runner: overlay-root appliance mode

This commit is contained in:
every.channel 2026-02-17 02:26:09 -08:00
parent 49b969e081
commit ce8c1319f4
No known key found for this signature in database
5 changed files with 79 additions and 1 deletions

View file

@ -15,6 +15,19 @@ The runner OS exposes this repo's flake source inside the system at:
This allows a runner to self-build and verify artifacts from the same flake definition.
## Read-Only Root + tmpfs Writes
The base runner profile enables an initrd overlay that:
- remounts the real `/` read-only, and
- provides a tmpfs-backed writable overlay upperdir.
For reliable upgrades and operation, mount persistent filesystems for:
- `/boot` (so new boot entries persist)
- `/nix` (so store contents persist across reboots)
- `/var` or selected `/var/lib/*` paths (for any state you care about)
## Build (OrbStack / Linux)
These commands should be run inside a Linux environment with Nix enabled (e.g. OrbStack VM).