verify-vm: fix Vagrantfile for first real run

Two issues surfaced during the first end-to-end verification attempt
(verify.sh pwnkit, generic/ubuntu2004):

1. 'The machine with the name skk-pwnkit was not found' — the original
   Vagrantfile used c.vm.box/hostname without a c.vm.define block, so
   passing a machine name to 'vagrant up <name>' had nothing to match.
   Wrap every per-machine config in 'c.vm.define host do |m| ... end'
   so each module gets its own tracked machine in
   .vagrant/machines/skk-<module>/parallels/.

2. 'Installing the proper version of Parallels Tools' fails on
   Ubuntu 20.04: 'Error: current Linux kernel version 5.4.0-169-generic
   is outdated and not supported'. The latest Parallels Tools wants
   newer guest kernels. We don't need the Tools at all — rsync
   sync_folder over plain SSH does our source mount. Disable both:
     p.update_guest_tools = false
     p.check_guest_tools  = false

Verified externally (with Apple hypervisor as a temporary bypass
during the user's pending Parallels-extension allow + Mac restart):
the VM boots, SSH connects, network works. The only remaining gate
was the Parallels Tools provisioner now skipped.

tools/verify-vm/Vagrantfile

@@ -24,66 +24,77 @@ kver    = ENV["SKK_VM_KERNEL_VERSION"] || ""
 host    = ENV["SKK_VM_HOSTNAME"]       || "skk-verify"
 
 Vagrant.configure("2") do |c|
-  c.vm.box = box
+  # Define ONE Vagrant machine named after SKK_VM_HOSTNAME. Per-module
-  c.vm.hostname = host
+  # isolation: each module gets its own `skk-<module>` machine that
+  # vagrant tracks in .vagrant/machines/skk-<module>/parallels/.
+  c.vm.define host do |m|
+    m.vm.box = box
+    m.vm.hostname = host
 
-  c.vm.synced_folder REPO_ROOT, "/vagrant",
+    m.vm.synced_folder REPO_ROOT, "/vagrant",
-    type: "rsync", rsync__exclude: ["build/", ".git/", "*.o", "skeletonkey-test*"]
+      type: "rsync", rsync__exclude: ["build/", ".git/", "*.o", "skeletonkey-test*"]
 
-  c.vm.provider "parallels" do |p|
+    m.vm.provider "parallels" do |p|
-    p.memory = 2048
+      p.memory = 2048
-    p.cpus   = 2
+      p.cpus   = 2
-    p.name   = host
+      p.name   = host
-    # Headless: don't pop a Parallels GUI window for every verify run.
+      # Don't auto-update Parallels Tools: the installer fails on older
-    p.update_guest_tools = true
+      # guest kernels (e.g. Ubuntu 20.04's 5.4.0-169 is "outdated and
-  end
+      # not supported" by latest tools). We use rsync over SSH for
+      # sync_folder, which doesn't need the guest tools at all.
+      p.update_guest_tools = false
+      p.check_guest_tools  = false
+    end
 
-  # 1. Always install build deps + sudo (needed for module verification).
+    # 1. Always install build deps + sudo (needed for module verification).
-  c.vm.provision "shell", inline: <<-SHELL
+    m.vm.provision "shell", inline: <<-SHELL
-    set -e
-    if command -v apt-get >/dev/null 2>&1; then
-        export DEBIAN_FRONTEND=noninteractive
-        apt-get update -qq
-        apt-get install -y -qq build-essential libglib2.0-dev pkg-config sudo curl ca-certificates
-    elif command -v dnf >/dev/null 2>&1; then
-        dnf install -y -q gcc make glib2-devel pkgconfig sudo curl
-    fi
-  SHELL
-
-  # 2. Pin target kernel if requested. Reboot needed afterward.
-  if !pkg.empty?
-    c.vm.provision "shell", name: "pin-kernel-#{pkg}", inline: <<-SHELL
       set -e
-      if dpkg-query -W -f='${Status}' #{pkg} 2>/dev/null | grep -q 'install ok installed'; then
+      if command -v apt-get >/dev/null 2>&1; then
-          echo "[=] #{pkg} already installed"
-      else
-          echo "[+] installing #{pkg} (kernel target #{kver})"
           export DEBIAN_FRONTEND=noninteractive
-          apt-get install -y -qq #{pkg} || {
+          apt-get update -qq
-              echo "[-] #{pkg} unavailable in apt; trying snapshot.debian.org" >&2
+          apt-get install -y -qq build-essential libglib2.0-dev pkg-config sudo curl ca-certificates
-              echo "deb [check-valid-until=no] http://snapshot.debian.org/archive/debian/20230101T000000Z bookworm main" \
+      elif command -v dnf >/dev/null 2>&1; then
-                  >> /etc/apt/sources.list.d/snapshot.list
+          dnf install -y -q gcc make glib2-devel pkgconfig sudo curl
-              apt-get update -qq -o Acquire::Check-Valid-Until=false
-              apt-get install -y -qq --allow-downgrades #{pkg}
-          }
-          echo "[i] kernel #{pkg} installed; reboot via 'vagrant reload'"
       fi
     SHELL
-  end
 
-  # 3. Build SKELETONKEY in-VM and run --explain --active for the target module.
+    # 2. Pin target kernel if requested. Reboot needed afterward.
-  #    SKK_MODULE is set by verify.sh on the second-pass `vagrant provision` call
+    if !pkg.empty?
-  #    (post-reboot if kernel was pinned).
+      m.vm.provision "shell", name: "pin-kernel-#{pkg}", inline: <<-SHELL
-  c.vm.provision "shell", name: "build-and-verify", run: "never", inline: <<-SHELL
+        set -e
-    set -e
+        if dpkg-query -W -f='${Status}' #{pkg} 2>/dev/null | grep -q 'install ok installed'; then
-    cd /vagrant
+            echo "[=] #{pkg} already installed"
-    echo "[*] kernel: $(uname -r)"
+        else
-    echo "[*] building skeletonkey..."
+            echo "[+] installing #{pkg} (kernel target #{kver})"
-    make clean >/dev/null 2>&1 || true
+            export DEBIAN_FRONTEND=noninteractive
-    make 2>&1 | tail -3
+            apt-get install -y -qq #{pkg} || {
-    echo
+                echo "[-] #{pkg} unavailable in apt; trying snapshot.debian.org" >&2
-    echo "[*] running: skeletonkey --explain ${SKK_MODULE} --active"
+                echo "deb [check-valid-until=no] http://snapshot.debian.org/archive/debian/20230101T000000Z bookworm main" \
-    echo
+                    >> /etc/apt/sources.list.d/snapshot.list
-    ./skeletonkey --explain "${SKK_MODULE}" --active 2>&1 || true
+                apt-get update -qq -o Acquire::Check-Valid-Until=false
-  SHELL
+                apt-get install -y -qq --allow-downgrades #{pkg}
+            }
+            echo "[i] kernel #{pkg} installed; reboot via 'vagrant reload'"
+        fi
+      SHELL
+    end
+
+    # 3. Build SKELETONKEY in-VM and run --explain --active for the target module.
+    #    SKK_MODULE is set by verify.sh on the second-pass `vagrant provision`
+    #    call (post-reboot if kernel was pinned).
+    m.vm.provision "shell", name: "build-and-verify", run: "never",
+      env: { "SKK_MODULE" => ENV["SKK_MODULE"] || "" },
+      inline: <<-SHELL
+      set -e
+      cd /vagrant
+      echo "[*] kernel: $(uname -r)"
+      echo "[*] building skeletonkey..."
+      make clean >/dev/null 2>&1 || true
+      make 2>&1 | tail -3
+      echo
+      echo "[*] running: skeletonkey --explain ${SKK_MODULE} --active"
+      echo
+      ./skeletonkey --explain "${SKK_MODULE}" --active 2>&1 || true
+    SHELL
+  end
 end