feat(dev-desktop): add Arch/Hyprland streaming dev desktop image

[swibrow]

Arch Linux dev workstation that streams a headless Hyprland session over Sunshine to any Moonlight client, with cloud tooling and AI coding agents preinstalled.

Contents

Hyprland 0.56.0, Sunshine 2026.516.143833, Claude Code / codex / gemini-cli / opencode, kubectl, helm, k9s, kubectx, stern, terraform, opentofu, aws-cli-v2, azure-cli, node, python, uv, go, rust, neovim, chezmoi.

Conventions this image bends

• amd64 only — archlinux has no official arm64 image, so platforms lists one entry.
• pacman packages float — Arch is rolling. The base digest, Sunshine, and the four npm agents are pinned with Renovate annotations. Pinning to an Arch Linux Archive snapshot is the follow-up if reproducibility becomes a requirement.
• Multi-process — a streamed desktop needs a compositor plus a stream server. Hyprland is PID 1 and starts the session via exec-once, so no supervisor or init framework is introduced.

Sunshine is installed from the upstream Arch package published as a GitHub release asset, which avoids pulling AUR and makepkg into the build.

Requires a DRM render node

The image cannot start without /dev/dri, even though it is headless. Aquamarine only builds a GBM allocator from a backend reporting drmFD() >= 0, and CHeadlessBackend::drmFD() returns -1. start-desktop checks for /dev/dri/renderD128 and exits with an actionable message rather than the opaque "no allocator available" error.

The same render node gives Sunshine VAAPI hardware encode.

Verification

Built for amd64 and the metadata.yaml test command exits 0 in the built image. whoami returns dev, and the missing-render-node guard was confirmed to fire.

Image is 5.6 GB uncompressed; Go, Rust, azure-cli and the desktop stack dominate.