diff --git a/kickstart/veilor-os.ks b/kickstart/veilor-os.ks index ce25f48..cf2ab18 100644 --- a/kickstart/veilor-os.ks +++ b/kickstart/veilor-os.ks @@ -30,15 +30,11 @@ user --name=admin --groups=wheel --gecos="veilor admin" --password="" --plaintex # ── Bootloader: kernel hardening flags ── bootloader --location=mbr --append="lockdown=integrity slab_nomerge init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on vsyscall=none" -# ── Disk: BIOS+UEFI, LUKS2, btrfs subvols, zram swap (no disk swap) ── -# Note: kickstart commands must be single-line — backslash continuations not supported. -zerombr -clearpart --all --initlabel -reqpart --add-boot -part /boot --fstype=ext4 --size=1024 --asprimary -part pv.veilor --size=1 --grow --encrypted --luks-version=luks2 --pbkdf=argon2id --pbkdf-memory=1048576 --pbkdf-time=9000 --cipher=aes-xts-plain64 -volgroup veilor pv.veilor -logvol / --vgname=veilor --name=root --fstype=btrfs --size=1 --grow --mkfsoptions=--mixed +# ── Live ISO partitioning (flat — for live rootfs build only) ── +# NOTE: This is the *live* image kickstart. Final installed system uses +# a separate installer kickstart (kickstart/install.ks, planned v0.2.1) +# that does LUKS2 + btrfs subvols on the target disk. +part / --fstype=ext4 --size=8192 # ── Packages ── %packages --excludedocs