full nixos inside docker

[offlinehacker]

This is first attempt to run full nixos inside docker. You will need docker 1.2.0(already meged into master), because of support of adding capabilities to containers. Currenty it should not be possible to run these images on docker virtualization providers, because docker was, but does not have patch for systemd included anymore, because of (for my opinion) not so relevant non systemd related bugs(see: docker-archive/libcontainer#30 and moby/moby#3629).

• To build docker base image use:

export NIXOS_CONFIG=$(pwd)/modules/virtualisation/docker-image.nix
nix-build . -A config.system.build.dockerImage

• To import image to docker(docker daemon must be running):

cat result/tarball/nixos-system-x86_64-linux.tar.xz| sudo docker import - nixos

• To start it:

sudo docker/bin/docker run -t -i --cap-add=SYS_ADMIN --cap-add=SYS_RESOURCE -e "container=docker" nixos /bin/init

As soon as docker will be patched to have cgroups mounted, i will make it run without these additional flags.

UPDATE: I still have to figure out how to push new base image to docker image repos

[offlinehacker]

You can try it here: https://registry.hub.docker.com/u/offlinehacker/nixos/

[lucabrunox]

Works perfectly, even on ubuntu+nix by installing docker from nixpkgs master. I suggest to use /init instead of /bin/init to not have init in PATH.

[aristidb]

+1, I think this would be a nice way for new people to try out NixOS as well.

[offlinehacker]

Can you please make console-getty optional based on boot.isContainer, or
some people might have trouble?
On Sep 1, 2014 11:04 PM, "Michael Raskin" notifications@github.com wrote:

Merged #3779 #3779.

—
Reply to this email directly or view it on GitHub
#3779 (comment).

[7c6f434c]

Can you please make console-getty optional based on boot.isContainer, or

Is "enable = boot.isContainer;" enough?

[lucabrunox]

enable = mkDefault config.boot.isContainer maybe

[offlinehacker]

I think this should be enough, at least it Works for normal services.
On Sep 1, 2014 11:22 PM, "Michael Raskin" notifications@github.com wrote:

Can you please make console-getty optional based on boot.isContainer, or

Is "enable = boot.isContainer;" enough?

—
Reply to this email directly or view it on GitHub
#3779 (comment).