646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
120 lines
3.0 KiB
Nix
120 lines
3.0 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchFromGitHub,
|
|
|
|
bashInteractive,
|
|
dbus,
|
|
docbook2x,
|
|
libapparmor,
|
|
libcap,
|
|
libseccomp,
|
|
libselinux,
|
|
meson,
|
|
ninja,
|
|
nixosTests,
|
|
openssl,
|
|
pkg-config,
|
|
systemd,
|
|
|
|
nix-update-script,
|
|
}:
|
|
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "lxc";
|
|
version = "6.0.5";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "lxc";
|
|
repo = "lxc";
|
|
tag = "v${finalAttrs.version}";
|
|
hash = "sha256-bnvKSs7w1cq3vP2BzX4kfDrGUIFhU4Fnu5pM81jPVQ8=";
|
|
};
|
|
|
|
nativeBuildInputs = [
|
|
docbook2x
|
|
meson
|
|
ninja
|
|
pkg-config
|
|
];
|
|
|
|
buildInputs = [
|
|
# some hooks use compgen
|
|
bashInteractive
|
|
dbus
|
|
libapparmor
|
|
libcap
|
|
libseccomp
|
|
libselinux
|
|
openssl
|
|
systemd
|
|
];
|
|
|
|
patches = [
|
|
# fix docbook2man version detection
|
|
./docbook-hack.patch
|
|
|
|
# Fix hardcoded path of lxc-user-nic
|
|
# This is needed to use unprivileged containers
|
|
./user-nic.diff
|
|
];
|
|
|
|
mesonFlags = [
|
|
"-Dinstall-init-files=true"
|
|
"-Dinstall-state-dirs=false"
|
|
"-Dspecfile=false"
|
|
"-Dtools-multicall=true"
|
|
"-Dtools=false"
|
|
"-Dusernet-config-path=/etc/lxc/lxc-usernet"
|
|
"-Ddistrosysconfdir=${placeholder "out"}/etc/lxc"
|
|
"-Dsystemd-unitdir=${placeholder "out"}/lib/systemd/system"
|
|
];
|
|
|
|
# /run/current-system/sw/share
|
|
postInstall = ''
|
|
substituteInPlace $out/etc/lxc/lxc --replace-fail "$out/etc/lxc" "/etc/lxc"
|
|
substituteInPlace $out/libexec/lxc/lxc-net --replace-fail "$out/etc/lxc" "/etc/lxc"
|
|
|
|
substituteInPlace $out/share/lxc/templates/lxc-download --replace-fail "$out/share" "/run/current-system/sw/share"
|
|
substituteInPlace $out/share/lxc/templates/lxc-local --replace-fail "$out/share" "/run/current-system/sw/share"
|
|
substituteInPlace $out/share/lxc/templates/lxc-oci --replace-fail "$out/share" "/run/current-system/sw/share"
|
|
|
|
substituteInPlace $out/share/lxc/config/common.conf --replace-fail "$out/share" "/run/current-system/sw/share"
|
|
substituteInPlace $out/share/lxc/config/userns.conf --replace-fail "$out/share" "/run/current-system/sw/share"
|
|
substituteInPlace $out/share/lxc/config/oci.common.conf --replace-fail "$out/share" "/run/current-system/sw/share"
|
|
'';
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
doCheck = true;
|
|
|
|
passthru = {
|
|
tests = {
|
|
incus-lts = nixosTests.incus-lts.container;
|
|
lxc = nixosTests.lxc;
|
|
};
|
|
|
|
updateScript = nix-update-script {
|
|
extraArgs = [
|
|
"--version-regex"
|
|
"v(6\\.0\\.*)"
|
|
];
|
|
};
|
|
};
|
|
|
|
meta = {
|
|
homepage = "https://linuxcontainers.org/";
|
|
description = "Userspace tools for Linux Containers, a lightweight virtualization system";
|
|
license = lib.licenses.gpl2;
|
|
|
|
longDescription = ''
|
|
LXC containers are often considered as something in the middle between a chroot and a
|
|
full fledged virtual machine. The goal of LXC is to create an environment as close as
|
|
possible to a standard Linux installation but without the need for a separate kernel.
|
|
'';
|
|
|
|
platforms = lib.platforms.linux;
|
|
teams = [ lib.teams.lxc ];
|
|
};
|
|
})
|