# helloworld

Gitea Actions sandbox demo on NAS (`nas-arm` runner).

- Host mode + kernel overlay + bwrap
- `apt install` only writes the per-job overlay upper
- Host rootfs template is read-only