build-initrd

Installation
SKILL.md

Initrd Repack

just run automatically repacks the initrd before every boot. It cross-compiles guest binaries, injects them into the initrd, and capsem-init prefers initrd-bundled copies over rootfs copies at boot. This is the fast iteration loop (~10s) -- no full rootfs rebuild needed for guest binary changes.

Currently repacked binaries

Binary What it does
capsem-init PID 1 init script
capsem-pty-agent PTY-over-vsock bridge agent
capsem-net-proxy TCP-to-vsock relay for air-gapped HTTPS proxying
capsem-mcp-server MCP stdio-to-vsock relay for AI agent tool access
capsem-sysutil Guest suspend helper via vsock:5004; in-VM shutdown commands are disabled
capsem-doctor VM self-diagnostic suite (bash script)
snapshots Snapshot management CLI (Python, FastMCP client)
diagnostics/ pytest test files for capsem-doctor

Adding a new guest binary

Installs
1
Repository
google/capsem
GitHub Stars
51
First Seen
14 days ago
build-initrd — google/capsem