# Kickstart for the Packer build VM only — this machine is thrown away;
# its disk contents become the diskless root tree.
text
lang en_AU.UTF-8
keyboard us
timezone Australia/Adelaide --utc

# Throwaway credential for the Packer SSH communicator.
# MUST match var.build_password in diskless.pkr.hcl.
rootpw --plaintext packer-build-only

network --bootproto=dhcp --activate
firewall --disabled
selinux --enforcing

# Simple single partition: we only ship the file tree, not the disk layout
zerombr
clearpart --all --initlabel
part / --fstype=xfs --grow

bootloader --location=mbr
reboot

%packages --excludedocs
# Install-time set kept to what the minimal ISO's BaseOS repo reliably carries
# (core + sshd + chrony). The diskless tooling — wpa_supplicant, tpm2-tools,
# tpm2-tss, nvme-cli, cryptsetup, dracut-network, openssl — is installed by the
# Packer shell provisioner from the online repos *before* the initramfs is
# built, so the build does not depend on those packages being bundled on
# whichever ISO variant (minimal or dvd) is used here.
@^minimal-environment
kernel
openssh-server
chrony
-firewalld
%end

%post
# Permit the Packer communicator (image hygiene step disables this later
# if desired; diskless hosts should get real SSH config from your config mgmt)
sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config
%end