From 31c1af4aec346c9267319ed51cdbd315b0ff2d97 Mon Sep 17 00:00:00 2001
From: veilor <veilor@localhost>
Date: Thu, 30 Apr 2026 10:07:58 +0100
Subject: [PATCH] =?UTF-8?q?ks:=20hardcode=20releasever=3D43,=20add=20--ins?=
 =?UTF-8?q?tall=20on=20updates=20repo,=20add=20updates-testing=20=E2=80=94?=
 =?UTF-8?q?=20base=20ships=20outdated=20selinux-policy?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 kickstart/veilor-os.ks | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/kickstart/veilor-os.ks b/kickstart/veilor-os.ks
index 4c8359c..f8437d8 100644
--- a/kickstart/veilor-os.ks
+++ b/kickstart/veilor-os.ks
@@ -3,8 +3,14 @@
 # Build with livemedia-creator inside build/Containerfile.
 
 # ── Install source ──
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name=updates --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch"
+# Hard-code version (not $releasever) because lorax doesn't expand
+# inside kickstart `url`/`repo` directives. Updates repo critical:
+# base Fedora 43 ships selinux-policy 42.12 with pcre2-10.47-built
+# file_contexts.bin, which fails chroot %triggerin against host's
+# libselinux (built against pcre2 10.46). 43.7 in updates is rebuilt.
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+repo --name=updates --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64" --install
+repo --name=updates-testing --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f43&arch=x86_64" --cost=1500
 
 # ── Locale / keyboard / time (template — adjust per build) ──
 keyboard --xlayouts='us'