From 72e57174c6a6fb92e44cc64ca44e48ecbbff26fe Mon Sep 17 00:00:00 2001
From: Audiobuzz <audiobuzz@gmail.com>
Date: Fri, 19 Jun 2026 02:05:51 +0000
Subject: [PATCH] disable stig for now

---
 diskless.pkr.hcl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/diskless.pkr.hcl b/diskless.pkr.hcl
index ac8cde7..cb01190 100644
--- a/diskless.pkr.hcl
+++ b/diskless.pkr.hcl
@@ -133,7 +133,7 @@ variable "boot_splash" {
 variable "enable_stig" {
   type        = bool
   description = "true (default): apply DISA STIG hardening (OpenSCAP + SSG) with a diskless/UKI/kiosk tailoring (files/stig/diskless-tailoring.xml), bake STIG kernel params into the UKI cmdline, and emit a deviations report. false: skip hardening entirely — escape hatch if a build regresses the boot/secure-path bench. FIPS is OFF and audit offload is LOCAL-only regardless (see docs/stig-deviations.md)."
-  default     = true
+  default     = false
 }
 
 variable "debug_shell" {