basic modules

modules/virtualization/default.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  imports = [
+    ./podman.nix
+    ./qemu.nix
+  ];
+}

modules/virtualization/podman.nix

@@ -0,0 +1,37 @@
+{ pkgs, ... }:
+
+{
+  virtualisation.podman = {
+    enable = true;
+
+    dockerCompat = true;
+    defaultNetwork.settings.dns_enabled = true;
+  };
+
+  # For rootless containers
+  security.unprivilegedUsernsClone = true;
+
+  users.users.river = {
+    subUidRanges = [
+      {
+        startUid = 100000;
+        count = 65536;
+      }
+    ];
+    subGidRanges = [
+      {
+        startGid = 100000;
+        count = 65536;
+      }
+    ];
+
+    extraGroups = [
+      "podman"
+    ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    podman
+    podman-compose
+  ];
+}

modules/virtualization/qemu.nix

@@ -0,0 +1,25 @@
+{ ... }:
+
+{
+  virtualisation.spiceUSBRedirection.enable = true;
+
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu = {
+      ovmf.enable = true;
+      swtpm.enable = true;
+    };
+  };
+
+  programs.virt-manager.enable = true;
+
+  users.users.river.extraGroups = [
+    "libvirtd"
+    "kvm"
+  ];
+
+  boot.kernelModules = [
+    "kvm-intel"
+    "kvm-amd"
+  ];
+}