weft-microvm-agent

weft-microvm-agent runs inside an openweft micro-VM.

Package boot is the first-boot provisioning runner.

Package containers is the VM side of the dynamic container set.

Package execsession is the VM side of the user shell — and of every `crun exec` invocation.

Package firewall is the VM side of dynamic stateful packet filtering.

Package firewallstatus publishes this micro-VM's live nftables state on the per-VM NATS subject the control plane (and the UI) listen on.

Package introspectsrv implements the weft.introspect.v1.Introspect gRPC service: a read-only window into the micro-VM, served on the VM's wg0 address for an operator CLI to reach over WireGuard.

Package mesh is the VM side of dynamic WireGuard mesh updates.

Package mounts is the VM side of dynamic share mounts.

Package procps reads the Linux /proc filesystem to produce a process table equivalent to `ps aux`.

Package properties is the guest-side application of dynamically- pushed VM properties.

Package sshd is the embedded SSH server that runs inside the microVM (in the ramdisk's weft-microvm-agent process).

Package sshkeys is the guest-side application of dynamically-pushed SSH authorized-keys updates.