# Kernel boot snippets (trusted)

Same execution rules as `../rc.d/.README`: only **digit-prefixed** filenames run, in
lexicographic order, after `rc.local` in the stock kernel boot graph.

## Holesail (bundled `ctx.bare.holesail`)

Guest `/bin` and `/boot/init.js` scripts are **not** Node modules: use **`ctx.bare.holesail`**
(the class from the drive bundle under `/lib/bare/bundles/holesail.js`), not `require('holesail')`.

Booter-side operators use initd unit **`bare-holesail`** (on by default in managed mode; **`/bin/holesail`**
for persisted tunnels), or the early booter path — see
`handbook/04-the-booter-runtime.md` and env vars `BARE_OS_HOLESAIL_*`. Upstream **holesail** is
**AGPL-3.0**.