# SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
# SPDX-License-Identifier: Unlicense

[Match]
Distribution=debian

[Distribution]
Mirror=https://mirror.nl.leaseweb.net/debian/
Release=testing
Repositories=
	contrib
	non-free
	non-free-firmware

[Output]
@BuildDirectory=mkosi.builddir
@OutputDirectory=mkosi.output
@PackageCacheDirectory=mkosi.cache
@WorkspaceDirectory=/tmp
Format=disk
Output=dssp5

[Content]
@Hostname=dssp5
@Keymap=us-euro
@Locale=en_US.UTF-8
@Timezone=Europe/Amsterdam
Autologin=yes
Bootable=yes
CleanPackageMetadata=no
InitrdPackages=
	dosfstools
	kmod
	wireless-regdb
KernelCommandLine=
	fbcon=font:TER16x32
	quiet
	security=selinux
Packages=
	acl
	apt
	attr
	bash-completion
	ca-certificates
	coreutils
	cryptsetup-bin
	dbus-broker
	dbus-session-bus-common
	dbus-user-session
	diffutils
	dosfstools
	e2fsprogs
	fdisk
	findutils
	grep
	kbd
	kmod
	less
	libfido2-1
	libnss-myhostname
	libnss-mymachines
	libnss-resolve
	libnss-systemd
	libpam-systemd
	libqrencode4
	linux-image-generic
	locales
	make
	nano
	netcat-openbsd
	nftables
	openssh-server
	openssl
	policycoreutils
	polkitd
	procps
	python3
	quota
	qrencode
	sed
	strace
	systemd
	systemd-boot
	systemd-container
	systemd-resolved
	systemd-sysv
	systemd-timesyncd
	systemd-zram-generator
	tpm2-tools
	tree
	tzdata
	udev
	util-linux
	wireguard-tools
	xxd
	zsh
RemoveFiles=/work
RootPassword=
WithDocs=no

[Host]
@QemuMem=2G
@QemuSmp=2
@RuntimeScratch=no

[Validation]
SecureBoot=yes
SignExpectedPcr=yes