2014-07-27 22:00:59 +00:00
|
|
|
# Systemd services for docker.
|
|
|
|
|
|
|
|
{ config, lib, pkgs, ... }:
|
|
|
|
|
|
|
|
with lib;
|
|
|
|
|
|
|
|
let
|
|
|
|
|
|
|
|
cfg = config.virtualisation.docker;
|
2014-12-01 16:20:18 +00:00
|
|
|
pro = config.networking.proxy.default;
|
|
|
|
proxy_env = optionalAttrs (pro != null) { Environment = "\"http_proxy=${pro}\""; };
|
2014-07-27 22:00:59 +00:00
|
|
|
|
|
|
|
in
|
|
|
|
|
|
|
|
{
|
|
|
|
###### interface
|
|
|
|
|
|
|
|
options.virtualisation.docker = {
|
|
|
|
enable =
|
|
|
|
mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description =
|
|
|
|
''
|
|
|
|
This option enables docker, a daemon that manages
|
|
|
|
linux containers. Users in the "docker" group can interact with
|
|
|
|
the daemon (e.g. to start or stop containers) using the
|
|
|
|
<command>docker</command> command line tool.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
socketActivation =
|
|
|
|
mkOption {
|
|
|
|
type = types.bool;
|
2015-11-20 22:01:33 +00:00
|
|
|
default = true;
|
2014-07-27 22:00:59 +00:00
|
|
|
description =
|
|
|
|
''
|
|
|
|
This option enables docker with socket activation. I.e. docker will
|
|
|
|
start when first called by client.
|
|
|
|
'';
|
|
|
|
};
|
2015-09-03 23:18:19 +00:00
|
|
|
storageDriver =
|
|
|
|
mkOption {
|
|
|
|
type = types.enum ["aufs" "btrfs" "devicemapper" "overlay" "zfs"];
|
nixos/docker: default storageDriver to "devicemapper"
Commit 9bfe92ecee ("docker: Minor improvements, fix failing test") added
the services.docker.storageDriver option, made it mandatory but didn't
give it a default value. This results in an ugly traceback when users
enable docker, if they don't pay enough attention to also set the
storageDriver option. (An attempt was made to add an assertion, but it
didn't work, possibly because of how "mkMerge" works.)
The arguments against a default value were that the optimal value
depends on the filesystem on the host. This is, AFAICT, only in part
true. (It seems some backends are filesystem agnostic.) Also, docker
itself uses a default storage driver, "devicemapper", when no
--storage-driver=x options are given. Hence, we use the same value as
default.
Add a FIXME comment that 'devicemapper' breaks NixOS VM tests (for yet
unknown reasons), so we still run those with the 'overlay' driver.
Closes #10100 and #10217.
2015-10-04 11:39:52 +00:00
|
|
|
default = "devicemapper";
|
2015-09-03 23:18:19 +00:00
|
|
|
description =
|
|
|
|
''
|
|
|
|
This option determines which Docker storage driver to use.
|
|
|
|
'';
|
|
|
|
};
|
2014-07-27 22:00:59 +00:00
|
|
|
extraOptions =
|
|
|
|
mkOption {
|
2015-04-25 13:25:15 +00:00
|
|
|
type = types.separatedString " ";
|
2014-07-27 22:00:59 +00:00
|
|
|
default = "";
|
|
|
|
description =
|
|
|
|
''
|
|
|
|
The extra command-line options to pass to
|
|
|
|
<command>docker</command> daemon.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2015-07-20 13:28:49 +00:00
|
|
|
postStart =
|
|
|
|
mkOption {
|
2015-08-17 17:52:45 +00:00
|
|
|
type = types.lines;
|
2015-07-20 13:28:49 +00:00
|
|
|
default = ''
|
|
|
|
while ! [ -e /var/run/docker.sock ]; do
|
|
|
|
sleep 0.1
|
|
|
|
done
|
|
|
|
'';
|
|
|
|
description = ''
|
|
|
|
The postStart phase of the systemd service. You may need to
|
|
|
|
override this if you are passing in flags to docker which
|
2015-12-24 11:07:45 +00:00
|
|
|
don't cause the socket file to be created. This option is ignored
|
|
|
|
if socket activation is used.
|
2015-07-20 13:28:49 +00:00
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2014-07-27 22:00:59 +00:00
|
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
###### implementation
|
|
|
|
|
|
|
|
config = mkIf cfg.enable (mkMerge [
|
|
|
|
{ environment.systemPackages = [ pkgs.docker ];
|
2014-09-03 19:22:20 +00:00
|
|
|
users.extraGroups.docker.gid = config.ids.gids.docker;
|
2014-07-27 22:00:59 +00:00
|
|
|
systemd.services.docker = {
|
|
|
|
description = "Docker Application Container Engine";
|
2015-12-24 11:07:45 +00:00
|
|
|
wantedBy = optional (!cfg.socketActivation) "multi-user.target";
|
|
|
|
after = [ "network.target" ] ++ (optional cfg.socketActivation "docker.socket") ;
|
|
|
|
requires = optional cfg.socketActivation "docker.socket";
|
2014-07-27 22:00:59 +00:00
|
|
|
serviceConfig = {
|
2015-12-24 11:07:45 +00:00
|
|
|
ExecStart = "${pkgs.docker}/bin/docker daemon --group=docker --storage-driver=${cfg.storageDriver} ${optionalString cfg.socketActivation "--host=fd://"} ${cfg.extraOptions}";
|
2014-07-27 22:00:59 +00:00
|
|
|
# I'm not sure if that limits aren't too high, but it's what
|
|
|
|
# goes in config bundled with docker itself
|
|
|
|
LimitNOFILE = 1048576;
|
|
|
|
LimitNPROC = 1048576;
|
2014-11-07 11:46:36 +00:00
|
|
|
} // proxy_env;
|
2014-07-27 22:00:59 +00:00
|
|
|
|
2016-08-14 10:00:52 +00:00
|
|
|
path = [ pkgs.kmod ] ++ (optional (cfg.storageDriver == "zfs") pkgs.zfs);
|
2015-12-24 11:07:45 +00:00
|
|
|
|
|
|
|
postStart = if cfg.socketActivation then "" else cfg.postStart;
|
|
|
|
|
|
|
|
# Presumably some containers are running we don't want to interrupt
|
|
|
|
restartIfChanged = false;
|
|
|
|
};
|
|
|
|
}
|
|
|
|
(mkIf cfg.socketActivation {
|
2014-07-27 22:00:59 +00:00
|
|
|
systemd.sockets.docker = {
|
|
|
|
description = "Docker Socket for the API";
|
|
|
|
wantedBy = [ "sockets.target" ];
|
|
|
|
socketConfig = {
|
|
|
|
ListenStream = "/var/run/docker.sock";
|
|
|
|
SocketMode = "0660";
|
|
|
|
SocketUser = "root";
|
|
|
|
SocketGroup = "docker";
|
|
|
|
};
|
|
|
|
};
|
|
|
|
})
|
|
|
|
]);
|
|
|
|
|
|
|
|
}
|