# Examples

## `substrate-first-node.lock`

What an Arch machine must be before a mesh exists — the first steps of the bootstrap in
[novox/hq `07-the-substrate.md`](https://git.novox.be/novox/hq): a container runtime, a store
running, and the control plane's database created inside it.

**It stops there**, and the file says why: loading the control plane's schema and starting the
control plane are the next two steps, and there is no control plane yet. A bundle naming one
would be a bundle that cannot be applied.

Build a host carrying it:

```
make host SYSTEM=arch BUNDLE=examples/substrate-first-node.lock
```

**The image reference has to be replaced before this is useful.** It is written as
`REGISTRY/postgres@DIGEST` because the digest belongs to whatever registry serves it — in the
lab, one the scenario raises, which reports its digests when it comes up. That is not a
placeholder to be tidied away: a bundle is built *for a target*, and which registry that target
pulls from is part of the target.

Verified end to end in a lab machine with no route out: five resources applied, idempotent on a
second run, and `mesh` present in the store afterwards.