enable docker

flake.nix

@@ -126,6 +126,7 @@
 				./modules/packages/hpc.nix
 				( import ./modules/users/root.nix {} ) 
 				( import ./modules/users/chn.nix {} ) 
+				./modules/virtualisation/docker.nix
 				./modules/virtualisation/kvm_guest.nix
 				./modules/virtualisation/kvm_host.nix
 				./modules/virtualisation/waydroid.nix

modules/users/chn.nix

@@ -9,6 +9,7 @@
 				[ "networkmanager" "wheel" "wireshark" "libvirtd" "video" "audio" ]
 				(builtins.attrNames inputs.config.users.groups);
 			shell = inputs.pkgs.zsh;
+			autoSubUidGidRange = true;
 		} // (if bootstrape then { password = "0"; }
 			else { passwordFile = inputs.config.sops.secrets."password/chn".path; });
 		# environment.persistence."/impermanence".users.chn =

modules/virtualisation/docker.nix

@@ -0,0 +1,8 @@
+{
+	config.virtualisation.docker =
+	{
+		enable = true;
+		rootless = { enable = true; setSocketVariable = true; };
+		enableNvidia = true;
+	};
+}