feat(arje): cadena DM activa — kmod virtio_gpu + carmen-dm en arje-prod
1{
2 "schema_version": 1,
3 "id": "01J8YVKZQ0M0M0M0M0M0M0M0M0",
4 "lineage": null,
5 "label": "arje.seed.prod",
6 "provides": ["Spawn", "Journal"],
7 "requires": [],
8 "permissions": {
9 "networking": "loopback",
10 "filesystem": "read-write",
11 "ipc": { "allow": ["wit-v1"] },
12 "processes": true
13 },
14 "soma": {
15 "namespaces": {
16 "mount": false, "pid": false, "net": false,
17 "uts": false, "ipc": false, "user": false, "cgroup": false
18 },
19 "rlimits": { "mem_bytes": null, "nproc": null, "nofile": null },
20 "cgroup": { "path": "ente.slice/zero", "cpu_weight": null, "io_weight": null },
21 "cpu_affinity": null
22 },
23 "payload": "Virtual",
24 "supervision": "OneShot",
25 "lifecycle": "daemon",
26 "priority": "critical",
27 "flow": { "input": [], "output": [] },
28 "genesis": [
29 {
30 "schema_version": 1,
31 "id": "01J8YVKZQ0M0M0M0M0M0M0M0M1",
32 "lineage": null,
33 "label": "tmpfiles-boot",
34 "provides": [],
35 "requires": [],
36 "permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": false },
37 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
38 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
39 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
40 "cpu_affinity": null },
41 "payload": { "Native": { "exec": "/usr/sbin/arje-tmpfiles-compat", "argv": ["--boot"], "envp": [] } },
42 "supervision": "OneShot",
43 "lifecycle": "oneshot",
44 "priority": "critical",
45 "flow": { "input": [], "output": [] }, "genesis": []
46 },
47 {
48 "schema_version": 1,
49 "id": "01J8YVKZQ0M0M0M0M0M0M0M0M2",
50 "lineage": null,
51 "label": "binfmt-boot",
52 "provides": [],
53 "requires": [],
54 "permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": false },
55 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
56 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
57 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
58 "cpu_affinity": null },
59 "payload": { "Native": { "exec": "/usr/sbin/arje-binfmt-compat", "argv": [], "envp": [] } },
60 "supervision": "OneShot",
61 "lifecycle": "oneshot",
62 "priority": "high",
63 "flow": { "input": [], "output": [] }, "genesis": []
64 },
65 {
66 "schema_version": 1,
67 "id": "01J8YVKZQ0M0M0M0M0M0M0M0H0",
68 "lineage": null,
69 "label": "compat-hostnamed",
70 "provides": [], "requires": [],
71 "permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
72 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
73 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
74 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
75 "cpu_affinity": null },
76 "payload": { "Native": { "exec": "/usr/sbin/arje-hostnamed-compat", "argv": [], "envp": [] } },
77 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
78 "lifecycle": "daemon", "priority": "normal",
79 "flow": { "input": [], "output": [] }, "genesis": []
80 },
81 {
82 "schema_version": 1,
83 "id": "01J8YVKZQ0M0M0M0M0M0M0M0T0",
84 "lineage": null,
85 "label": "compat-timedated",
86 "provides": [], "requires": [],
87 "permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
88 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
89 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
90 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
91 "cpu_affinity": null },
92 "payload": { "Native": { "exec": "/usr/sbin/arje-timedated-compat", "argv": [], "envp": [] } },
93 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
94 "lifecycle": "daemon", "priority": "normal",
95 "flow": { "input": [], "output": [] }, "genesis": []
96 },
97 {
98 "schema_version": 1,
99 "id": "01J8YVKZQ0M0M0M0M0M0M0M0X0",
100 "lineage": null,
101 "label": "compat-localed",
102 "provides": [], "requires": [],
103 "permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
104 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
105 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
106 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
107 "cpu_affinity": null },
108 "payload": { "Native": { "exec": "/usr/sbin/arje-localed-compat", "argv": [], "envp": [] } },
109 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
110 "lifecycle": "daemon", "priority": "normal",
111 "flow": { "input": [], "output": [] }, "genesis": []
112 },
113 {
114 "schema_version": 1,
115 "id": "01J8YVKZQ0M0M0M0M0M0M0M0J0",
116 "lineage": null,
117 "label": "compat-journald",
118 "provides": ["Journal"], "requires": [],
119 "permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
120 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
121 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
122 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
123 "cpu_affinity": null },
124 "payload": { "Native": { "exec": "/usr/sbin/arje-journald-compat", "argv": [], "envp": [] } },
125 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
126 "lifecycle": "daemon", "priority": "high",
127 "flow": { "input": [], "output": [] }, "genesis": []
128 },
129 {
130 "schema_version": 1,
131 "id": "01J8YVKZQ0M0M0M0M0M0M0M0R0",
132 "lineage": null,
133 "label": "compat-resolved",
134 "provides": [], "requires": [],
135 "permissions": { "networking": "outbound", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
136 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
137 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
138 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
139 "cpu_affinity": null },
140 "payload": { "Native": { "exec": "/usr/sbin/arje-resolved-compat", "argv": [], "envp": [] } },
141 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
142 "lifecycle": "daemon", "priority": "normal",
143 "flow": { "input": [], "output": [] }, "genesis": []
144 },
145 {
146 "schema_version": 1,
147 "id": "01J8YVKZQ0M0M0M0M0M0M0M0P0",
148 "lineage": null,
149 "label": "compat-polkit",
150 "provides": [], "requires": [],
151 "permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
152 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
153 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
154 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
155 "cpu_affinity": null },
156 "payload": { "Native": { "exec": "/usr/sbin/arje-polkit-compat", "argv": [], "envp": [] } },
157 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
158 "lifecycle": "daemon", "priority": "normal",
159 "flow": { "input": [], "output": [] }, "genesis": []
160 },
161 {
162 "schema_version": 1,
163 "id": "01J8YVKZQ0M0M0M0M0M0M0M0Q0",
164 "lineage": null,
165 "label": "policy-provider",
166 "provides": [], "requires": [],
167 "permissions": { "networking": "none", "filesystem": "read-only", "ipc": { "allow": ["wit-v1"] }, "processes": false },
168 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
169 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
170 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
171 "cpu_affinity": null },
172 "payload": { "Native": { "exec": "/usr/sbin/arje-policy-provider", "argv": [], "envp": [] } },
173 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
174 "lifecycle": "daemon", "priority": "normal",
175 "flow": { "input": [], "output": [] }, "genesis": []
176 },
177 {
178 "schema_version": 1,
179 "id": "01J8YVKZQ0M0M0M0M0M0M0M0M0",
180 "lineage": null,
181 "label": "compat-machined",
182 "provides": [], "requires": [],
183 "permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
184 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
185 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
186 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
187 "cpu_affinity": null },
188 "payload": { "Native": { "exec": "/usr/sbin/arje-machined-compat", "argv": [], "envp": [] } },
189 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
190 "lifecycle": "daemon", "priority": "normal",
191 "flow": { "input": [], "output": [] }, "genesis": []
192 },
193 {
194 "schema_version": 1,
195 "id": "01J8YVKZQ0M0M0M0M0M0M0M0S0",
196 "lineage": null,
197 "label": "compat-systemd1",
198 "provides": [], "requires": [],
199 "permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
200 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
201 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
202 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
203 "cpu_affinity": null },
204 "payload": { "Native": { "exec": "/usr/sbin/arje-systemd1-compat", "argv": [], "envp": [] } },
205 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
206 "lifecycle": "daemon", "priority": "high",
207 "flow": { "input": [], "output": [] }, "genesis": []
208 },
209 {
210 "schema_version": 1,
211 "id": "01J8YVKZQ0M0M0M0M0M0M0M0N0",
212 "lineage": null,
213 "label": "compat-notify",
214 "provides": [], "requires": [],
215 "permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
216 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
217 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
218 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
219 "cpu_affinity": null },
220 "payload": { "Native": { "exec": "/usr/sbin/arje-notify-compat", "argv": [], "envp": [] } },
221 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
222 "lifecycle": "daemon", "priority": "normal",
223 "flow": { "input": [], "output": [] }, "genesis": []
224 },
225 {
226 "schema_version": 1,
227 "id": "01J8YVKZQ0M0M0M0M0M0M0M0Y0",
228 "lineage": null,
229 "label": "compat-logind",
230 "provides": ["LegacyLogind"], "requires": [],
231 "permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
232 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
233 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
234 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
235 "cpu_affinity": null },
236 "payload": { "Native": { "exec": "/usr/sbin/arje-logind-compat", "argv": [], "envp": [] } },
237 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
238 "lifecycle": "daemon", "priority": "high",
239 "flow": { "input": [], "output": [] }, "genesis": []
240 },
241 {
242 "schema_version": 1,
243 "id": "01J8YVKZQ0M0M0M0M0M0M0M0Z0",
244 "lineage": null,
245 "label": "compat-timer",
246 "provides": [], "requires": [],
247 "permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
248 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
249 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
250 "cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
251 "cpu_affinity": null },
252 "payload": { "Native": { "exec": "/usr/sbin/arje-timer-compat", "argv": [], "envp": [] } },
253 "supervision": { "Restart": { "initial": 1000, "max": 60000 } },
254 "lifecycle": "daemon", "priority": "low",
255 "flow": { "input": [], "output": [] }, "genesis": []
256 },
257 {
258 "schema_version": 1,
259 "id": "01J8YVKZQ0M0M0M0M0M0M0M0E0",
260 "lineage": null,
261 "label": "echo-smoke",
262 "provides": [], "requires": [],
263 "permissions": { "networking": "none", "filesystem": "read-only", "ipc": { "allow": ["wit-v1"] }, "processes": false },
264 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
265 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
266 "cgroup": {"path":"ente.slice/test","cpu_weight":null,"io_weight":null},
267 "cpu_affinity": null },
268 "payload": { "Native": { "exec": "/usr/sbin/arje-echo", "argv": [], "envp": [] } },
269 "supervision": { "Restart": { "initial": 200, "max": 30000 } },
270 "lifecycle": "daemon", "priority": "low",
271 "flow": { "input": [], "output": [] }, "genesis": []
272 },
273 {
274 "schema_version": 1,
275 "id": "01J8YVKZQ0M0M0M0M0M0M0M0N0",
276 "lineage": null,
277 "label": "net-up",
278 "provides": [], "requires": [],
279 "permissions": { "networking": "full", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
280 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
281 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
282 "cgroup": {"path":"ente.slice/net","cpu_weight":null,"io_weight":null},
283 "cpu_affinity": null },
284 "payload": { "Native": { "exec": "/usr/sbin/arje-net-up", "argv": [], "envp": [["PATH", "/usr/sbin:/usr/bin:/sbin:/bin"]] } },
285 "supervision": { "Restart": { "initial": 500, "max": 30000 } },
286 "lifecycle": "daemon", "priority": "critical",
287 "flow": { "input": [], "output": [] }, "genesis": []
288 },
289 {
290 "schema_version": 1,
291 "id": "01J8YVKZQ0M0M0M0M0M0M0M0S0",
292 "lineage": null,
293 "label": "sshd",
294 "provides": [], "requires": [],
295 "permissions": { "networking": "full", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
296 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
297 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
298 "cgroup": {"path":"ente.slice/sshd","cpu_weight":null,"io_weight":null},
299 "cpu_affinity": null },
300 "payload": { "Native": { "exec": "/usr/sbin/sshd", "argv": ["-D", "-e"], "envp": [["PATH", "/usr/sbin:/usr/bin:/sbin:/bin"]] } },
301 "supervision": { "Restart": { "initial": 1000, "max": 60000 } },
302 "lifecycle": "daemon", "priority": "high",
303 "flow": { "input": [], "output": [] }, "genesis": []
304 },
305 {
306 "schema_version": 1,
307 "id": "01J8YVKZQ0M0M0M0M0M0M0M0K0",
308 "lineage": null,
309 "label": "kmod-gpu",
310 "provides": [], "requires": [],
311 "permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
312 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
313 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
314 "cgroup": {"path":"ente.slice/kmod","cpu_weight":null,"io_weight":null},
315 "cpu_affinity": null },
316 "payload": { "Native": { "exec": "/usr/sbin/modprobe", "argv": ["virtio_gpu"], "envp": [] } },
317 "supervision": "OneShot",
318 "lifecycle": "oneshot",
319 "priority": "critical",
320 "flow": { "input": [], "output": [] }, "genesis": []
321 },
322 {
323 "schema_version": 1,
324 "id": "01J8YVKZQ0M0M0M0M0M0M0M0CM",
325 "lineage": null,
326 "label": "carmen-dm",
327 "provides": [], "requires": [],
328 "permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
329 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
330 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
331 "cgroup": {"path":"ente.slice/carmen","cpu_weight":null,"io_weight":null},
332 "cpu_affinity": null },
333 "payload": { "Native": {
334 "exec": "/usr/bin/mirada-compositor",
335 "argv": ["--greeter", "--drm"],
336 "envp": [
337 ["PATH", "/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin"],
338 ["XDG_RUNTIME_DIR", "/run"],
339 ["MIRADA_GREETER_BIN", "/usr/bin/mirada-greeter"]
340 ]
341 } },
342 "supervision": { "Restart": { "initial": 2000, "max": 60000 } },
343 "lifecycle": "daemon", "priority": "high",
344 "flow": { "input": [], "output": [] }, "genesis": []
345 },
346 {
347 "schema_version": 1,
348 "id": "01J8YVKZQ0M0M0M0M0M0M0M0G0",
349 "lineage": null,
350 "label": "getty-tty1",
351 "provides": [], "requires": [],
352 "permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
353 "soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
354 "rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
355 "cgroup": {"path":"ente.slice/getty","cpu_weight":null,"io_weight":null},
356 "cpu_affinity": null },
357 "payload": {
358 "Native": {
359 "exec": "/bin/sh",
360 "argv": ["-i"],
361 "envp": [["PATH", "/usr/sbin:/usr/bin:/sbin:/bin"], ["TERM", "linux"], ["PS1", "arje# "]]
362 }
363 },
364 "supervision": { "Restart": { "initial": 100, "max": 30000 } },
365 "lifecycle": "daemon", "priority": "high",
366 "flow": { "input": [], "output": [] }, "genesis": []
367 }
368 ]
369}