Merge nucleic/quiet-iris-lemur-vcct into dev

mkimage/profiles/vm-desktop.pkgs

@@ -16,6 +16,11 @@ systemd
 systemd-sysv
 systemd-resolved
 udev
+# kmod (depmod/modprobe) is required even though no linux-image is — see vm.pkgs for the full
+# reasoning. Short version: --variant=apt skips priority:important, udev pulls only libkmod2, and the
+# external kernel's modules arrive with no modules.dep, so nucleic-modsetup needs depmod/modprobe to
+# load vsock (a MODULE on modern Ubuntu kernels). Without it the guest agent can never bind AF_VSOCK.
+kmod
 dbus
 dbus-user-session
 sudo

mkimage/profiles/vm.pkgs

@@ -20,3 +20,12 @@ systemd
 systemd-sysv
 systemd-resolved
 udev
+# kmod (depmod/modprobe) is required even though no linux-image is. --variant=apt installs only
+# essential+apt, so priority:important packages like kmod are absent, and udev pulls libkmod2 (the
+# library) but not the binaries. The external kernel's modules ride in on the two-phase payload with
+# no modules.dep, so nucleic-modsetup runs `depmod` + `modprobe vmw_vsock_virtio_transport` on every
+# boot to make them loadable — and modern Ubuntu kernels ship vsock as a MODULE. Without kmod that
+# unit is silently inert (every command "not found", swallowed by its `|| true`), vsock never loads,
+# and the guest agent cannot bind AF_VSOCK: the guest boots to a login prompt and the host times out
+# waiting for a ping.
+kmod