Оцінка embedded і edge образів

x86_64 KVM build може validate small Linux userspace, але не qualify boot firmware, kernel, storage, power, radio або peripheral behavior embedded board. Treat first artifact as virtual reference, unless selected builder explicitly supports target device.

Prompt

Create a minimal Debian Trixie headless image for an x86_64 edge gateway.
Include SSH, NetworkManager, Avahi, watchdog, curl, and CA certificates.
Create a locked-password service account named app with a no-login shell and
no supplementary groups. Do not remove documentation or locales unless the
generated plan shows the exact package and filesystem effects. Add boot,
service, account, repeated-boot, and interrupted-first-boot tests.

Recipe shape

{
  "name": "edge-gateway-evaluation",
  "base_image": "debian-trixie",
  "hardware": {
    "platform": "pc",
    "architecture": "x86_64",
    "min_cpu_cores": 2,
    "min_memory_gb": 2,
    "min_storage_gb": 16,
    "nic_count": 1
  },
  "os": {
    "features": ["headless", "ssh"],
    "packages": [
      "network-manager",
      "avahi-daemon",
      "watchdog",
      "curl",
      "ca-certificates"
    ],
    "users": [
      {
        "username": "app",
        "groups": [],
        "shell": "/usr/sbin/nologin"
      }
    ]
  }
}

Hardware block declares requirements; не перетворює PC image на board-specific image. Use platform: raspberry_pi або phone/device fields лише коли current builder accepts exact target і documents limitations.

Verification

У virtual guest verify:

• required packages і enabled services;
• service account shell, lock state, groups і file ownership;
• networking after first і second boot;
• watchdog configuration without deliberately resetting shared infrastructure;
• read/write behavior для any tmpfs або volatile journal request; та
• clean failure when enrollment dependency unavailable.

Boot-time і idle-memory measurements from KVM , useful regression baselines, not target-hardware promises.

Device qualification

Before writing image to physical media test on exact board revision:

• bootloader і firmware compatibility;
• kernel, device tree, drivers і proprietary firmware;
• storage wear, power loss і filesystem recovery;
• Ethernet, Wi-Fi, Bluetooth, modem, GNSS і radios as applicable;
• serial, I2C, SPI, GPIO, camera і accelerator I/O;
• thermal limits, suspend/resume, watchdog reset і power budget; та
• secure enrollment, key custody, updates, rollback і decommissioning.

Do not tell operator to «flash the ISO» unless artifact format і write procedure specifically supported for that device.