From 3876bb177a886803211fd3c8e4d779fd40d1be6b Mon Sep 17 00:00:00 2001
From: Philip Peterson <peterson@sent.com>
Date: Mon, 25 May 2026 17:27:24 -0800
Subject: [PATCH] use podman

---
 nixos/linux.nix | 14 +++-----------
 1 file changed, 3 insertions(+), 11 deletions(-)

diff --git a/nixos/linux.nix b/nixos/linux.nix
index 06f577b..f316cb5 100644
--- a/nixos/linux.nix
+++ b/nixos/linux.nix
@@ -124,7 +124,7 @@ in {
   users.users.gitea-runner = {
     isSystemUser = true;
     group = "gitea-runner";
-    extraGroups = [ "docker" ];
+    extraGroups = [ "podman" ];
     home = "/var/lib/gitea-runner";
     createHome = true;
   };
@@ -132,7 +132,7 @@ in {
 
   systemd.services.gitea-runner-ubuntu = {
     environment.PATH = lib.mkForce (
-      "${pkgs.docker}/bin:${pkgs.git}/bin:${pkgs.nodejs}/bin:/run/current-system/sw/bin:/run/wrappers/bin"
+      "${pkgs.podman}/bin:${pkgs.git}/bin:${pkgs.nodejs}/bin:/run/current-system/sw/bin:/run/wrappers/bin"
     );
     serviceConfig = {
       DynamicUser = lib.mkForce false;
@@ -167,21 +167,13 @@ in {
 
   system.stateVersion = "22.05";
 
-  virtualisation.docker = {
-    enable = true;
-    enableOnBoot = true;
-    autoPrune.enable = true;
-  };
-
-  # Arion works with Docker, but for NixOS-based containers, you need Podman
-  # since NixOS 21.05.
   virtualisation.podman = {
     enable = true;
     defaultNetwork.settings.dns_enabled = true;
   };
 
   virtualisation.oci-containers = {
-    backend = "docker";
+    backend = "podman";
 
     containers = {
       # Example: