mirror of
https://github.com/nestriness/nestri.git
synced 2026-09-19 17:25:19 +03:00
a76ca9ae81
Three places where build/ said something the tree does not do. - fstab mounted `/` as `rw`. A box is started with `ro` on the kernel command line and `is_read_only: true` on the root device (every config in nesbox's tree agrees: examples/vm.json, test.json, run.local.json), so the virtio-blk device rejects writes whatever fstab asks for. `rw` here only made OpenRC's `root` service attempt a remount that has to fail. The Dockerfile already depended on the truth — it pre-creates /nestri/* at build time precisely because a runtime mkdir gets EROFS — so this makes fstab agree with the comment that was already right. - build/README.md said nesbox's jail image "extracts Mesa and virglrenderer" from this base. It extracts only Mesa. virglrenderer is the host half of the native-context protocol and nesbox builds its own, patched, from nesbox/patches/; nothing in this image carries it at all. - conf.d/nestri-user-env called the zink driver-forcing block "load-bearing" directly above three exports that are commented out, here and in the profile.d copy. Whether they should come back is a separate question; a comment insisting disabled lines are load-bearing tells the next reader the opposite of what the file does. The reasoning is kept, because it is still the reason to re-enable them, along with why both copies have to move together. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
35 lines
1.4 KiB
Plaintext
35 lines
1.4 KiB
Plaintext
HOME="/home/nestri"
|
|
USER="nestri"
|
|
LOGNAME="nestri"
|
|
XDG_RUNTIME_DIR="/run/user/1000"
|
|
XDG_CONFIG_HOME="/home/nestri/.config"
|
|
XDG_DATA_HOME="/home/nestri/.local/share"
|
|
XDG_CACHE_HOME="/home/nestri/.cache"
|
|
XDG_STATE_HOME="/home/nestri/.local/state"
|
|
XDG_DATA_DIRS="/usr/local/share:/usr/share"
|
|
XDG_SESSION_TYPE="wayland"
|
|
XDG_SESSION_DESKTOP="nestri"
|
|
DBUS_SESSION_BUS_ADDRESS="unix:path=/run/user/1000/bus"
|
|
|
|
# Driver forcing — currently off, in both copies. Kept, commented, because
|
|
# the reasoning still applies if it is ever needed again: capture happens
|
|
# through a Vulkan layer, so a process reaching the GPU via native OpenGL
|
|
# would render fine and capture nothing, and zink is what makes such a
|
|
# process capturable at all. Nothing has needed it so far.
|
|
#
|
|
# /etc/profile.d/nestri-env.sh carries the same block, also commented, and
|
|
# only runs for login shells — nothing here is one, every service below runs
|
|
# from OpenRC. If these are ever re-enabled, re-enable both: one copy on and
|
|
# one off means services and shells reach the GPU by different paths.
|
|
#__GLX_VENDOR_LIBRARY_NAME="mesa"
|
|
#MESA_LOADER_DRIVER_OVERRIDE="zink"
|
|
#GALLIUM_DRIVER="zink"
|
|
|
|
nestri_export_env() {
|
|
export HOME USER LOGNAME
|
|
export XDG_RUNTIME_DIR XDG_CONFIG_HOME XDG_DATA_HOME XDG_CACHE_HOME XDG_STATE_HOME
|
|
export XDG_DATA_DIRS XDG_SESSION_TYPE XDG_SESSION_DESKTOP
|
|
export DBUS_SESSION_BUS_ADDRESS
|
|
#export __GLX_VENDOR_LIBRARY_NAME MESA_LOADER_DRIVER_OVERRIDE GALLIUM_DRIVER
|
|
}
|