Switch to unstable package and enable all docker capabilities.
This commit is contained in:
@@ -7,6 +7,7 @@ in
|
|||||||
{
|
{
|
||||||
services.nomad = {
|
services.nomad = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
package = pkgs.unstable.nomad;
|
||||||
# true breaks at least CSI volumes
|
# true breaks at least CSI volumes
|
||||||
dropPrivileges = false;
|
dropPrivileges = false;
|
||||||
|
|
||||||
@@ -30,7 +31,11 @@ in
|
|||||||
};
|
};
|
||||||
|
|
||||||
environment.etc."nomad-alo.json".text = builtins.toJSON {
|
environment.etc."nomad-alo.json".text = builtins.toJSON {
|
||||||
plugin.docker.config.allow_privileged = true;
|
plugin.docker.config = {
|
||||||
|
allow_privileged = true;
|
||||||
|
# for keepalived, though only really needing "NET_ADMIN","NET_BROADCAST","NET_RAW" on top of default
|
||||||
|
allow_caps = ["all"];
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
environment.persistence."/persist".directories = [
|
environment.persistence."/persist".directories = [
|
||||||
|
|||||||
Reference in New Issue
Block a user