0ebe75b2ca
Complete infrastructure platform CLI: - Container runtime (systemd-nspawn) - VoltVisor VMs (Neutron Stardust / QEMU) - Stellarium CAS (content-addressed storage) - ORAS Registry - GitOps integration - Landlock LSM security - Compose orchestration - Mesh networking Copyright (c) Armored Gates LLC. All rights reserved. Licensed under AGPSL v5.0
67 lines
1.1 KiB
YAML
67 lines
1.1 KiB
YAML
# Volt Image: Edge
|
|
# Target density: 100,000+ per host
|
|
# Optimized for IoT gateways, edge compute
|
|
|
|
name: volt/edge
|
|
version: "1.0"
|
|
description: "Minimal edge computing VM"
|
|
|
|
# Base configuration
|
|
kernel: kernel-minimal
|
|
userland: busybox-tiny
|
|
|
|
# Resource defaults (extremely minimal)
|
|
defaults:
|
|
memory: 32M
|
|
cpus: 1
|
|
network: default
|
|
|
|
# Included packages (absolute minimum)
|
|
packages:
|
|
- busybox-static
|
|
- ca-certificates
|
|
|
|
# Init system
|
|
init:
|
|
type: direct
|
|
command: /app/edge-agent
|
|
|
|
# No shell by default (security)
|
|
shell: none
|
|
|
|
# Security policy (maximum lockdown)
|
|
security:
|
|
landlock_profile: edge
|
|
seccomp_profile: edge-minimal
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
add:
|
|
- NET_BIND_SERVICE
|
|
|
|
# No privilege escalation
|
|
no_new_privileges: true
|
|
|
|
# Read-only root
|
|
read_only_root: true
|
|
|
|
# Filesystem layout
|
|
filesystem:
|
|
readonly:
|
|
- /
|
|
writable:
|
|
- /tmp
|
|
- /var/run
|
|
|
|
# Network
|
|
network:
|
|
type: host # Direct host networking for edge
|
|
|
|
# Metadata
|
|
metadata:
|
|
category: edge
|
|
density: 100000
|
|
boot_time: "<100ms"
|
|
total_size: "20MB"
|
|
ode_capable: false
|