add mattermost.chapter.md 2025-01-20 08:07:45 +01:00
development treewide: fix typos 2025-02-22 02:02:07 +01:00
installation nixos-generate-config: add --flake option 2025-02-18 15:37:53 +07:00
release-notes nixos/oci-containers: support rootless containers & healthchecks 2025-02-27 11:08:33 +01:00
common.nix
contributing-to-this-manual.chapter.md nixos-render-docs: init redirects system 2024-11-15 14:09:21 +01:00
default.nix doc: titanium tombstone 2025-01-02 15:05:26 +01:00
manual.md
nixos-options.md
preface.md
README.md
redirects.json nexusmods-app: add release-note for resetting before upgrading 2025-02-08 20:36:12 +00:00
shell.nix docs: fix devmode for manuals 2025-01-24 18:05:03 +01:00