initial

hosts/sarien/system/virtual/docker.nix

@@ -0,0 +1,29 @@
+{
+  # pkgs,
+  config,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.virtual.docker;
+in {
+  options = {
+    virtual.docker.enable =
+      mkEnableOption "enable docker";
+  };
+  config = mkIf cfg.enable {
+    virtualisation.docker = {
+      enable = true;
+      rootless = {
+        enable = true;
+        setSocketVariable = true;
+      };
+      storageDriver = "btrfs";
+      autoPrune.enable = true;
+      #defaultNetwork.settings = {
+      #  dns_enabled = true;
+      #};
+    };
+    virtualisation.oci-containers.backend = "docker";
+  };
+}

hosts/sarien/system/virtual/libvirt.nix

@@ -0,0 +1,35 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.virtual.libvirt;
+in {
+  options = {
+    virtual.libvirt.enable =
+      mkEnableOption "enables virtualisation";
+  };
+  config = mkIf cfg.enable {
+    virtualisation.libvirtd = {
+      enable = true;
+      qemu = {
+        package = pkgs.qemu_kvm;
+        runAsRoot = false;
+        swtpm.enable = true;
+        vhostUserPackages = [pkgs.virtiofsd];
+        ovmf = {
+          enable = true;
+          packages = [
+            (pkgs.OVMF.override {
+              secureBoot = true;
+              tpmSupport = true;
+            })
+            .fd
+          ];
+        };
+      };
+    };
+  };
+}

hosts/sarien/system/virtual/main.nix

@@ -0,0 +1,7 @@
+{
+  imports = [
+    ./libvirt.nix
+    ./podman.nix
+    ./docker.nix
+  ];
+}

hosts/sarien/system/virtual/podman.nix

@@ -0,0 +1,28 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.virtual.podman;
+in {
+  options = {
+    virtual.podman.enable =
+      mkEnableOption "enables podman";
+  };
+  config = mkIf cfg.enable {
+    virtualisation = {
+      containers.enable = true;
+      podman = {
+        enable = true;
+        dockerCompat = true;
+        defaultNetwork.settings.dns_enabled = true;
+      };
+    };
+    environment.systemPackages = with pkgs; [
+      podman-tui
+      podman-compose
+    ];
+  };
+}