# Volt Image: Development Environment
# Target density: 10,000+ per host
# Full development environment with git-attached storage

name: volt/dev
version: "1.0"
description: "Development environment VM"

# Base configuration
kernel: kernel-dev
userland: glibc-standard

# Resource defaults
defaults:
  memory: 1G
  cpus: 2
  network: bridge

# Included packages
packages:
  # Core
  - glibc
  - bash
  - coreutils
  - util-linux
  
  # Development tools
  - git
  - git-lfs
  - make
  - cmake
  - gcc
  - g++
  - gdb
  - strace
  - ltrace
  
  # Languages
  - python3
  - python3-pip
  - nodejs
  - npm
  
  # Optional (installable)
  # - go
  # - rust
  # - java
  
  # Editors
  - vim
  - nano
  
  # Networking
  - curl
  - wget
  - openssh-client
  - openssh-server
  
  # Utilities
  - tmux
  - htop
  - tree
  - jq

# Init system
init:
  type: busybox
  services:
    - sshd

# Shell
shell: /bin/bash

# Security policy (more permissive for dev)
security:
  landlock_profile: dev
  seccomp_profile: dev
  capabilities:
    drop:
      - SYS_ADMIN
    add:
      - NET_BIND_SERVICE
      - SYS_PTRACE  # For debugging

# Filesystem layout
filesystem:
  readonly:
    - /usr
    - /lib
  writable:
    - /home
    - /tmp
    - /var
    - /workspace
  
  # Git-attached workspace
  attached:
    - source: "${PROJECT_GIT}"
      target: /workspace
      type: git

# Environment
environment:
  TERM: xterm-256color
  LANG: en_US.UTF-8
  PATH: /usr/local/bin:/usr/bin:/bin
  EDITOR: vim

# SSH configuration
ssh:
  enabled: true
  port: 22
  allow_password: false
  authorized_keys_path: /home/dev/.ssh/authorized_keys

# Metadata
metadata:
  category: development
  density: 10000
  boot_time: "<400ms"
  onboarding_time: "<5 minutes"
  ode_capable: false
  git_attached: true