VoidLinux-Guide/tools/install.example.conf at main · Nixort/VoidLinux-Guide · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# VoidLinux-Guide P1 installer configuration template.
# Copy outside version control and review every value before use.
# Never commit CRYPT_PASSPHRASE, HOME_CRYPT_PASSPHRASE, ROOT_PASSWORD or USER_PASSWORD.

# Whole disk only. Mounted disks, partitions, loop devices and live-root disks are refused.
TARGET_DISK=/dev/sdX
TARGET_ROOT=/mnt/voidlinux-guide

# Native targets only: x86_64 or aarch64; glibc or musl.
# Generic aarch64 is UEFI-only. Cross-architecture chroots are refused.
TARGET_ARCH=x86_64
TARGET_LIBC=glibc
BOOT_MODE=uefi

# Leave REPO_URL empty for automatic route selection. To switch mirrors, choose
# one allow-listed host: https://repo-default.voidlinux.org,
# https://repo-de.voidlinux.org, https://repo-fi.voidlinux.org or
# https://repo-fr.voidlinux.org. The script checks repodata before disk changes.
REPO_URL=''
TARGET_MIRROR_URL=''

# Layouts: single-root, root-home, root-home-swap, boot-encrypted-home.
# boot-encrypted-home is UEFI-only and requires ENCRYPTION=luks2-separate.
PARTITION_LAYOUT=single-root
ROOT_SIZE_GIB=32
BOOT_SIZE_GIB=2
SWAP_SIZE_GIB=4
ESP_SIZE_MIB=512

# Encryption: none, luks1-lvm, luks2-separate.
# `luks2-separate` is only for boot-encrypted-home. It creates plain /boot,
# then independent LUKS2 root and home volumes. Provide both protected
# passphrases in real non-interactive mode; do not store them in this file.
ENCRYPTION=none
CRYPT_CIPHER=aes-xts-plain64
CRYPT_KEY_SIZE=512
CRYPT_PASSPHRASE=''
HOME_CRYPT_PASSPHRASE=''
VG_NAME=voidvm
ROOT_LV_NAME=root
HOME_LV_NAME=home
SWAP_LV_NAME=swap
ROOT_CRYPT_NAME=voidroot
HOME_CRYPT_NAME=voidhome

HOSTNAME_VALUE=void
TARGET_USER=voiduser
TIMEZONE=UTC
LOCALE=en_US.UTF-8

DESKTOP=none
DISPLAY_PROTOCOL=auto
SESSION_MANAGER=auto
GPU=auto
NETWORK_MANAGER=0
FIREWALL=none
APPARMOR=0
ENABLE_SSH=0

# Hardware-security modes apply only to boot-encrypted-home / LUKS2.
# TPM2_MODE=clevis-tpm2 only installs and creates a manual handoff; it does not
# bind a token or remove the passphrase. FIDO2 is readiness-only. Secure Boot
# prepare runs sbctl setup but never enrolls firmware keys or enables Secure Boot.
TPM2_MODE=off
FIDO2_MODE=off
SECURE_BOOT_MODE=off

GENERATE_ROOT_PROFILE=1
GENERATE_USER_PROFILE=1
SHOW_QR=0
ROOT_PASSWORD=''
USER_PASSWORD=''

# Required for --non-interactive real execution.
CONFIRM_TOKEN=VOID_INSTALL