GTK4/WebKitGTK 6.0 build stack with dev headers, QEMU VM module, and automatic pkg-config resolution

- feat(desktop): upgrade from GTK3 to GTK4 + WebKitGTK 6.0 + libsoup_3 + Vulkan — Wails 3 and WebKit-based GUI apps can now build and run inside the container
- feat(desktop): add .dev outputs (gtk4, glib, cairo, pango, harfbuzz, graphene, libepoxy, wayland, X11, etc.) and xorg.xorgproto — CGo/native builds find all headers and .pc files without manual flags
- fix(desktop): set PKG_CONFIG_PATH via home.sessionVariables to profile's lib/pkgconfig + share/pkgconfig — `pkg-config --cflags gtk4 x11` works out of the box instead of returning empty
- feat(vm): add vm.nix module with QEMU full-system emulation, swtpm TPM 2.0, and OVMF UEFI firmware (x86-only) — enables Windows/Linux VM provisioning from within a container
- feat(build): add wimlib for WIM/ESD archive manipulation (x86-only) — supports Windows ISO assembly workflows
- chore(flake): enable x86_64-linux in nix flake checks — CI validates all stacks on x86 in addition to aarch64

Author: DimmKirr

nixhome/flake.nix

@@ -320,6 +320,7 @@
         };
       in map check packages;
     in {
+      x86_64-linux = mkCheck "x86_64-linux";
       aarch64-linux = mkCheck "aarch64-linux";
       aarch64-darwin = mkCheck "aarch64-darwin";
     };
@@ -353,6 +354,7 @@
         packages = cfg.config.home.packages;
       in builtins.deepSeq (map (p: p.drvPath) packages) (builtins.length packages);
     in {
+      x86_64-linux = mkStrictCheck "x86_64-linux";
       aarch64-linux = mkStrictCheck "aarch64-linux";
       aarch64-darwin = mkStrictCheck "aarch64-darwin";
     };

nixhome/modules/build.nix

@@ -28,6 +28,8 @@ in {
       flex
       bison
       libxslt # libxslt1-dev
+    ] ++ lib.optionals pkgs.stdenv.isx86_64 [
+      wimlib # WIM/ESD archive library — depends on syslinux (x86-only)
     ];
   };
 }

nixhome/modules/desktop/default.nix

@@ -143,29 +143,53 @@ in
     # Terminal emulator — launched from WM menu
     xterm
 
-    # X11 client libraries
+    # ── X11 client libraries ─────────────────────────────────────────────
     xorg.libX11
     xorg.libXcursor
     xorg.libxkbfile
     xorg.libXrandr
 
-    # Graphics / rendering libraries
-    cairo # 2D vector graphics (libcairo2)
-    fontconfig # font configuration (libfontconfig)
-    freetype # font rendering (libfreetype6)
-    libGL # OpenGL (libegl1-mesa / libgl1-mesa)
-    mesa  # Mesa 3D — provides llvmpipe software rasterizer for GLX on Xvfb
-    glew # OpenGL extension library (libglew2.2)
-    libGLU # OpenGL utility library (libglu1-mesa)
-    libtiff # TIFF image library (libtiff5)
-
-    # D-Bus session bus — SNI tray icons (Electron, modern GTK) need it
+    # ── Graphics / rendering ───────────────────────────────────────────
+    cairo
+    fontconfig
+    freetype
+    vulkan-loader
+    libGL
+    mesa       # llvmpipe software rasterizer for GLX on Xvfb
+    glew
+    libGLU
+    libtiff
+
+    # ── D-Bus / tray ───────────────────────────────────────────────────
     dbus
-    # SNI→XEmbed proxy — bridges modern tray icons (Wails, Electron, GTK3+) to IceWM's XEmbed tray
-    snixembed
-
-    # GTK 3 — required by many GUI apps and dialogs
-    gtk3
+    snixembed  # SNI→XEmbed proxy for IceWM tray
+
+    # ── GTK4 / WebKit / Wails 3 build stack ────────────────────────────
+    # Runtime libraries
+    pkg-config
+    gtk4
+    webkitgtk_6_0
+    libsoup_3
+
+    # Dev headers (.pc files for CGo / native builds)
+    gtk4.dev
+    webkitgtk_6_0.dev
+    glib.dev
+    libsoup_3.dev
+    cairo.dev
+    pango.dev
+    harfbuzz.dev
+    gdk-pixbuf.dev
+    graphene.dev
+    libepoxy.dev
+    vulkan-loader.dev
+    xorg.xorgproto  # X protocol headers — transitive dep of x11.pc
+    xorg.libX11.dev
+    xorg.libXrandr.dev
+    xorg.libXi.dev
+    xorg.libXcursor.dev
+    libxkbcommon.dev
+    wayland.dev
 
     # wxWidgets GUI toolkit (libwxgtk3.2-1, libwxgtk-webview3.2-1)
     wxGTK32 # wxWidgets 3.2.x; attribute = wxGTK32, pname = "wxwidgets"
@@ -249,6 +273,7 @@ in
   # Mesa llvmpipe software rendering — headless container has no GPU.
   # Paths go through the profile symlink (stable across generations) rather
   # than hardcoded store hashes that break on rebuild.
+  home.sessionVariables.PKG_CONFIG_PATH = "${config.home.profileDirectory}/lib/pkgconfig:${config.home.profileDirectory}/share/pkgconfig";
   home.sessionVariables.LIBGL_ALWAYS_SOFTWARE = "1";
   home.sessionVariables.GALLIUM_DRIVER = "llvmpipe";
   home.sessionVariables.LIBGL_DRIVERS_PATH = "${config.home.profileDirectory}/lib/dri";

nixhome/modules/vm.nix

@@ -0,0 +1,26 @@
+# vm — QEMU virtualisation and disk-image tooling
+{pkgs, config, lib, ...}: let
+  cfg = config.devcell.modules.vm;
+in {
+  options.devcell.modules.vm = {
+    enable = lib.mkEnableOption "QEMU virtualisation: full system emulation (x86, ARM), disk image utilities, UEFI firmware";
+    meta = lib.mkOption {
+      type = lib.types.attrs;
+      readOnly = true;
+      default = {
+        description = "QEMU system emulation (x86_64, aarch64), qemu-img/qemu-nbd utilities, OVMF UEFI firmware, swtpm TPM emulator";
+        mcpServers = [];
+        sizeMb = 800;
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    home.packages = with pkgs; [
+      qemu       # full system emulation + utilities (use: qemu-system-x86_64, qemu-system-aarch64, qemu-img, qemu-nbd)
+      swtpm      # software TPM 2.0 emulator — required for Windows 11 guests
+    ] ++ lib.optionals pkgs.stdenv.isx86_64 [
+      OVMF       # UEFI firmware for x86_64 VMs — depends on syslinux (x86-only)
+    ];
+  };
+}

nixhome/stacks/ultimate.nix

@@ -21,6 +21,7 @@
     ../modules/shell.nix
     ../modules/social.nix
     ../modules/travel.nix
+    ../modules/vm.nix
     ../modules/wine.nix
   ];
 
@@ -36,6 +37,7 @@
   devcell.modules.security.enable = true;
   devcell.modules.social.enable = true;
   devcell.modules.travel.enable = true;
+  devcell.modules.vm.enable = true;
   devcell.modules.wine.enable = true;
   devcell.modules.plex.enable = true;  # from ../modules/media
 }