From b3ddf7040a1b308e6b5bc1e56f4d192d85294651 Mon Sep 17 00:00:00 2001
From: veilor <veilor@localhost>
Date: Thu, 30 Apr 2026 13:44:51 +0100
Subject: [PATCH] =?UTF-8?q?ks:=20drop=20veilor-firstboot/veilor-modules-lo?=
 =?UTF-8?q?ck=20from=20services=20line=20=E2=80=94=20enabled=20in=20%post?=
 =?UTF-8?q?=20after=20overlay?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 kickstart/veilor-os.ks | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/kickstart/veilor-os.ks b/kickstart/veilor-os.ks
index daa4bf1..cfc32f0 100644
--- a/kickstart/veilor-os.ks
+++ b/kickstart/veilor-os.ks
@@ -31,7 +31,9 @@ eula --agreed
 # vs 10.47). veilor-firstboot.service triggers `fixfiles -F onboot` and
 # `setenforce 1` on first boot to re-enable enforcing mode.
 selinux --permissive
-services --enabled=sshd,fail2ban,usbguard,tuned,auditd,firewalld,chronyd,sddm,veilor-firstboot,veilor-modules-lock
+# veilor-firstboot + veilor-modules-lock enabled via %post after overlay
+# copy (units don't exist yet at services-config phase).
+services --enabled=sshd,fail2ban,usbguard,tuned,auditd,firewalld,chronyd,sddm
 
 # ── Network / hostname ──
 network --bootproto=dhcp --device=link --activate --hostname=veilor-os