yanlin/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add automatic container update logic

Browse source
This commit is contained in:
Yan Lin 2025-11-24 01:12:16 +01:00
parent 4f41394763
commit 4d05a6fbe9
2 changed files with 44 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

42
modules/podman.nix
View file

@ -1,6 +1,10 @@
{ config, pkgs, lib, ... }:
with lib;
let
cfg = config.virtualisation.podman;
# System-wide script for updating containers (works with sudo)
update-containers-script = pkgs.writeShellScriptBin "update-containers" ''
echo "Scanning running containers..."
@ -43,8 +47,20 @@ let
'';
in
{
# Container virtualization with Podman
virtualisation = {
options.virtualisation.podman.autoUpdate = {
enable = mkEnableOption "automatic container updates";
interval = mkOption {
type = types.str;
default = "daily";
example = "*-*-* 03:00:00";
description = "Systemd timer schedule for automatic updates (OnCalendar format)";
};
};
config = {
# Container virtualization with Podman
virtualisation = {
podman = {
enable = true;
# Create a `docker` alias for podman, to use it as a drop-in replacement
@ -62,7 +78,25 @@ in
};
};
# Make update-containers available system-wide (works with sudo)
environment.systemPackages = [ update-containers-script ];
# Make update-containers available system-wide (works with sudo)
environment.systemPackages = [ update-containers-script ];
# Automatic container updates via systemd timer
systemd.services.container-update-all = mkIf cfg.autoUpdate.enable {
description = "Automatic Podman container updates";
serviceConfig = {
Type = "oneshot";
ExecStart = "${update-containers-script}/bin/update-containers";
};
};
systemd.timers.container-update-all = mkIf cfg.autoUpdate.enable {
description = "Timer for automatic Podman container updates";
wantedBy = [ "timers.target" ];
timerConfig = {
OnCalendar = cfg.autoUpdate.interval;
Persistent = true;
};
};
};
}