Initial commit

modules/virtualization/default.nix

@@ -0,0 +1,8 @@
+{ ... }:
+{
+  imports = [
+    ./podman.nix
+    ./qemu.nix
+    ./lima.nix
+  ];
+}

modules/virtualization/lima.nix

@@ -0,0 +1,7 @@
+{ pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+    lima
+  ];
+}

modules/virtualization/podman.nix

@@ -0,0 +1,38 @@
+{ pkgs, ... }:
+
+{
+  virtualisation.podman = {
+    enable = true;
+
+    dockerCompat = true;
+    defaultNetwork.settings.dns_enabled = true;
+  };
+
+  # For rootless containers
+  security.unprivilegedUsernsClone = true;
+
+  users.users.river = {
+    subUidRanges = [
+      {
+        startUid = 100000;
+        count = 65536;
+      }
+    ];
+    subGidRanges = [
+      {
+        startGid = 100000;
+        count = 65536;
+      }
+    ];
+
+    extraGroups = [
+      "podman"
+    ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    podman
+    podman-compose
+    podman-desktop
+  ];
+}

modules/virtualization/qemu.nix

@@ -0,0 +1,28 @@
+{ pkgs, ... }:
+
+{
+  virtualisation.spiceUSBRedirection.enable = true;
+
+  virtualisation = {
+    containers.enable = true;
+    libvirtd = {
+      enable = true;
+      qemu = {
+        package = pkgs.qemu_kvm;
+        swtpm.enable = true;
+      };
+    };
+  };
+
+  programs.virt-manager.enable = true;
+
+  users.users.river.extraGroups = [
+    "libvirtd"
+    "kvm"
+  ];
+
+  boot.kernelModules = [
+    "kvm-intel"
+    "kvm-amd"
+  ];
+}