# SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
# SPDX-License-Identifier: Unlicense

[Match]
Distribution=debian

[Distribution]
Mirror=https://mirror.nl.leaseweb.net/debian/
Release=testing
Repositories=
	contrib
	non-free
	non-free-firmware

[Output]
Format=disk
Output=dssp5
@CacheDirectory=mkosi.cache/%d~%r~%a
@BuildDirectory=mkosi.builddir/%d~%r~%a
@OutputDirectory=mkosi.output
@WorkspaceDirectory=mkosi.workspace

[Content]
Autologin=yes
Bootable=yes
CleanPackageMetadata=no
Hostname=dssp5
InitrdPackages=
	dosfstools
	e2fsprogs
	libtss2-esys-3.0.2-0
	libtss2-mu0
	libtss2-rc0
	wireless-regdb
KernelCommandLine=
	security=selinux
	fbcon=font:TER16x32
	quiet
Keymap=us-euro
Locale=en_US.UTF-8
Packages=
	acl
	apt
	bash-completion
	ca-certificates
	coreutils
	cryptsetup-bin
	dbus-broker
	dbus-session-bus-common
	dbus-user-session
	diffutils
	dosfstools
	e2fsprogs
	fdisk
	findutils
	grep
	kbd
	kmod
	less
	libfido2-1
	libnss-myhostname
	libnss-mymachines
	libnss-resolve
	libnss-systemd
	libpam-systemd
	libqrencode4
	linux-image-generic
	locales
	make
	nano
	netcat-openbsd
	nftables
	openssh-server
	openssl
	policycoreutils
	polkitd
	procps
	python3
	quota
	qrencode
	sed
	strace
	systemd
	systemd-boot
	systemd-container
	systemd-resolved
	systemd-sysv
	systemd-timesyncd
	systemd-zram-generator
	tpm2-tools
	tree
	tzdata
	udev
	util-linux
	wireguard-tools
	xxd
	zsh
RemoveFiles=/work
RootPassword=
Timezone=Europe/Amsterdam
WithDocs=no

[Host]
QemuMem=2G
QemuSmp=2

[Validation]
SecureBoot=yes
SignExpectedPcr=yes