!coeAONBrWyDJnYMbMi:nixos.org

NixOS System Operations

590 Members
About system administration for running NixOS systems in production. Declaratively manage your operations. | Room recommendations: #networking:nixos.org161 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
19 Mar 2025
@steveej0:matrix.orgsteveejmaybe the systemd folks are open to implementing the gap. i'd be surprised as there doesn't seem to be much demand for systemd-nspawn in general10:14:53
@elvishjerricco:matrix.orgElvishJerriccosystemd-nspawn and systemd-vmspawn were designed first and foremost as tools to test an OS with, not so much a proper containerization / virtualization framework10:16:16
@elvishjerricco:matrix.orgElvishJerriccoof course nspawn has evolved a lot since10:16:37
@elvishjerricco:matrix.orgElvishJerricco But yea I don't really understand why directory based nspawn isn't possible unprivileged. That really does seem like the easier thing to do unprivileged 10:17:46
@elvishjerricco:matrix.orgElvishJerriccoso I bet it just wasn't the priority of whoever implemented unprivileged operation so they didn't do it10:18:08
@magic_rb:matrix.redalder.orgmagic_rbWouldnt it be better to just use runc for this? I do use nspawn but like, runc exists10:18:48
@elvishjerricco:matrix.orgElvishJerriccowell, if you wanna rewrite the nixos containers system with runc then be my guest :)10:19:42
@magic_rb:matrix.redalder.orgmagic_rb:) might try tbh, when i finish my bachelor. I do kind of want a better system which would be declarative but not really. (Split the eval into parts but make sure everything updates in tandem)10:20:46
@steveej0:matrix.orgsteveeji'm up for integrating a rust-based container runtime with nixos-containers, just in case i had to change something about it.10:21:14
@magic_rb:matrix.redalder.orgmagic_rbI dont think it would need any actual programming, if we were to bolt runc on the bottom10:21:49
@magic_rb:matrix.redalder.orgmagic_rbJust a healthy amount of nix and maybe some bash10:21:56
@magic_rb:matrix.redalder.orgmagic_rb Ill try to retarget my ucontainer thing i use to run NixNG containers on top of runc first tho 10:22:30
@elvishjerricco:matrix.orgElvishJerricco do other container systems integrate as nicely with systemd as nspawn does? e.g. nspawn will use sd_notify to signal when the container is ready, so that you can order units after container@foo.service and have that mean the right thing 10:24:37
@elvishjerricco:matrix.orgElvishJerricco or systemctl status container@foo.service shows you the unit hierarchy of the container 10:24:51

Show newer messages


Back to Room ListRoom Version: 10