{# vim: set ft=sh.jinja : -#}
bootloader --location none
clearpart --all --initlabel --disklabel msdos
part /boot/efi --fstype vfat --size 128 --label RASPBERRYPI

timesource --ntp-pool 2.fedora.pool.ntp.org

%packages --exclude-weakdeps
bcm2711-firmware
bcm283x-overlays
uboot-images-armv8
%end

{% include "fedora-common.ks" %}

%post --erroronfail
cp -P /usr/share/uboot/rpi_arm64/u-boot.bin /boot/efi/rpi-u-boot.bin

grubby --args='quiet systemd.show_status=1' --update-kernel=ALL

systemctl enable chrony-wait
# Ensure clock is synchronized before trying to get host certs signed
mkdir -p /etc/systemd/system/ssh-host-cert-sign@.service.d
cat > /etc/systemd/system/ssh-host-cert-sign@.service.d/time-sync.conf <<EOF
[Unit]
After=time-sync.target
Wants=time-sync.target
Before=sshd.service
EOF
%end