change podman config

hosts/fw.cloonar.com/configuration.nix

@@ -19,6 +19,7 @@
     ./modules/avahi.nix
     ./modules/openconnect.nix
     ./modules/wireguard.nix
+    ./modules/podman.nix
     ./modules/omada.nix
 
     # git

hosts/fw.cloonar.com/modules/drone/runner.nix

@@ -1,14 +1,6 @@
 { config, pkgs, ... }:
 
 {
-  virtualisation = {
-    podman = {
-      enable = true;
-      dockerCompat = true;
-      defaultNetwork.settings.dns_enabled = true;
-    };
-  };
-
   users.users.drone-runner = {
     isSystemUser = true;
     group = "drone-runner";

hosts/fw.cloonar.com/modules/drone/server.nix

@@ -1,14 +1,6 @@
 { config, pkgs, ... }:
 
 {
-  virtualisation = {
-    podman = {
-      enable = true;
-      dockerCompat = true;
-      defaultNetwork.settings.dns_enabled = true;
-    };
-  };
-
   users.users.drone-server = {
     isSystemUser = true;
     group = "drone-server";

hosts/fw.cloonar.com/modules/omada.nix

@@ -1,5 +1,4 @@
 { config, pkgs, ... }:
-
 {
   users.users.omada = {
     isSystemUser = true;
@@ -10,20 +9,6 @@
   users.groups.omada = { };
   users.groups.docker.members = [ "omada" ];
 
-  virtualisation.podman.defaultNetwork.settings = {
-    cniVersion = "0.4.0";
-    name = "newnet";
-    plugins = [
-      {
-        type = "macvlan";
-        master = "server";
-        pam = {
-          type = "dhcp";
-        };
-      }
-    ];
-  };
-
   # TODO: check if we can run docker service as other user than root
   virtualisation = {
     oci-containers.containers = {

hosts/fw.cloonar.com/modules/podman.nix

@@ -0,0 +1,47 @@
+{ pkgs, ... }: {
+  virtualisation = {
+    podman = {
+      enable = true;
+      dockerCompat = true;
+      defaultNetwork.settings = {
+        cniVersion = "0.4.0";
+        name = "newnet";
+        plugins = [
+          {
+            type = "macvlan";
+            master = "server";
+            pam = {
+              type = "dhcp";
+            };
+          }
+        ];
+      };
+    };
+  };
+
+
+  systemd.sockets."io.podman.dhcp" = {
+    description = "DHCP Client for CNI";
+    socketConfig = {
+      ListenStreams = "%t/cni/dhcp.sock";
+      SocketMode = 0600;
+    };
+    wantedBy = "sockets.target";
+  };
+
+  systemd.services."io.podman.dhcp" = {
+    description = "DHCP Client CNI Service";
+    after = [ "io.podman.dhcp.socket" ];
+    requires = [ "io.podman.dhcp.socket" ];
+    wantedBy = [ "multi-user.target" ];
+    also = "io.podman.dhcp.socket";
+    path = [ pkgs.cni-plugins ];
+
+    serviceConfig = {
+      Type = "simple";
+      ExecStart= "${pkgs.cni-plugins}/bin/dhcp daemon";
+      TimeoutStopSec = 30;
+      KillMode = "process";
+    };
+  };
+}