bundle-vm-base

Build and publish Agyn base VM disks for the local bundle runtime.

This repository owns the reusable VM base layer for the future Agyn local bundle runtime. It builds native linux/amd64 and linux/arm64 Ubuntu QCOW2 disks with:

• single-node k3s
• cert-manager
• Argo CD
• Helm, kubectl, and common CLI/debug tooling

It intentionally does not bake Agyn service bundle versions or any production, staging, external service, or developer credentials into the image.

Artifacts

CI publishes OCI artifacts to GHCR with architecture-specific tags:

• ghcr.io/agynio/bundle-vm-base:<version>-amd64
• ghcr.io/agynio/bundle-vm-base:<version>-arm64
• ghcr.io/agynio/bundle-vm-base:latest-amd64
• ghcr.io/agynio/bundle-vm-base:latest-arm64

Each artifact contains:

• compressed QCOW2 disk (bundle-vm-base-<arch>.qcow2.xz)
• checksums.sha256
• metadata.json with OS, architecture, disk, k3s, and component versions
• generated lima.yaml for manual testing

Documentation

• Building and publishing
• Manual Lima usage

Quick local validation

scripts/static-validate.sh

Quick local build

Run on a Linux host with KVM and Packer installed:

scripts/build.sh amd64
scripts/package.sh amd64 dev

Use arm64 on a native ARM64 host. Apple Silicon Macs use QEMU HVF with an explicit ARM64 UEFI firmware path resolved from the QEMU installation, and Linux publish runners must provide KVM. To validate the macOS path directly, run:

QEMU_ACCELERATOR=hvf scripts/build.sh arm64
scripts/package.sh arm64 dev

PR checks run the amd64 VM build and keep the arm64 VM build opt-in so CI stays honest when the default hosted ARM64 Linux runner has no acceleration. Push/tag publishing remains wired to build both architectures on an accelerated ARM64 runner selected by repository variable. See building docs for details and macOS prerequisites.