dev container for systemd-nspawn

configuration.nix

{ pkgs, modulesPath, ... }:

{
  imports = [
    (modulesPath + "/profiles/minimal.nix")
    ./nspawn-image.nix
  ];

  boot.isContainer = true;
  networking.hostName = "nixos";

  # activate Nix Flakes
  nix.extraOptions = ''
    experimental-features = nix-command flakes
  '';

  virtualisation = {
    containers = {
      enable = true;
      containersConf.settings = {
        containers.keyring = false;
      };
    };

    oci-containers.backend = "podman";
    podman = {
      enable = true;
      dockerCompat = true;
      defaultNetwork.settings.dns_enabled = true;
    };
  };

  environment.systemPackages = with pkgs; [
    atuin
    bat
    bottom
    broot
    btrfs-progs
    cargo
    conmon
    crun
    delta
    direnv
    doas
    doas-sudo-shim
    eza
    fish
    fre
    fuse-overlayfs
    fzf
    git
    git-branchless
    git-town
    gitui
    go-task
    jless
    jq
    just
    k9s
    kubectl
    ldns
    neovim
    podman
    podman-compose
    procs
    ripgrep
    skopeo
    slirp4netns
    starship
    tmux
    vim
    wget
    zstd
  ];

  system.stateVersion = "23.11";

  # When bootstrapped, use `machinectl shell nixos` and run `passwd` there.
  users.users.root.initialHashedPassword = "";
}