podman.nix

{ pkgs, ... }: {
  users.primary = {
    packages = with pkgs; [
      podman
      slirp4netns
      (runCommand "docker" {} ''
        mkdir -p $out/bin
        ln -s ${podman}/bin/podman $out/bin/docker
      '')
    ];

    # TODO: This is going to fail miserably on multiple users
    subUidRanges = [
      { startUid = 100000; count = 65536; }
    ];
    subGidRanges = [
      { startGid = 100000; count = 65536; }
    ];

    files.".config/containers/libpod.conf".text = ''
      runtime_path=["${pkgs.runc}/bin/runc"]
      conmon_path=["${pkgs.conmon}/bin/conmon"]
      cni_config_dir="${pkgs.podman.out}/etc/cni/net.d"
    '';

    # TODO: generalise over multiple users
    files.".config/containers/storage.conf".text = ''
      [storage]
        driver = "overlay"
        runroot = "/run/user/1000"
        graphroot = "/home/tilpner/.local/share/containers/storage"
        [storage.options]
          mount_program = "${pkgs.fuse-overlayfs}/bin/fuse-overlayfs"
    '';

    /*
    files.".config/containers/storage.conf".text = ''
      [storage]
        driver = "vfs"
        runroot = "/run/user/1000"
        graphroot = "/home/tilpner/.local/share/containers/storage"
        [storage.options]
          mount_program = ""
    '';
    */
  };

  environment.etc = {
    "containers/registries.conf".text = ''
      [registries.search]
      registries=["docker.io"]
    '';

    "containers/policy.json".text = builtins.toJSON {
      default = [
        # oh no
        { type = "insecureAcceptAnything"; }
      ];
    };
  };
}