# The vmix "PE": Apple's Recovery (BaseSystem.dmg) with one LaunchDaemon added
# that runs /Volumes/VMIX/run.sh as root at boot and powers off afterwards.
# BaseSystem is a plain (journaled) HFS+ volume that Linux can write with the
# hfsplus driver's force option — the pristine image's journal is empty, so this
# is safe. The kernel and boot.efi are untouched; launchd loads the extra plist
# from /System/Library/LaunchDaemons alongside its signed cache (verified on
# Tahoe 26.6.2). Same idea as AutoNBI/Imagr NetBoot images.
# Output: raw disk image (HFS+ volume with a partition table) that OpenCore boots.
{ pkgs, lib, ... }:
{ name ? "macos", recovery }:
pkgs.runCommand "${name}-pe.img" {
  nativeBuildInputs = with pkgs; [ dmg2img libguestfs-with-appliance ];
} ''
  echo "=== vmix: building the recovery PE from BaseSystem.dmg ==="
  dmg2img -s ${recovery} $out
  chmod +w $out
  guestfish -a $out <<GFS
  run
  mount-options force /dev/sda1 /
  mkdir-p /usr/libexec/vmix
  upload ${../guest/pe.sh} /usr/libexec/vmix/pe.sh
  chmod 0755 /usr/libexec/vmix/pe.sh
  upload ${../guest/ch.vmix.pe.plist} /System/Library/LaunchDaemons/ch.vmix.pe.plist
  chmod 0644 /System/Library/LaunchDaemons/ch.vmix.pe.plist
  ls /usr/libexec/vmix
  umount /
  GFS
  guestfish --ro -a $out -m /dev/sda1 ls /System/Library/LaunchDaemons | grep -q '^ch.vmix.pe.plist$' \
    || { echo "vmix: PE hook not installed"; exit 1; }
''