workstation: packages.txt — add provisioner build deps + uncaptured core tools

setup-devvm.sh now needs golang-go (builds t3-dispatch in section 9) and uses unzip
(kubelogin extraction); neither was in the manifest, so a fresh box would skip the
t3-dispatch build. Also add build-essential (cgo / npm native modules) + core tools
that were manually-installed but uncaptured (rsync, wget, tree, shellcheck). Noted
gh as non-apt (GitHub's own repo). All verified to resolve in apt.

[ci skip]

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-06-10 09:08:53 +00:00
parent 312c418a9a
commit 05f928931f

View file

@ -15,9 +15,19 @@ python3
python3-yaml
python3-pip
podman
# build/runtime deps of setup-devvm.sh itself (added 2026-06-10 reproducibility audit):
golang-go # builds the t3-dispatch binary (setup-devvm.sh section 9)
unzip # extracts the kubelogin release zip (section 3; python3 zipfile is the fallback)
build-essential # cgo + npm native-module builds
# core workstation tools (were manually-installed, not captured in the manifest):
rsync
wget
tree
shellcheck
# --- installed by setup-devvm.sh via NON-apt paths (not apt-installable) ---
# nodejs + npm -> NodeSource repo (claude-code needs node >= 18; distro nodejs is too old)
# gh (GitHub CLI) -> GitHub's own apt repo (cli.github.com), NOT in the default Ubuntu repos
# @anthropic-ai/claude-code -> npm install -g
# kubectl -> k8s apt repo OR pinned binary (already present on devvm)
# vault -> HashiCorp apt repo OR pinned binary (already present on devvm)