casperbox 0.2.1__tar.gz

casperbox-0.2.1/.gitignore

@@ -0,0 +1,10 @@
+# casperbox configs (contain local paths and passwords)
+/casperbox.toml
+
+# Python
+__pycache__/
+*.egg-info/
+.venv/
+dist/
+build/
+.pytest_cache/

casperbox-0.2.1/PKG-INFO

@@ -0,0 +1,190 @@
+Metadata-Version: 2.5
+Name: casperbox
+Version: 0.2.1
+Summary: Build and run CASPER toolflow development containers with rootless podman
+Requires-Python: >=3.11
+Requires-Dist: typer>=0.12
+Description-Content-Type: text/markdown
+
+# casperbox
+
+`casperbox` builds and runs CASPER toolflow development containers with rootless podman.
+
+The image includes openssh-server, TigerVNC (XFCE desktop), Firefox, Miniconda (conda env),
+mlib_devel, device-tree-xlnx and Scilab. Vivado and the license are mounted from the host.
+
+## Supported versions
+
+| Version | Base image | Vivado | Python | mlib_devel | device-tree-xlnx | Scilab |
+|---|---|---|---|---|---|---|
+| m2021a | Ubuntu 20.04 | 2021.1 | 3.14 | [liuweiseu/mlib_devel](https://github.com/liuweiseu/mlib_devel) `scilab-dev-ai` | xlnx_rel_v2021.1 | 2024.1.0 |
+
+## Host requirements
+
+- [uv](https://docs.astral.sh/uv/) (installs without sudo)
+- rootless podman >= 4.4 (run as a regular user) and the passt package (provides pasta)
+- An installed Vivado (version in the table above) and a Xilinx license
+
+## Host setup
+
+Log in directly (SSH or desktop) as the user that runs podman (do not switch with `su`), then run:
+
+```bash
+loginctl enable-linger "$(id -un)"          # keep the user's systemd running, also after logout
+grep "^$(id -un):" /etc/subuid /etc/subgid  # should print one line each; otherwise ask an admin
+podman system migrate
+ls /run/user/$(id -u)/bus                   # the user's systemd bus must exist
+podman run --rm docker.io/library/ubuntu:20.04 true   # must succeed with no WARN/ERROR
+```
+
+If the last command fails with `sd-bus call: Access denied` (no user systemd session, e.g. after `su`),
+either point the shell at the user's bus:
+
+```bash
+export XDG_RUNTIME_DIR=/run/user/$(id -u)
+export DBUS_SESSION_BUS_ADDRESS=unix:path=$XDG_RUNTIME_DIR/bus
+```
+
+or stop podman from using systemd for cgroups:
+
+```bash
+mkdir -p ~/.config/containers
+printf '[engine]\ncgroup_manager = "cgroupfs"\nevents_logger = "file"\n' >> ~/.config/containers/containers.conf
+podman system migrate
+```
+
+## Install
+
+```bash
+uv tool install git+https://github.com/<owner>/casperbox
+# or from a local clone
+uv tool install ./casperbox
+```
+
+Upgrade with `uv tool upgrade casperbox`.
+
+## Quick start
+
+```bash
+mkdir ~/casper-a && cd ~/casper-a
+casperbox init                    # creates casperbox.toml
+vi casperbox.toml                 # set vivado.dir / paths.license_dir / ports
+casperbox up                      # builds the image on first use, then starts the container
+```
+
+Connect:
+
+- SSH: `ssh -p <ports.ssh> casper@<host>`, password `container.password` (default `casper`)
+- VNC: `<host>:<ports.vnc>`, password `container.vnc_password` (default `casper`)
+- Local: `casperbox shell`
+
+## Configuration
+
+`casperbox init` writes a commented `casperbox.toml` (permissions 600, it holds passwords).
+Relative paths in it are relative to the file's directory.
+
+| Key | Default | Description |
+|---|---|---|
+| `version` | | Toolflow version (`casperbox list`) |
+| `container.name` | `casper-<version>` | Container name and hostname |
+| `container.user` | `casper` | Container user |
+| `container.password` / `vnc_password` | `casper` | SSH/sudo and VNC (6-8 chars) passwords |
+| `container.mac` | random | MAC of `eth0` |
+| `container.shm_size` / `tz` | `2g` / `UTC` | |
+| `vivado.dir` / `vivado.mount` | / `ro` | Vivado install, mounted at the same path |
+| `paths.license_dir` | `~/.Xilinx` | Mounted at `~/.Xilinx` |
+| `paths.work_dir` | `./work` | Mounted at `~/work` (created if missing) |
+| `ports.bind_address` | `0.0.0.0` | |
+| `ports.ssh` / `ports.vnc` | `2222` / `5901` | Host ports for container 22 / 5901 |
+| `vnc.geometry` | `1920x1080` | |
+| `[[mounts]]` | | Extra mounts: `host`, `container` (`~/` = home), `mode` |
+| `[[extra_ports]]` | | Extra ports: `host`, `container`, `protocol` |
+
+Unknown keys and wrong types (e.g. a port written as a string) are reported as errors.
+
+### Several containers
+
+Each config file is one container. Use another directory or file, and give it its own
+`container.name` and ports:
+
+```bash
+casperbox init lab.toml           # edit container.name, ports.ssh, ports.vnc
+casperbox -c lab.toml up
+casperbox ps                      # all casperbox containers, from any directory
+```
+
+`casperbox` refuses to recreate or remove a container that was created from a different config file.
+
+## Commands
+
+| Command | Description |
+|---|---|
+| `casperbox list` | List supported toolflow versions |
+| `casperbox init [FILE] [--toolflow VER] [--force]` | Create a config file (default `casperbox.toml`) |
+| `casperbox build [--no-cache]` | Build the image |
+| `casperbox up` | Start (recreate) the container; builds the image if missing |
+| `casperbox down` | Stop and remove the container |
+| `casperbox restart` | `down` + `up` |
+| `casperbox shell` | Open a login shell as the container user |
+| `casperbox status` | Container status and ports |
+| `casperbox logs [-f]` | Container logs |
+| `casperbox config` | Resolved config and podman commands (passwords masked) |
+| `casperbox ps` | List all casperbox containers |
+
+`-c FILE` selects the config file (before or after the command); the default is `./casperbox.toml`.
+
+## Inside the container
+
+```
+~/toolflow/
+├── mlib_devel/            # includes the generated startsg.local
+├── device-tree-xlnx/
+└── src/                   # -e dependencies from requirements.txt
+```
+
+Shells automatically load Vivado `settings64.sh` and the variables in `startsg.local`, and activate the conda env `casper`.
+Scilab is in `/opt/scilab`; run `scilab` (linked in `~/.local/bin`).
+
+> `~/toolflow` is part of the image, not a mount. `down`/`up` recreate the container and
+> discard changes made there; keep your projects under `~/work`.
+
+## Networking (pasta)
+
+The container uses pasta networking (no bridge network). Ports are forwarded with `-p`,
+the interface is named `eth0`, and the container sees the same IP as the host.
+`container.mac` is applied with pasta's `--ns-mac-addr` (e.g. for a MAC-locked node-locked license);
+the interface exists only in the container's network namespace, so reusing the host NIC's MAC is safe.
+
+## After changing the config
+
+| Change | Action |
+|---|---|
+| Directories, ports, passwords, MAC, mounts | `casperbox up` |
+| `container.user`, or a different host user (UID/GID changed) | `casperbox build`, then `casperbox up` |
+
+## Development
+
+```
+src/casperbox/
+├── cli.py             Typer commands
+├── config.py          casperbox.toml parsing and validation
+├── podman.py          podman build/run arguments and container queries
+├── versions.py        toolflow versions in assets/versions
+├── templates/         casperbox.toml template
+└── assets/            build context: Dockerfiles, build scripts, rootfs, software.list
+tests/                 pytest tests
+```
+
+```bash
+uv sync
+uv run pytest
+uv run casperbox --help
+uv tool install -e .           # installed casperbox uses this source tree
+```
+
+Adding apt packages: add one per line to `assets/common/packages/software.list`, then `casperbox build`.
+
+Adding a toolflow version: copy `assets/versions/m2021a` to `assets/versions/<new>`, edit
+`toolflow.toml` (`TOOLFLOW_VERSION` must match the directory name) and the Dockerfile as needed.
+
+The shell-based tool (`casper.sh`) is available at tag `v0.1.0`.

casperbox-0.2.1/README.md

@@ -0,0 +1,182 @@
+# casperbox
+
+`casperbox` builds and runs CASPER toolflow development containers with rootless podman.
+
+The image includes openssh-server, TigerVNC (XFCE desktop), Firefox, Miniconda (conda env),
+mlib_devel, device-tree-xlnx and Scilab. Vivado and the license are mounted from the host.
+
+## Supported versions
+
+| Version | Base image | Vivado | Python | mlib_devel | device-tree-xlnx | Scilab |
+|---|---|---|---|---|---|---|
+| m2021a | Ubuntu 20.04 | 2021.1 | 3.14 | [liuweiseu/mlib_devel](https://github.com/liuweiseu/mlib_devel) `scilab-dev-ai` | xlnx_rel_v2021.1 | 2024.1.0 |
+
+## Host requirements
+
+- [uv](https://docs.astral.sh/uv/) (installs without sudo)
+- rootless podman >= 4.4 (run as a regular user) and the passt package (provides pasta)
+- An installed Vivado (version in the table above) and a Xilinx license
+
+## Host setup
+
+Log in directly (SSH or desktop) as the user that runs podman (do not switch with `su`), then run:
+
+```bash
+loginctl enable-linger "$(id -un)"          # keep the user's systemd running, also after logout
+grep "^$(id -un):" /etc/subuid /etc/subgid  # should print one line each; otherwise ask an admin
+podman system migrate
+ls /run/user/$(id -u)/bus                   # the user's systemd bus must exist
+podman run --rm docker.io/library/ubuntu:20.04 true   # must succeed with no WARN/ERROR
+```
+
+If the last command fails with `sd-bus call: Access denied` (no user systemd session, e.g. after `su`),
+either point the shell at the user's bus:
+
+```bash
+export XDG_RUNTIME_DIR=/run/user/$(id -u)
+export DBUS_SESSION_BUS_ADDRESS=unix:path=$XDG_RUNTIME_DIR/bus
+```
+
+or stop podman from using systemd for cgroups:
+
+```bash
+mkdir -p ~/.config/containers
+printf '[engine]\ncgroup_manager = "cgroupfs"\nevents_logger = "file"\n' >> ~/.config/containers/containers.conf
+podman system migrate
+```
+
+## Install
+
+```bash
+uv tool install git+https://github.com/<owner>/casperbox
+# or from a local clone
+uv tool install ./casperbox
+```
+
+Upgrade with `uv tool upgrade casperbox`.
+
+## Quick start
+
+```bash
+mkdir ~/casper-a && cd ~/casper-a
+casperbox init                    # creates casperbox.toml
+vi casperbox.toml                 # set vivado.dir / paths.license_dir / ports
+casperbox up                      # builds the image on first use, then starts the container
+```
+
+Connect:
+
+- SSH: `ssh -p <ports.ssh> casper@<host>`, password `container.password` (default `casper`)
+- VNC: `<host>:<ports.vnc>`, password `container.vnc_password` (default `casper`)
+- Local: `casperbox shell`
+
+## Configuration
+
+`casperbox init` writes a commented `casperbox.toml` (permissions 600, it holds passwords).
+Relative paths in it are relative to the file's directory.
+
+| Key | Default | Description |
+|---|---|---|
+| `version` | | Toolflow version (`casperbox list`) |
+| `container.name` | `casper-<version>` | Container name and hostname |
+| `container.user` | `casper` | Container user |
+| `container.password` / `vnc_password` | `casper` | SSH/sudo and VNC (6-8 chars) passwords |
+| `container.mac` | random | MAC of `eth0` |
+| `container.shm_size` / `tz` | `2g` / `UTC` | |
+| `vivado.dir` / `vivado.mount` | / `ro` | Vivado install, mounted at the same path |
+| `paths.license_dir` | `~/.Xilinx` | Mounted at `~/.Xilinx` |
+| `paths.work_dir` | `./work` | Mounted at `~/work` (created if missing) |
+| `ports.bind_address` | `0.0.0.0` | |
+| `ports.ssh` / `ports.vnc` | `2222` / `5901` | Host ports for container 22 / 5901 |
+| `vnc.geometry` | `1920x1080` | |
+| `[[mounts]]` | | Extra mounts: `host`, `container` (`~/` = home), `mode` |
+| `[[extra_ports]]` | | Extra ports: `host`, `container`, `protocol` |
+
+Unknown keys and wrong types (e.g. a port written as a string) are reported as errors.
+
+### Several containers
+
+Each config file is one container. Use another directory or file, and give it its own
+`container.name` and ports:
+
+```bash
+casperbox init lab.toml           # edit container.name, ports.ssh, ports.vnc
+casperbox -c lab.toml up
+casperbox ps                      # all casperbox containers, from any directory
+```
+
+`casperbox` refuses to recreate or remove a container that was created from a different config file.
+
+## Commands
+
+| Command | Description |
+|---|---|
+| `casperbox list` | List supported toolflow versions |
+| `casperbox init [FILE] [--toolflow VER] [--force]` | Create a config file (default `casperbox.toml`) |
+| `casperbox build [--no-cache]` | Build the image |
+| `casperbox up` | Start (recreate) the container; builds the image if missing |
+| `casperbox down` | Stop and remove the container |
+| `casperbox restart` | `down` + `up` |
+| `casperbox shell` | Open a login shell as the container user |
+| `casperbox status` | Container status and ports |
+| `casperbox logs [-f]` | Container logs |
+| `casperbox config` | Resolved config and podman commands (passwords masked) |
+| `casperbox ps` | List all casperbox containers |
+
+`-c FILE` selects the config file (before or after the command); the default is `./casperbox.toml`.
+
+## Inside the container
+
+```
+~/toolflow/
+├── mlib_devel/            # includes the generated startsg.local
+├── device-tree-xlnx/
+└── src/                   # -e dependencies from requirements.txt
+```
+
+Shells automatically load Vivado `settings64.sh` and the variables in `startsg.local`, and activate the conda env `casper`.
+Scilab is in `/opt/scilab`; run `scilab` (linked in `~/.local/bin`).
+
+> `~/toolflow` is part of the image, not a mount. `down`/`up` recreate the container and
+> discard changes made there; keep your projects under `~/work`.
+
+## Networking (pasta)
+
+The container uses pasta networking (no bridge network). Ports are forwarded with `-p`,
+the interface is named `eth0`, and the container sees the same IP as the host.
+`container.mac` is applied with pasta's `--ns-mac-addr` (e.g. for a MAC-locked node-locked license);
+the interface exists only in the container's network namespace, so reusing the host NIC's MAC is safe.
+
+## After changing the config
+
+| Change | Action |
+|---|---|
+| Directories, ports, passwords, MAC, mounts | `casperbox up` |
+| `container.user`, or a different host user (UID/GID changed) | `casperbox build`, then `casperbox up` |
+
+## Development
+
+```
+src/casperbox/
+├── cli.py             Typer commands
+├── config.py          casperbox.toml parsing and validation
+├── podman.py          podman build/run arguments and container queries
+├── versions.py        toolflow versions in assets/versions
+├── templates/         casperbox.toml template
+└── assets/            build context: Dockerfiles, build scripts, rootfs, software.list
+tests/                 pytest tests
+```
+
+```bash
+uv sync
+uv run pytest
+uv run casperbox --help
+uv tool install -e .           # installed casperbox uses this source tree
+```
+
+Adding apt packages: add one per line to `assets/common/packages/software.list`, then `casperbox build`.
+
+Adding a toolflow version: copy `assets/versions/m2021a` to `assets/versions/<new>`, edit
+`toolflow.toml` (`TOOLFLOW_VERSION` must match the directory name) and the Dockerfile as needed.
+
+The shell-based tool (`casper.sh`) is available at tag `v0.1.0`.

casperbox-0.2.1/pyproject.toml

@@ -0,0 +1,27 @@
+[project]
+name = "casperbox"
+version = "0.2.1"
+description = "Build and run CASPER toolflow development containers with rootless podman"
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = [
+    "typer>=0.12",
+]
+
+[project.scripts]
+casperbox = "casperbox.cli:main"
+
+[dependency-groups]
+dev = [
+    "pytest>=8",
+]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/casperbox"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

casperbox-0.2.1/src/casperbox/__init__.py

@@ -0,0 +1,8 @@
+"""casperbox: build and run CASPER toolflow development containers with rootless podman."""
+
+from importlib.metadata import PackageNotFoundError, version
+
+try:
+    __version__ = version("casperbox")
+except PackageNotFoundError:  # running from a source tree without installation
+    __version__ = "0+unknown"

casperbox-0.2.1/src/casperbox/assets/common/packages/software.list

@@ -0,0 +1,70 @@
+# apt packages installed into the image by common/scripts/install_base.sh
+# One package per line; text after # is ignored.
+
+# ---- basic tools ----
+ca-certificates
+curl
+wget
+git
+sudo
+locales
+tzdata
+bzip2
+xz-utils
+unzip
+file
+less
+vim
+nano
+procps
+psmisc
+iproute2
+iputils-ping
+net-tools
+lsb-release
+
+# ---- build tools ----
+build-essential
+make
+gcc
+g++
+device-tree-compiler
+
+# ---- ssh / vnc / desktop ----
+openssh-server
+tigervnc-standalone-server
+tigervnc-common
+xfce4
+xfce4-terminal
+dbus-x11
+x11-xserver-utils
+x11-utils
+xfonts-base
+fonts-dejavu
+firefox
+
+# ---- Vivado runtime dependencies ----
+libtinfo5
+libncurses5
+libx11-6
+libxext6
+libxrender1
+libxtst6
+libxi6
+libxft2
+libxrandr2
+libxcursor1
+libxinerama1
+libsm6
+libice6
+libfreetype6
+libfontconfig1
+libglib2.0-0
+libgtk2.0-0
+libgtk-3-0
+libcanberra-gtk-module
+libcanberra-gtk3-module
+libasound2
+libgl1
+libglu1-mesa
+graphviz

casperbox-0.2.1/src/casperbox/assets/common/rootfs/etc/profile.d/casper.sh

@@ -0,0 +1,48 @@
+# shellcheck shell=bash
+# CASPER toolflow environment: Vivado, mlib_devel (startsg.local), conda env
+# Sourced by /etc/profile (login shells) and ~/.bashrc (interactive shells); safe to source repeatedly.
+
+# Vivado settings64.sh etc. require bash
+[ -n "${BASH_VERSION:-}" ] || return 0
+[ -r /etc/casper/toolflow.env ] || return 0
+
+set -a
+# shellcheck disable=SC1091
+. /etc/casper/toolflow.env
+# Generated at container startup: VIVADO_DIR / XILINX_PATH / COMPOSER_PATH
+# shellcheck disable=SC1091
+[ -r /etc/casper/runtime.env ] && . /etc/casper/runtime.env
+set +a
+
+export MLIB_DEVEL_PATH="${CASPER_TOOLFLOW_DIR}/mlib_devel"
+
+# ~/.local/bin (scilab etc. are linked here)
+case ":${PATH}:" in
+    *":${HOME}/.local/bin:"*) ;;
+    *) export PATH="${HOME}/.local/bin:${PATH}" ;;
+esac
+
+# mlib_devel local config (XILINX_PATH / JASPER_BACKEND / XLNX_DT_REPO_PATH etc.)
+if [ -r "${MLIB_DEVEL_PATH}/startsg.local" ]; then
+    # shellcheck disable=SC1091
+    . "${MLIB_DEVEL_PATH}/startsg.local"
+fi
+
+# Vivado (load once to avoid growing PATH repeatedly)
+_casper_vivado_settings="${XILINX_PATH:-}/settings64.sh"
+if [ -z "${CASPER_VIVADO_LOADED:-}" ] && [ -n "${XILINX_PATH:-}" ] && [ -r "${_casper_vivado_settings}" ]; then
+    # shellcheck disable=SC1090
+    . "${_casper_vivado_settings}" >/dev/null
+    export CASPER_VIVADO_LOADED=1
+fi
+unset _casper_vivado_settings
+
+# conda: activate the toolflow python env by default (CONDA_ENV_NAME, e.g. casper)
+# Every shell must define the conda function and run activate:
+#   - environment variables are inherited from the parent, but the conda function and PS1 are not;
+#   - if the env is already active, conda only reactivates (no stacking) and restores the "(casper)" prompt.
+if [ -r /opt/conda/etc/profile.d/conda.sh ]; then
+    # shellcheck disable=SC1091
+    . /opt/conda/etc/profile.d/conda.sh
+    conda activate "${CONDA_ENV_NAME}"
+fi

casperbox-0.2.1/src/casperbox/assets/common/rootfs/etc/ssh/sshd_config.d/casper.conf

@@ -0,0 +1,8 @@
+# casperbox: password login only, no root login
+PasswordAuthentication yes
+PubkeyAuthentication no
+PermitRootLogin no
+PermitEmptyPasswords no
+UsePAM yes
+X11Forwarding yes
+PrintMotd no

casperbox-0.2.1/src/casperbox/assets/common/rootfs/usr/local/bin/entrypoint.sh

@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+# Container entrypoint (runs as root):
+#   1. Set the user password from CONTAINER_PWD and the VNC password from VNC_PASSWORD
+#   2. Start sshd (22) and vncserver :1 (5901)
+#   3. Stay in the foreground and clean up on stop signals
+set -euo pipefail
+
+log() { echo "[entrypoint] $*"; }
+
+# shellcheck disable=SC1091
+. /etc/casper/toolflow.env
+user="${CASPER_USER}"
+group="$(id -gn "${user}")"
+home_dir="/home/${user}"
+
+: "${CONTAINER_PWD:?CONTAINER_PWD is not set}"
+VNC_PASSWORD="${VNC_PASSWORD:-${CONTAINER_PWD}}"
+VNC_GEOMETRY="${VNC_GEOMETRY:-1920x1080}"
+if [[ ! "${VNC_GEOMETRY}" =~ ^[0-9]+x[0-9]+$ ]]; then
+    log "Invalid VNC_GEOMETRY: ${VNC_GEOMETRY}, using 1920x1080"
+    VNC_GEOMETRY=1920x1080
+fi
+
+# ---- Passwords ----
+log "Setting password for user ${user}"
+printf '%s:%s\n' "${user}" "${CONTAINER_PWD}" | chpasswd
+
+log "Setting VNC password"
+install -d -m 700 -o "${user}" -g "${group}" "${home_dir}/.vnc"
+printf '%s\n' "${VNC_PASSWORD}" | vncpasswd -f > "${home_dir}/.vnc/passwd"
+chown "${user}:${group}" "${home_dir}/.vnc/passwd"
+chmod 600 "${home_dir}/.vnc/passwd"
+if [[ ! -f "${home_dir}/.vnc/xstartup" ]]; then
+    install -m 755 -o "${user}" -g "${group}" /opt/casper/vnc/xstartup "${home_dir}/.vnc/xstartup"
+fi
+unset CONTAINER_PWD VNC_PASSWORD
+
+# ---- Vivado paths (mounted at the same path as on the host) ----
+# Two layouts are supported: <VIVADO_DIR>/Vivado/<version>/settings64.sh or <VIVADO_DIR>/settings64.sh
+: "${VIVADO_DIR:?VIVADO_DIR is not set}"
+xilinx_path=""
+composer_path=""
+if [[ -r "${VIVADO_DIR}/Vivado/${VIVADO_VERSION}/settings64.sh" ]]; then
+    xilinx_path="${VIVADO_DIR}/Vivado/${VIVADO_VERSION}"
+    [[ -d "${VIVADO_DIR}/Model_Composer/${VIVADO_VERSION}" ]] \
+        && composer_path="${VIVADO_DIR}/Model_Composer/${VIVADO_VERSION}"
+elif [[ -r "${VIVADO_DIR}/settings64.sh" ]]; then
+    xilinx_path="${VIVADO_DIR}"
+else
+    log "Warning: settings64.sh for Vivado ${VIVADO_VERSION} not found under ${VIVADO_DIR}, please check VIVADO_DIR"
+fi
+log "Vivado: ${xilinx_path:-<not found>}"
+{
+    echo "# Generated by the entrypoint at container startup"
+    printf "VIVADO_DIR='%s'\n" "${VIVADO_DIR}"
+    printf "XILINX_PATH='%s'\n" "${xilinx_path}"
+    printf "COMPOSER_PATH='%s'\n" "${composer_path}"
+} > /etc/casper/runtime.env
+chmod 644 /etc/casper/runtime.env
+
+# ---- sshd ----
+ssh-keygen -A >/dev/null
+mkdir -p /run/sshd
+log "Starting sshd"
+/usr/sbin/sshd
+
+# ---- vncserver ----
+rm -f /tmp/.X1-lock /tmp/.X11-unix/X1
+log "Starting vncserver :1 (${VNC_GEOMETRY})"
+su - "${user}" -c "vncserver :1 -geometry ${VNC_GEOMETRY} -depth 24 -localhost no -SecurityTypes VncAuth"
+
+cleanup() {
+    log "Stopping services"
+    su - "${user}" -c "vncserver -kill :1" >/dev/null 2>&1 || true
+    pkill -TERM -x sshd 2>/dev/null || true
+    exit 0
+}
+trap cleanup TERM INT
+
+log "Container ready (toolflow ${TOOLFLOW_VERSION})"
+sleep infinity &
+wait $!

casperbox-0.2.1/src/casperbox/assets/common/scripts/config_mlib_devel.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+# Configure mlib_devel (runs as the container user):
+#   1. Clone mlib_devel and device-tree-xlnx into ~/toolflow
+#   2. Install mlib_devel's python dependencies into the conda env
+#   3. Generate mlib_devel/startsg.local
+set -euo pipefail
+
+: "${MLIB_DEVEL_REPO:?}" "${MLIB_DEVEL_BRANCH:?}"
+: "${DEVICE_TREE_XLNX_REPO:?}" "${DEVICE_TREE_XLNX_BRANCH:?}"
+: "${CONDA_ENV_NAME:?}" "${VIVADO_VERSION:?}"
+CONDA_DIR="${CONDA_DIR:-/opt/conda}"
+GIT_CLONE_DEPTH="${GIT_CLONE_DEPTH:-1}"
+
+toolflow_dir="${HOME}/toolflow"
+mlib_dir="${toolflow_dir}/mlib_devel"
+dt_dir="${toolflow_dir}/device-tree-xlnx"
+
+depth_args=()
+if [[ "${GIT_CLONE_DEPTH}" != "0" ]]; then
+    depth_args=(--depth "${GIT_CLONE_DEPTH}")
+fi
+
+mkdir -p "${toolflow_dir}"
+
+echo ">>> Cloning mlib_devel (${MLIB_DEVEL_BRANCH})"
+git clone "${depth_args[@]}" --single-branch --branch "${MLIB_DEVEL_BRANCH}" \
+    "${MLIB_DEVEL_REPO}" "${mlib_dir}"
+
+echo ">>> Cloning device-tree-xlnx (${DEVICE_TREE_XLNX_BRANCH})"
+git clone "${depth_args[@]}" --single-branch --branch "${DEVICE_TREE_XLNX_BRANCH}" \
+    "${DEVICE_TREE_XLNX_REPO}" "${dt_dir}"
+
+echo ">>> Installing mlib_devel dependencies into conda env ${CONDA_ENV_NAME}"
+# shellcheck disable=SC1091
+source "${CONDA_DIR}/etc/profile.d/conda.sh"
+conda activate "${CONDA_ENV_NAME}"
+python -m pip install --no-cache-dir --upgrade pip
+# requirements.txt has -e git+... dependencies; put their sources in ~/toolflow/src
+(cd "${mlib_dir}" && python -m pip install --no-cache-dir --src "${toolflow_dir}/src" -r requirements.txt)
+
+echo ">>> Generating ${mlib_dir}/startsg.local"
+cat > "${mlib_dir}/startsg.local" <<EOF
+# Generated by casperbox at image build time
+# Vivado is mounted at the host path; the entrypoint writes /etc/casper/runtime.env at container startup
+[ -r /etc/casper/runtime.env ] && . /etc/casper/runtime.env
+export XILINX_PATH COMPOSER_PATH
+export PLATFORM=lin64
+export JASPER_BACKEND=vivado
+export XLNX_DT_REPO_PATH=${dt_dir}
+#export MATLAB_PATH=/path/to/matlab
+# python: shells activate conda env ${CONDA_ENV_NAME} automatically via /etc/profile.d/casper.sh
+EOF
+
+echo "mlib_devel configured: ${mlib_dir}"