68 lines
2.2 KiB
Nix
68 lines
2.2 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
let
|
|
# System-wide script for updating containers (works with sudo)
|
|
update-containers-script = pkgs.writeShellScriptBin "update-containers" ''
|
|
echo "Scanning running containers..."
|
|
containers=$(podman ps --format "{{.Names}}")
|
|
|
|
if [[ -z "$containers" ]]; then
|
|
echo "No running containers found."
|
|
exit 0
|
|
fi
|
|
|
|
for container in $containers; do
|
|
echo "=================================================="
|
|
echo "Processing container: $container"
|
|
|
|
# Get the image used by this container
|
|
image=$(podman inspect "$container" --format "{{.ImageName}}")
|
|
echo "Current image: $image"
|
|
|
|
# Pull the latest version of the image
|
|
echo "Pulling latest version of $image..."
|
|
if podman pull "$image"; then
|
|
# Check if the image was updated by comparing IDs
|
|
old_id=$(podman inspect "$container" --format "{{.Image}}")
|
|
new_id=$(podman inspect "$image" --format "{{.Id}}")
|
|
|
|
if [[ "$old_id" != "$new_id" ]]; then
|
|
echo "New version available! Restarting container..."
|
|
podman restart "$container"
|
|
echo "Container $container restarted with new image"
|
|
else
|
|
echo "Container $container is already using the latest image"
|
|
fi
|
|
else
|
|
echo "Failed to pull image for $container"
|
|
fi
|
|
echo ""
|
|
done
|
|
|
|
echo "Container update scan complete!"
|
|
'';
|
|
in
|
|
{
|
|
# Container virtualization with Podman
|
|
virtualisation = {
|
|
podman = {
|
|
enable = true;
|
|
# Create a `docker` alias for podman, to use it as a drop-in replacement
|
|
dockerCompat = true;
|
|
# Required for containers under podman-compose to be able to talk to each other
|
|
defaultNetwork.settings.dns_enabled = true;
|
|
# Extra packages for networking
|
|
extraPackages = [ pkgs.netavark pkgs.aardvark-dns ];
|
|
};
|
|
# Enable OCI container support
|
|
oci-containers = {
|
|
backend = "podman";
|
|
# Container definitions are now defined in host-specific containers.nix files
|
|
# and will be merged with this base configuration
|
|
};
|
|
};
|
|
|
|
# Make update-containers available system-wide (works with sudo)
|
|
environment.systemPackages = [ update-containers-script ];
|
|
|
|
}
|