# Kickstart for the Packer build VM only — this machine is thrown away;
# its disk contents become the diskless root tree.
text
lang en_AU.UTF-8
keyboard us
timezone Australia/Adelaide --utc

# Throwaway credential for the Packer SSH communicator.
# MUST match var.build_password in diskless.pkr.hcl.
rootpw --plaintext packer-build-only

network --bootproto=dhcp --activate
firewall --disabled
selinux --enforcing

# Simple single partition: we only ship the file tree, not the disk layout
zerombr
clearpart --all --initlabel
part / --fstype=xfs --grow

bootloader --location=mbr
reboot

%packages --excludedocs
@^minimal-environment
kernel
dracut-network
openssh-server
wpa_supplicant
tpm2-tools
nvme-cli
cryptsetup
chrony
-plymouth
-firewalld
%end

%post
# Permit the Packer communicator (image hygiene step disables this later
# if desired; diskless hosts should get real SSH config from your config mgmt)
sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config
%end