# basic-hybrid.toml — Minimal hybrid-native workload manifest for Volt
#
# Hybrid-native: boots with its own init (systemd) inside a full boot-mode
# systemd-nspawn container. Gets private /proc, /sys, cgroups v2 delegation,
# and PID namespace isolation with PID 1 = systemd.

[workload]
name = "test-hybrid-basic"
type = "hybrid"
image = "ubuntu:24.04"

[resources]
memory = "1G"
memory_soft = "512M"
cpu_weight = 100
pids_max = 4096

[network]
mode = "private"
bridge = "voltbr0"

[kernel]
profile = "server"

[security]
seccomp = "default"
landlock = "server"
private_users = true