Merge nucleic/gentle-willow-quail-cjp3 into dev

mkimage/hooks/00-identity.sh

@@ -44,6 +44,10 @@ echo "$ROLE" > "$R/etc/naros/role"
 # Capability manifest (NAROS.md §6.3). Base fields here; toolchain entries are appended
 # by the tiers that install them (agent-tier hook, N2). Versions of Nucleic packages are
 # queryable via dpkg, listed here for one-stop reads.
+#
+# kernel_tag is the suffix naros-identity's preloaded shim appends to uname(2)'s release
+# (§2.3) — recorded so a reader can tell the narOS marker apart from the host kernel's own
+# version, and strip it. narOS builds no kernel; the tag is identity, not a kernel build.
 nash_ver="$(chroot "$R" dpkg-query -W -f '${Version}' nash 2>/dev/null || echo null)"
 [ "$nash_ver" = null ] || nash_ver="\"$nash_ver\""
 cat > "$R/etc/naros/manifest.json" <<EOF
@@ -55,6 +59,7 @@ cat > "$R/etc/naros/manifest.json" <<EOF
   "variant": "$VARIANT",
   "flavor": "$FLAVOR",
   "arch": "$NAROS_ARCH",
+  "kernel_tag": "-naros$NAROS_VERSION",
   "debian": { "suite": "$NAROS_SUITE", "snapshot": "$NAROS_SNAPSHOT" },
   "nash": $nash_ver,
   "toolchains": {},