zswap in uvms: optional/configurable

profiles/uvms-guest.nix

@@ -7,12 +7,32 @@
 }:
 let
   mkIfGuest = import ../lib/mkIfMicrovmGuest.nix { inherit options config lib; };
+  inherit (lib) types;
 in
 {
   imports = [
     ./vsock-connect-guest.nix
     ./uvms-users.nix
   ];
+  options = {
+    uvms.zswap.enable = lib.mkEnableOption "Pass zswap.enabled=1 to kernelParams (and disable zramSwap)";
+    uvms.zswap.settings = lib.mkOption {
+      description = "Zswap kernel module configuration";
+      type = types.submodule {
+        freeformType = types.attrsOf types.str;
+        options.max_pool_percent = lib.mkOption {
+          type = types.int;
+          default = 25;
+          description = "...";
+        };
+        options.compressor = lib.mkOption {
+          type = types.str;
+          default = "zstd";
+          description = "...";
+        };
+      };
+    };
+  };
   config = lib.mkMerge [
     (mkIfGuest {
       microvm = {
@@ -31,10 +51,21 @@ in
           size = 768;
         }
       ];
+      systemd.services."microvm@".serviceConfig.ExecStartPost = [
+        (pkgs.writeShellScript "microvm-fix-umask" ''
+          if [[ -e CONNECT.sock ]] ; then
+            chmod g+rw CONNECT.sock
+          fi
+        '')
+      ];
     })
-    {
+    (lib.mkIf config.uvms.zswap.enable {
-      boot.kernelParams = [ "zswap.enabled=1" ];
       zramSwap.enable = false;
-    }
+      boot.kernelParams =
+        builtins.attrValues ((lib.mapAttrs (
+          name: value: "zswap.${name}=${toString value}"
+        )) config.uvms.zswap.settings)
+        ++ [ "zswap.enabled=1" ];
+    })
   ];
 }