ks: drop removed auth cmd, collapse multiline part/logvol, drop unsupported --hash flag
This commit is contained in:
parent
f1b44bc218
commit
f6a89d16f1
1 changed files with 4 additions and 6 deletions
|
|
@ -23,24 +23,22 @@ network --bootproto=dhcp --device=link --activate --hostname=veilor-os
|
||||||
firewall --enabled --service=ssh
|
firewall --enabled --service=ssh
|
||||||
|
|
||||||
# ── Identity (zero-prompt; only LUKS passphrase asked at install) ──
|
# ── Identity (zero-prompt; only LUKS passphrase asked at install) ──
|
||||||
|
# Note: `auth` command removed in pykickstart 3.x — defaults (sha512 shadow) apply.
|
||||||
rootpw --lock
|
rootpw --lock
|
||||||
user --name=admin --groups=wheel --gecos="veilor admin" --password="" --plaintext
|
user --name=admin --groups=wheel --gecos="veilor admin" --password="" --plaintext
|
||||||
auth --useshadow --passalgo=sha512
|
|
||||||
|
|
||||||
# ── Bootloader: kernel hardening flags ──
|
# ── Bootloader: kernel hardening flags ──
|
||||||
bootloader --location=mbr --append="lockdown=integrity slab_nomerge init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on vsyscall=none"
|
bootloader --location=mbr --append="lockdown=integrity slab_nomerge init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on vsyscall=none"
|
||||||
|
|
||||||
# ── Disk: BIOS+UEFI, LUKS2, btrfs subvols, zram swap (no disk swap) ──
|
# ── Disk: BIOS+UEFI, LUKS2, btrfs subvols, zram swap (no disk swap) ──
|
||||||
|
# Note: kickstart commands must be single-line — backslash continuations not supported.
|
||||||
zerombr
|
zerombr
|
||||||
clearpart --all --initlabel
|
clearpart --all --initlabel
|
||||||
reqpart --add-boot
|
reqpart --add-boot
|
||||||
part /boot --fstype=ext4 --size=1024 --asprimary
|
part /boot --fstype=ext4 --size=1024 --asprimary
|
||||||
part pv.veilor --size=1 --grow --encrypted --luks-version=luks2 \
|
part pv.veilor --size=1 --grow --encrypted --luks-version=luks2 --pbkdf=argon2id --pbkdf-memory=1048576 --pbkdf-time=9000 --cipher=aes-xts-plain64
|
||||||
--pbkdf=argon2id --pbkdf-memory=1048576 --pbkdf-iterations=9 \
|
|
||||||
--cipher=aes-xts-plain64 --hash=sha512
|
|
||||||
volgroup veilor pv.veilor
|
volgroup veilor pv.veilor
|
||||||
logvol / --vgname=veilor --name=root --fstype=btrfs --size=1 --grow \
|
logvol / --vgname=veilor --name=root --fstype=btrfs --size=1 --grow --mkfsoptions=--mixed
|
||||||
--mkfsoptions="--mixed"
|
|
||||||
|
|
||||||
# ── Packages ──
|
# ── Packages ──
|
||||||
%packages --excludedocs
|
%packages --excludedocs
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue