81ad0b597c
Complete infrastructure platform CLI: - Container runtime (systemd-nspawn) - VoltVisor VMs (Neutron Stardust / QEMU) - Stellarium CAS (content-addressed storage) - ORAS Registry - GitOps integration - Landlock LSM security - Compose orchestration - Mesh networking Copyright (c) Armored Gates LLC. All rights reserved. Licensed under AGPSL v5.0
124 lines
1.7 KiB
YAML
124 lines
1.7 KiB
YAML
# Volt Image: Development Environment
|
|
# Target density: 10,000+ per host
|
|
# Full development environment with git-attached storage
|
|
|
|
name: volt/dev
|
|
version: "1.0"
|
|
description: "Development environment VM"
|
|
|
|
# Base configuration
|
|
kernel: kernel-dev
|
|
userland: glibc-standard
|
|
|
|
# Resource defaults
|
|
defaults:
|
|
memory: 1G
|
|
cpus: 2
|
|
network: bridge
|
|
|
|
# Included packages
|
|
packages:
|
|
# Core
|
|
- glibc
|
|
- bash
|
|
- coreutils
|
|
- util-linux
|
|
|
|
# Development tools
|
|
- git
|
|
- git-lfs
|
|
- make
|
|
- cmake
|
|
- gcc
|
|
- g++
|
|
- gdb
|
|
- strace
|
|
- ltrace
|
|
|
|
# Languages
|
|
- python3
|
|
- python3-pip
|
|
- nodejs
|
|
- npm
|
|
|
|
# Optional (installable)
|
|
# - go
|
|
# - rust
|
|
# - java
|
|
|
|
# Editors
|
|
- vim
|
|
- nano
|
|
|
|
# Networking
|
|
- curl
|
|
- wget
|
|
- openssh-client
|
|
- openssh-server
|
|
|
|
# Utilities
|
|
- tmux
|
|
- htop
|
|
- tree
|
|
- jq
|
|
|
|
# Init system
|
|
init:
|
|
type: busybox
|
|
services:
|
|
- sshd
|
|
|
|
# Shell
|
|
shell: /bin/bash
|
|
|
|
# Security policy (more permissive for dev)
|
|
security:
|
|
landlock_profile: dev
|
|
seccomp_profile: dev
|
|
capabilities:
|
|
drop:
|
|
- SYS_ADMIN
|
|
add:
|
|
- NET_BIND_SERVICE
|
|
- SYS_PTRACE # For debugging
|
|
|
|
# Filesystem layout
|
|
filesystem:
|
|
readonly:
|
|
- /usr
|
|
- /lib
|
|
writable:
|
|
- /home
|
|
- /tmp
|
|
- /var
|
|
- /workspace
|
|
|
|
# Git-attached workspace
|
|
attached:
|
|
- source: "${PROJECT_GIT}"
|
|
target: /workspace
|
|
type: git
|
|
|
|
# Environment
|
|
environment:
|
|
TERM: xterm-256color
|
|
LANG: en_US.UTF-8
|
|
PATH: /usr/local/bin:/usr/bin:/bin
|
|
EDITOR: vim
|
|
|
|
# SSH configuration
|
|
ssh:
|
|
enabled: true
|
|
port: 22
|
|
allow_password: false
|
|
authorized_keys_path: /home/dev/.ssh/authorized_keys
|
|
|
|
# Metadata
|
|
metadata:
|
|
category: development
|
|
density: 10000
|
|
boot_time: "<400ms"
|
|
onboarding_time: "<5 minutes"
|
|
ode_capable: false
|
|
git_attached: true
|