# Base Nucleic layer baked into the naros-vm rootfs so nash is the forced shell and the
# hosted apt repo is trusted from the very first boot. The vsock agent (nucleic-linux-agent)
# and the rest of the tier arrive at firstboot via `apt install naros-tier-vm` (NAROS.md
# §7.4), so they are intentionally NOT baked here — this mirrors the base tier's layer.
nash
naros-init
naros
naros-identity
naros-keyring