# Base Nucleic layer baked into the naros-vm rootfs so nash is the forced shell and the
# hosted apt repo is trusted from the very first boot — plus the vsock control-plane agent.
#
# The agent is baked (from this same local pool, i.e. the same deb published to the hosted
# repo) because it is the host's ONLY way to reach the guest: it used to be overlaid by the
# Mac-host bootstrap from a separate GHCR artifact, but that second source could drift from
# the deb and silently win. With the overlay collapsed, apt is the single source of truth —
# and a soft-failing firstboot `apt install` is too weak a guarantee for the control plane.
# The REST of the tier (sudo, dbus, the tier meta) still arrives at firstboot via
# `apt install naros-tier-vm` (NAROS.md §7.4), which finds this dependency already satisfied.
nash
naros-init
naros
naros-identity
naros-keyring
nucleic-linux-agent