forked from mirrors/nixpkgs
1ad9a654be
So now "systemctl start container@foo" will only return after the container has reached multi-user.target.
73 lines
2.1 KiB
Nix
73 lines
2.1 KiB
Nix
{ config, pkgs, lib, ... }:
|
||
|
||
with lib;
|
||
|
||
{
|
||
|
||
config = mkIf config.boot.isContainer {
|
||
|
||
# Provide a login prompt on /var/lib/login.socket. On the host,
|
||
# you can connect to it by running ‘socat
|
||
# unix:<path-to-container>/var/lib/login.socket -,echo=0,raw’.
|
||
systemd.sockets.login =
|
||
{ description = "Login Socket";
|
||
wantedBy = [ "sockets.target" ];
|
||
socketConfig =
|
||
{ ListenStream = "/var/lib/login.socket";
|
||
SocketMode = "0666";
|
||
Accept = true;
|
||
};
|
||
};
|
||
|
||
systemd.services."login@" =
|
||
{ description = "Login %i";
|
||
environment.TERM = "linux";
|
||
serviceConfig =
|
||
{ Type = "simple";
|
||
StandardInput = "socket";
|
||
ExecStart = "${pkgs.socat}/bin/socat -t0 - exec:${pkgs.shadow}/bin/login,pty,setsid,setpgid,stderr,ctty";
|
||
TimeoutStopSec = 1; # FIXME
|
||
};
|
||
};
|
||
|
||
# Provide a non-interactive login root shell on
|
||
# /var/lib/root-shell.socket. On the host, you can connect to it
|
||
# by running ‘socat unix:<path-to-container>/var/lib/root-shell.socket -’.
|
||
systemd.sockets.root-shell =
|
||
{ description = "Root Shell Socket";
|
||
wantedBy = [ "sockets.target" ];
|
||
socketConfig =
|
||
{ ListenStream = "/var/lib/root-shell.socket";
|
||
SocketMode = "0600"; # only root can connect, obviously
|
||
Accept = true;
|
||
};
|
||
};
|
||
|
||
systemd.services."root-shell@" =
|
||
{ description = "Root Shell %i";
|
||
serviceConfig =
|
||
{ Type = "simple";
|
||
StandardInput = "socket";
|
||
ExecStart = "${pkgs.bash}/bin/bash --login";
|
||
TimeoutStopSec = 1; # FIXME
|
||
};
|
||
};
|
||
|
||
systemd.services.container-startup-done =
|
||
{ description = "Container Startup Notification";
|
||
wantedBy = [ "multi-user.target" ];
|
||
after = [ "multi-user.target" ];
|
||
script =
|
||
''
|
||
if [ -p /var/lib/startup-done ]; then
|
||
echo done > /var/lib/startup-done
|
||
fi
|
||
'';
|
||
serviceConfig.Type = "oneshot";
|
||
serviceConfig.RemainAfterExit = true;
|
||
};
|
||
|
||
};
|
||
|
||
}
|