mirror of
https://github.com/Heretek-AI/heretek-devcontainers.git
synced 2026-11-07 10:56:02 -10:00
Each heavy service now has a loopback .socket and a systemd-socket-proxyd service (Requires=/After= the container, --exit-idle-time) on a shifted container port. Container units keep StopWhenUnneeded=true, lose their [Install] section and SecurityLabelType=spc, use Notify=healthy, and the emulator uses AddDevice=/dev/kvm under default container_t confinement. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4