sergio
3339fb009c
El rename ente→arje dejó referencias stale al binario PID 1 y a los shims. Los nombres reales (verificados con cargo metadata) son todos arje-*: arje-zero, los 14 arje-*-compat, arje-echo, arje-policy-provider, arje-bus, arje-brain. - build-arje-initrd.sh, install-arje-as-init.sh, uninstall-arje.sh, run-arje-qemu.sh: `-p ente-*` → `-p arje-*`, paths /sbin/arje-zero y /usr/sbin/arje-*, RUST_LOG arje_zero=info. - seeds/arje-prod y arje-host: los exec `/usr/sbin/ente-*-compat` apuntaban a binarios que no existirían tras instalar — corregidos a `/usr/sbin/arje-*`. (validate.sh no chequea exec, por eso «validaban» igual; al boot real habrían fallado.) Intactos a propósito: `/ente/` (directorio canónico de la Semilla) y `ente.slice/*` (jerarquía cgroup). Las 3 seeds validan. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
256 lines
14 KiB
JSON
256 lines
14 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0M0",
|
|
"lineage": null,
|
|
"label": "arje.seed.host",
|
|
"provides": ["Spawn", "Journal"],
|
|
"requires": [],
|
|
"permissions": {
|
|
"networking": "full",
|
|
"filesystem": "read-write",
|
|
"ipc": { "allow": ["wit-v1", "dbus-v1"] },
|
|
"processes": true
|
|
},
|
|
"soma": {
|
|
"namespaces": { "mount": false, "pid": false, "net": false, "uts": false, "ipc": false, "user": false, "cgroup": false },
|
|
"rlimits": { "mem_bytes": null, "nproc": null, "nofile": null },
|
|
"cgroup": { "path": "ente.slice/zero", "cpu_weight": null, "io_weight": null },
|
|
"cpu_affinity": null
|
|
},
|
|
"payload": "Virtual",
|
|
"supervision": "OneShot",
|
|
"lifecycle": "daemon",
|
|
"priority": "critical",
|
|
"flow": { "input": [], "output": [] },
|
|
"genesis": [
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0T1",
|
|
"label": "tmpfiles-boot",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-tmpfiles-compat", "argv": ["--boot"], "envp": [] } },
|
|
"supervision": "OneShot", "lifecycle": "oneshot", "priority": "critical",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0F1",
|
|
"label": "mount-fstab",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/boot","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/bin/mount", "argv": ["-a"], "envp": [] } },
|
|
"supervision": "OneShot", "lifecycle": "oneshot", "priority": "critical",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0S1",
|
|
"label": "swap-on",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/boot","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/sbin/swapon", "argv": ["-a"], "envp": [] } },
|
|
"supervision": "OneShot", "lifecycle": "oneshot", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0DB",
|
|
"label": "dbus-system",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/bus","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/bin/dbus-daemon", "argv": ["--system", "--nofork"], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 200, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "critical",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0H1",
|
|
"label": "compat-hostnamed",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-hostnamed-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0T2",
|
|
"label": "compat-timedated",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-timedated-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0J1",
|
|
"label": "compat-journald",
|
|
"provides": ["Journal"], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-journald-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0Y1",
|
|
"label": "compat-logind",
|
|
"provides": ["LegacyLogind"], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-logind-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0R1",
|
|
"label": "compat-resolved",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "outbound", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-resolved-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0P1",
|
|
"label": "compat-polkit",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-polkit-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0PP",
|
|
"label": "policy-provider",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-only", "ipc": { "allow": ["wit-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-policy-provider", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0SY",
|
|
"label": "compat-systemd1",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/arje-systemd1-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0NW",
|
|
"label": "network-dhcpcd",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "full", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/net","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/dhcpcd", "argv": ["-B"], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 500, "max": 60000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0SS",
|
|
"label": "sshd",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "full", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/ssh","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/sshd", "argv": ["-D"], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 200, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZH0M0M0M0M0M0M0M0CM",
|
|
"label": "carmen-dm",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/carmen","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": {
|
|
"exec": "/usr/bin/mirada-compositor",
|
|
"argv": ["--greeter", "--drm"],
|
|
"envp": [ ["PATH", "/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin"],
|
|
["XDG_RUNTIME_DIR", "/run"],
|
|
["MIRADA_GREETER_BIN", "/usr/bin/mirada-greeter"] ]
|
|
} },
|
|
"supervision": { "Restart": { "initial": 2000, "max": 60000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
}
|
|
]
|
|
}
|