pkg/

Package boot is the first-boot provisioning runner.

Package cubefs mounts a CubeFS volume inside the guest by driving the CubeFS FUSE client (cfs-client) — CubeFS being the platform's RWX share backend (a CNCF distributed POSIX + S3 filesystem, since it replaced the SFTP server).

Package firewall is the VM side of dynamic stateful packet filtering.

Package firewallstatus publishes this micro-VM's live nftables state on the per-VM NATS subject the control plane (and the UI) listen on.

Package introspectsrv implements the weft.introspect.v1.Introspect gRPC service: a read-only window into the micro-VM, served on the VM's wg0 address for an operator CLI to reach over WireGuard.

Package mesh is the VM side of dynamic WireGuard mesh updates.

Package mounts is the VM side of dynamic share mounts.

Package procps reads the Linux /proc filesystem to produce a process table equivalent to `ps aux`.

Package properties is the guest-side application of dynamically- pushed VM properties.

Package sshd is the embedded SSH server that runs inside the microVM (in the ramdisk's weft-microvm-agent process).

Package sshkeys is the guest-side application of dynamically-pushed SSH authorized-keys updates.