Initial commit

http/ks.cfg

@@ -0,0 +1,42 @@
+# Kickstart for the Packer build VM only — this machine is thrown away;
+# its disk contents become the diskless root tree.
+text
+lang en_AU.UTF-8
+keyboard us
+timezone Australia/Adelaide --utc
+
+# Throwaway credential for the Packer SSH communicator.
+# MUST match var.build_password in diskless.pkr.hcl.
+rootpw --plaintext packer-build-only
+
+network --bootproto=dhcp --activate
+firewall --disabled
+selinux --enforcing
+
+# Simple single partition: we only ship the file tree, not the disk layout
+zerombr
+clearpart --all --initlabel
+part / --fstype=xfs --grow
+
+bootloader --location=mbr
+reboot
+
+%packages --excludedocs
+@^minimal-environment
+kernel
+dracut-network
+openssh-server
+wpa_supplicant
+tpm2-tools
+nvme-cli
+cryptsetup
+chrony
+-plymouth
+-firewalld
+%end
+
+%post
+# Permit the Packer communicator (image hygiene step disables this later
+# if desired; diskless hosts should get real SSH config from your config mgmt)
+sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config
+%end