add admin role

configuration.nix

@@ -13,6 +13,7 @@
       # Include the results of the hardware scan.
       ./hardware-configuration.nix
 
+      ./roles/admin.nix
       ./roles/dev.nix
       ./roles/base.nix
       ./roles/desktop.nix

roles/admin.nix

@@ -0,0 +1,46 @@
+{ pkgs, options, ...}:
+
+{
+  environment.systemPackages = with pkgs; [
+    kubectl
+
+    # podman
+    conmon
+    fuse-overlayfs
+    podman
+    podman-compose
+    runc
+    slirp4netns
+  ];
+
+  users.users.stefan.subUidRanges = [{ startUid = 100000; count = 65536; }];
+  users.users.stefan.subGidRanges = [{ startGid = 100000; count = 65536; }];
+
+  environment.etc."containers/policy.json" = {
+    mode="0644";
+    text=''
+      {
+        "default": [
+          {
+            "type": "insecureAcceptAnything"
+          }
+        ],
+        "transports":
+          {
+            "docker-daemon":
+              {
+                "": [{"type":"insecureAcceptAnything"}]
+              }
+          }
+      }
+    '';
+  };
+
+  environment.etc."containers/registries.conf" = {
+    mode="0644";
+    text=''
+      [registries.search]
+      registries = ['docker.io', 'quay.io']
+    '';
+  };
+}