Added virtualization container policy config

modules/application-groups/android.nix

@@ -1,5 +1,4 @@
 { config, pkgs, ... }:
 {
   programs.adb.enable = true;
-  virtualisation.waydroid.enable = true;
 }

modules/application-groups/system-utilities.nix

@@ -40,7 +40,7 @@
     networkmanager
     networkmanagerapplet
     nmap
-    # nvtopPackages.full  # <- Build failure: https://github.com/nixos/nixpkgs/issues/456928
+    nvtopPackages.full
     openrgb-with-all-plugins
     pciutils
     rofi-bluetooth

modules/application-groups/virtualization.nix

@@ -1,8 +1,14 @@
 { config, pkgs, ... }:
 {
+
+  virtualisation.containers.policy = {
+    default = [ { type = "insecureAcceptAnything"; } ];
+
+  };
   virtualisation.podman = {
     enable = true;
     dockerCompat = true;
+    dockerSocket.enable = true;
   };
 
   environment.systemPackages = with pkgs; [

modules/system/hyprland.nix

@@ -25,6 +25,7 @@
 
   environment.systemPackages = with pkgs; [
     arandr
+    bemenu
     dunst
     grim
     hyprpaper
@@ -39,7 +40,7 @@
     swayimg
     wl-clipboard
     wlogout
-    bemenu
+
   ];
 
 }

modules/system/security.nix

@@ -4,6 +4,7 @@
     enable = true;
     extraRules = [
       {
+        groups = [ "wheel" ];
         commands = [
           {
             command = "${pkgs.systemd}/bin/reboot";
@@ -14,7 +15,16 @@
             options = [ "NOPASSWD" ];
           }
         ];
-        groups = [ "wheel" ];
+      }
+      {
+        users = [ "caperren" ];
+        commands = [
+          {
+            command = "${pkgs.nvtopPackages.full}/bin/nvtop";
+            options = [ "NOPASSWD" "SETENV" ];
+          }
+        ];
+
       }
     ];
   };

users/caperren/caperren.nix

@@ -13,12 +13,13 @@ in
     isNormalUser = true;
     description = "Corwin Perren";
     extraGroups = [
-      "networkmanager"
-      "wheel"
-      "input"
-      "dialout"
-      "plugdev"
       "adbusers"
+      "dialout"
+      "input"
+      "networkmanager"
+      "plugdev"
+      "podman"
+      "wheel"
     ];
   };
 
@@ -43,7 +44,11 @@ in
     programs.bemenu.enable = true;
 
     programs.kitty = {
+      enable = true;
       font.name = "JetBrains Mono";
+      settings = {
+        allow_remote_control = true;
+      };
     };
 
     # Assets/scripts
@@ -51,6 +56,7 @@ in
     home.file.".config/hypr/scripts".source = ./dotfiles/.config/hypr/scripts;
 
     # Application config files
+    home.file.".config/containers/policy.json".source = ./dotfiles/.config/containers/policy.json;
     home.file.".config/glances/glances.conf".source = ./dotfiles/.config/glances/glances.conf;
     home.file.".config/hypr/hypridle.conf".source = ./dotfiles/hypridle/hypridle.conf;
     home.file.".config/hypr/hyprpaper.conf".source = ./dotfiles/hyprpaper/hyprpaper.conf;
@@ -74,16 +80,19 @@ in
     home.file.".config/wlogout/layout".source = ./dotfiles/wlogout/layout;
 
     # Desktop entry files so bemenu can find them
-    home.file.".local/share/glava.desktop".source = ./dotfiles/.local/share/glava.desktop;
-    home.file.".local/share/jetbrains-toolbox.desktop".source =
-      ./dotfiles/.local/share/jetbrains-toolbox.desktop;
-    home.file.".local/share/spotify-player.desktop".source =
-      ./dotfiles/.local/share/spotify-player.desktop;
+    home.file.".local/share/applications/alltop.desktop".source =
+      ./dotfiles/.local/share/applications/alltop.desktop;
+    home.file.".local/share/applications/glava.desktop".source =
+      ./dotfiles/.local/share/applications/glava.desktop;
+    home.file.".local/share/applications/phonerdp.desktop".source =
+      ./dotfiles/.local/share/applications/phonerdp.desktop;
+    home.file.".local/share/applications/spotify-player.desktop".source =
+      ./dotfiles/.local/share/applications/spotify-player.desktop;
 
     # Custom bash aliases
     home.shellAliases = {
       # Phone remote desktop over usb (adb), with some default flags I want
-      phonerdp = "scrcpy --no-audio --orientation=0 --turn-screen-off --fullscreen";
+      phonerdp = "scrcpy --no-audio --orientation=0 --turn-screen-off --stay-awake --power-off-on-close";
 
       # Streamdeck isn't easy to manually edit, so make a save command to copy any updates to the repo
       savestreamdeck = "cp ~/.streamdeck_ui.json ~/.nixos-configs/users/caperren/dotfiles/streamdeck/.streamdeck_ui.json";

users/caperren/dotfiles/.config/containers/policy.json

@@ -0,0 +1,7 @@
+{
+    "default": [
+        {
+            "type": "insecureAcceptAnything"
+        }
+    ]
+}

users/caperren/dotfiles/.local/share/applications/alltop.desktop

@@ -0,0 +1,7 @@
+[Desktop Entry]
+Type=Application
+Name=All Top
+Exec=bash -c "kitty --single-instance --detach bash -c 'kitten @ launch --type=window --title btop btop ; kitten @ launch --type=window --title nvtop nvtop'"
+Icon=alltop
+Terminal=false
+Categories=Utilities;

users/caperren/dotfiles/.local/share/applications/phonerdp.desktop

@@ -0,0 +1,7 @@
+[Desktop Entry]
+Type=Application
+Name=Phone RDP
+Exec=bash -c "scrcpy --no-audio --orientation=0 --turn-screen-off --stay-awake --power-off-on-close"
+Icon=phonerdp
+Terminal=false
+Categories=Utilities;

users/caperren/dotfiles/.local/share/jetbrains-toolbox.desktop

@@ -1,7 +0,0 @@
-[Desktop Entry]
-Type=Application
-Name=JetBrains Toolbox
-Exec=jetbrains-toolbox
-Icon=jetbrains-toolbox
-Terminal=false
-Categories=Development;IDE;

users/caperren/dotfiles/.local/share/phonerdp.desktop

@@ -1,7 +0,0 @@
-[Desktop Entry]
-Type=Application
-Name=Phone RDP
-Exec=bash -c "phonerdp"
-Icon=phonerdp
-Terminal=false
-Categories=Utilities;

users/caperren/dotfiles/hyprland/hyprland-common.conf

@@ -4,7 +4,7 @@ monitor=,preferred,auto,1
 # Set programs that you use
 $terminal = kitty
 $fileManager = thunar
-$menu = bemenu-run --line-height 22 --hf "##10AC25" --ff "##10AC25" --tf "##10AC25"
+$menu = j4-dmenu-desktop --dmenu='bemenu --ignorecase --line-height 22 --hf "##10AC25" --ff "##10AC25" --tf "##10AC25"' --term='kitty'
 
 # Some default env vars
 env = XCURSOR_SIZE,24

users/caperren/dotfiles/streamdeck/.streamdeck_ui.json

@@ -176,14 +176,14 @@
                         "states": {
                             "0": {
                                 "text": "",
-                                "icon": "/home/caperren/.config/streamdeck-ui/icons/glances-logo.png",
+                                "icon": "/home/caperren/.config/streamdeck-ui/icons/btop-logo.png",
                                 "keys": "",
                                 "write": "",
-                                "command": "kitty -e glances",
+                                "command": "bash -c \"kitty --single-instance --detach bash -c 'kitten @ launch --type=window --title btop btop ; kitten @ launch --type=window --title nvtop nvtop'\"",
                                 "brightness_change": 0,
                                 "switch_page": 0,
                                 "switch_state": 0,
-                                "text_vertical_align": "middle",
+                                "text_vertical_align": "top",
                                 "text_horizontal_align": "",
                                 "font": "",
                                 "font_color": "",
@@ -582,7 +582,7 @@
                                 "write": "",
                                 "command": "kitty -e bash -i -c nrs",
                                 "brightness_change": 0,
-                                "switch_page": 0,
+                                "switch_page": 1,
                                 "switch_state": 0,
                                 "text_vertical_align": "middle",
                                 "text_horizontal_align": "",
@@ -603,7 +603,7 @@
                                 "write": "",
                                 "command": "kitty -e bash -i -c nus",
                                 "brightness_change": 0,
-                                "switch_page": 0,
+                                "switch_page": 1,
                                 "switch_state": 0,
                                 "text_vertical_align": "middle",
                                 "text_horizontal_align": "",