From 2e78934b3a979074001d28f04dae93c249f2bb20 Mon Sep 17 00:00:00 2001 From: Daniel Lindenfelser Date: Sat, 18 Jul 2026 21:37:09 +0200 Subject: [PATCH] Use Podman (not Docker) as the gitea-actions-runner backend The default docker package is marked insecure; the runner module already supports Podman natively (DOCKER_HOST -> /run/podman/podman.sock, group podman), and the socket + group are already present on the host. Co-Authored-By: Claude Opus 4.8 --- modules/fileserver.nix | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/modules/fileserver.nix b/modules/fileserver.nix index 50d0a48..67c1263 100644 --- a/modules/fileserver.nix +++ b/modules/fileserver.nix @@ -201,10 +201,8 @@ ######################################## # Gitea Actions Runner ######################################## - # Docker-Daemon für die Job-Container des Runners (läuft parallel zu Podman, - # das weiterhin die App-Container betreibt). - virtualisation.docker.enable = true; - + # Job-Container laufen über das bereits vorhandene Podman (das Modul erkennt + # das automatisch: DOCKER_HOST -> /run/podman/podman.sock, Gruppe "podman"). services.gitea-actions-runner = { package = pkgs.gitea-actions-runner; instances.fileserver = {