update

2026-09-11 15:59:27 -05:00
parent 76fa38e34c
commit fa39169fee
3 changed files with 53 additions and 1 deletions
@@ -113,14 +113,28 @@ in
  ssh-generic = mkSsh {
    name = "ssh-generic";
    net.access = [ { to = "@internet"; } ];
+    # /dev/kvm keeps its host ownership, so the kvm gid must not be shifted.
+    isolation.privateUsers = "identity";
    resources = {
      fs."/home/runner/data" = {
        hostPath = "${data}/ssh/generic";
        isReadOnly = false;
      };
+      devices = [ "/dev/kvm" ];
      mem = "16G";
      cpu = 65;
    };
+    packages = with pkgs; [ qemu_kvm ];
+    traits = [
+      {
+        containerConfig =
+          { config, ... }:
+          {
+            users.groups.kvm.gid = config.ids.gids.kvm;
+            users.users.runner.extraGroups = [ "kvm" ];
+          };
+      }
+    ];
    routingInfo = [
      {
        username = "autumn";