blakeslee-research/narOS
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge nucleic/zesty-dewy-ferret-tlmk into dev

Browse Source
This commit is contained in:
abkslm
2026-07-21 19:14:46 -07:00
parent fd7ed7dcf7
commit a0f73f317f
3 changed files with 38 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mkimage/profiles/vm.naros-pkgs
+10 -3
View File
@@ -1,9 +1,16 @@
# Base Nucleic layer baked into the naros-vm rootfs so nash is the forced shell and the
# hosted apt repo is trusted from the very first boot. The vsock agent (nucleic-linux-agent)
# and the rest of the tier arrive at firstboot via `apt install naros-tier-vm` (NAROS.md
# §7.4), so they are intentionally NOT baked here — this mirrors the base tier's layer.
# hosted apt repo is trusted from the very first boot — plus the vsock control-plane agent.
#
# The agent is baked (from this same local pool, i.e. the same deb published to the hosted
# repo) because it is the host's ONLY way to reach the guest: it used to be overlaid by the
# Mac-host bootstrap from a separate GHCR artifact, but that second source could drift from
# the deb and silently win. With the overlay collapsed, apt is the single source of truth —
# and a soft-failing firstboot `apt install` is too weak a guarantee for the control plane.
# The REST of the tier (sudo, dbus, the tier meta) still arrives at firstboot via
# `apt install naros-tier-vm` (NAROS.md §7.4), which finds this dependency already satisfied.
nash
naros-init
naros
naros-identity
naros-keyring
nucleic-linux-agent