Files

T

mchusandClaude Sonnet 5 78d1b9b599 fix(iso): seed a real file in /var/log/nvidia-dcgm so it survives squashfs layering

bbc6fb1 chowned the directory correctly but it stayed empty at build
time, and bee_layer_classify (squashfs-layers.sh) only tracks regular
files and symlinks via `find ... -type f -o -type l` — an empty
directory is silently dropped from every layer's rsync --files-from
list and never reaches the built ISO. dcgmi diag's deployment check
still failed with DCGM_FR_FILE_CREATE_PERMISSIONS after rebuilding on
top of that fix because the directory simply didn't exist at boot.

Seed /var/log/nvidia-dcgm/.keep so the directory rides along the
classifier as an implied parent (rsync -a preserves its ownership),
and stop 9999-slim's log sweep from deleting that marker before the
classifier ever sees it.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-12 16:11:24 +03:00

builder

fix(iso): seed a real file in /var/log/nvidia-dcgm so it survives squashfs layering

2026-09-12 16:11:24 +03:00

overlay

fix: tolerate unavailable CPU sensor telemetry

2026-09-08 09:49:40 +03:00

vendor

iso: update vendor storcli2 to 08.017.000.0008

2026-07-07 18:05:21 +03:00

README.md

feat(iso): split the live medium into semantic SquashFS layers

2026-09-04 15:38:14 +03:00

README.md

ISO Build

bee ISO is built inside a Debian 12 builder container via iso/builder/build-in-container.sh.

Requirements

Docker Desktop or another Docker-compatible container runtime
Privileged containers enabled
Enough free disk space for builder cache, Debian live-build artifacts, NVIDIA driver cache, and CUDA userspace packages

Build On macOS

From the repository root:

sh iso/builder/build-in-container.sh

The script defaults to linux/amd64 builder containers, so it works on:

Intel Mac
Apple Silicon (M1 / M2 / M3 / M4) via Docker Desktop's Linux VM

You do not need to pass --platform manually for normal ISO builds.

Useful Options

Build with explicit SSH keys baked into the ISO:

sh iso/builder/build-in-container.sh --authorized-keys ~/.ssh/id_ed25519.pub

Force a clean rebuild of the builder image and build caches:

sh iso/builder/build-in-container.sh --clean-build

Use a custom cache directory:

sh iso/builder/build-in-container.sh --cache-dir /path/to/cache

Notes

The builder image is automatically rebuilt if the local tag exists for the wrong architecture.
The live ISO boots with Debian live-boot toram, so the read-only medium is copied into RAM during boot and the runtime no longer depends on the original USB/BMC virtual media staying present.
The NVIDIA variants ship the root filesystem as several semantic SquashFS layers (live/filesystem-v<ver>-NN-*.squashfs) plus an explicit live/filesystem.module that fixes their OverlayFS order. This bounds the data a toram retry must re-read after a virtual-media drop; it is not a fix for virtual-media instability. amd / nogpu keep a single squashfs. See bible-local/architecture/squashfs-layers.md.
The builder splits the layers deterministically after the full lb build, verifies each one, re-merges them into a bootable rootfs, and only then deletes the monolith. The fast path is disabled for a multi-layer medium (it forces a full build).
Target systems require at least 16 GB of installed RAM for the full compressed live medium plus normal runtime overhead. On supported hardware, do not classify a mid-copy failure as low RAM without direct ENOSPC, OOM, or tmpfs-limit evidence.
The NVIDIA variant installs DCGM 4 packages matched to the CUDA user-mode driver major version. For driver branch 580 / CUDA 13.x, the package family is datacenter-gpu-manager-4-cuda13 rather than legacy datacenter-gpu-manager.
Override the container platform only if you know why:

BEE_BUILDER_PLATFORM=linux/amd64 sh iso/builder/build-in-container.sh

The shipped ISO is still amd64.
Output ISO artifacts are written under dist/.