cyclone: Add support for Incus

hosts/linux/cyclone/configuration.nix

@@ -54,12 +54,27 @@
       package = config.boot.kernelPackages.nvidiaPackages.beta;
     };
 
+    # Docker NVIDIA runtime support
+    nvidia-container-toolkit.enable = true;
+
     # AMD
     cpu.amd.updateMicrocode = true;
   };
 
+  # Container programs
+  boot.kernel.sysctl."net.ipv4.ip_forward" = true;
+  networking.firewall.trustedInterfaces = [ "docker0" "incusbr0" ];
+  users.users.spotlight.extraGroups = [ "adbusers" "docker" "incus-admin" ];
+
+  virtualisation = {
+    # Docker
+    docker.enable = true;
+
+    # Incus (LXD)
+    incus.enable = true;
+
     # As recommended in https://nixos.wiki/wiki/Libvirt#Setup
-  virtualisation.libvirtd = {
+    libvirtd = {
       enable = true;
       qemu = {
         package = pkgs.qemu_kvm;
@@ -76,6 +91,7 @@
         };
       };
     };
+  };
 
   nixpkgs = {
     hostPlatform = lib.mkDefault "x86_64-linux";
@@ -119,14 +135,6 @@
     steam.enable = true;
   };
 
-  # Docker support
-  boot.kernel.sysctl."net.ipv4.ip_forward" = true;
-  networking.firewall.trustedInterfaces = [ "docker0" ];
-  users.users.spotlight.extraGroups = [ "adbusers" "docker" ];
-  virtualisation.docker.enable = true;
-  # Docker NVIDIA runtime support
-  hardware.nvidia-container-toolkit.enable = true;
-
   # Please do not change this without reviewing release notes upstream.
   system.stateVersion = "24.11";
 }

hosts/linux/shared.nix

@@ -15,6 +15,7 @@
   networking = {
     domain = "host.fox-int.cloud";
     networkmanager.enable = true;
+    nftables.enable = true;
 
     nameservers = [
       # Quad9