Signed-off-by: Sascha Grunert <sgrunert@suse.com>

In anticipation of the new containers module.

…ation module

What's happening now is that both cri-o and podman are creating
/etc/containers/policy.json.

By splitting out the creation of configuration files we can make the
podman module leaner & compose better with other container software.

This reverts commit b32a057,
which breaks even the most straightforward uses of srcOnly:

    nix-repl> srcOnly guile
    error: anonymous function at /home/src/nixpkgs/pkgs/build-support/src-only/default.nix:1:1 called with unexpected argument 'drvPath', at /home/src/nixpkgs/lib/customisation.nix:69:16

    nix-repl> srcOnly hello
    error: anonymous function at /home/src/nixpkgs/pkgs/build-support/src-only/default.nix:1:1 called with unexpected argument 'drvPath', at /home/src/nixpkgs/lib/customisation.nix:69:16

Link: NixOS/nixpkgs#80903 (comment)

If for some reason the Wayland session fails to start
it will just start the Xorg session.

When killing processes, android-studio uses `ps` to figure out which
subprocesses to kill. Without `ps` in the closure, this fails and the
process is never killed.

instead of installing only what's needed, remove extraneous executable

nixos/virtualisation.podman: Init module

android-studio: add ps to closure

It currently says that everything will be backward compatible between lego and simp-le certificates, but it’s not.

(cherry picked from commit 21c4a33)

installation-cd-graphical-gnome: don't run xorg default

srcOnly: ignore additional arguments

cri-tools: v1.17.0 -> v1.18.0

spirv-cross: init at 2020-01-16