containerization #3
@@ -287,7 +287,7 @@ rec {
|
||||
allBindMounts = builtins.foldl' (acc: t: acc // (t.resources.fs or { })) { } traits // bindMounts;
|
||||
userModules = map mkUser (lib.concatMap (t: t.users or [ ]) traits ++ users);
|
||||
allPorts = ports ++ map (p: (normalizePort p).container) hostPorts;
|
||||
useIdmap = privateUsers != "no";
|
||||
useIdmap = privateUsers == "pick" || (builtins.isInt privateUsers && privateUsers > 0);
|
||||
bindMountExtraFlags = lib.mapAttrsToList (
|
||||
mountPoint: bm:
|
||||
(if bm.isReadOnly then "--bind-ro=" else "--bind=")
|
||||
|
||||
Reference in New Issue
Block a user