Files

Michael Chus 0755374dd2 perf(iso): speed up builds — zstd squashfs + preserve lb chroot cache

- Switch squashfs compression from xz to zstd (3-5x faster compression,
  ~10-15% larger but decompresses faster at boot)
- Stop rm -rf BUILD_WORK_DIR on each build; rsync only config changes
  so lb can reuse its chroot across builds (skips apt install step)
- Keep lb-packages cache in CACHE_ROOT as fallback if work dir is wiped

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-28 10:10:29 +03:00

builder

perf(iso): speed up builds — zstd squashfs + preserve lb chroot cache

2026-03-28 10:10:29 +03:00

overlay

feat(netconf): add input validation, 'b' to go back, 'a' to abort

2026-03-28 07:31:23 +03:00

vendor

Implement audit enrichments, TUI workflows, and production ISO scaffold

2026-03-06 11:56:26 +03:00

README.md

iso: improve burn-in, export, and live boot

2026-03-26 18:56:19 +03:00

README.md

ISO Build

bee ISO is built inside a Debian 12 builder container via iso/builder/build-in-container.sh.

Requirements

Docker Desktop or another Docker-compatible container runtime
Privileged containers enabled
Enough free disk space for builder cache, Debian live-build artifacts, NVIDIA driver cache, and CUDA userspace packages

Build On macOS

From the repository root:

sh iso/builder/build-in-container.sh

The script defaults to linux/amd64 builder containers, so it works on:

Intel Mac
Apple Silicon (M1 / M2 / M3 / M4) via Docker Desktop's Linux VM

You do not need to pass --platform manually for normal ISO builds.

Useful Options

Build with explicit SSH keys baked into the ISO:

sh iso/builder/build-in-container.sh --authorized-keys ~/.ssh/id_ed25519.pub

Rebuild the builder image:

sh iso/builder/build-in-container.sh --rebuild-image

Use a custom cache directory:

sh iso/builder/build-in-container.sh --cache-dir /path/to/cache

Notes

The builder image is automatically rebuilt if the local tag exists for the wrong architecture.
The live ISO boots with Debian live-boot toram, so the read-only medium is copied into RAM during boot and the runtime no longer depends on the original USB/BMC virtual media staying present.
Target systems need enough RAM for the full compressed live medium plus normal runtime overhead, or boot may fail before reaching the TUI.
Override the container platform only if you know why:

BEE_BUILDER_PLATFORM=linux/amd64 sh iso/builder/build-in-container.sh

The shipped ISO is still amd64.
Output ISO artifacts are written under dist/.