#!/bin/sh
# =============================================================================
#  THADD OS — live-build configuration (auto/config)
#  Base: Debian 12 "bookworm" · amd64 · hybrid BIOS/UEFI live ISO
#
#  THIS FILE'S LOCATION IS PART OF ITS CONTRACT: live-build reads
#  ./auto/config from the build directory (lb_config(1), FILES).  It lived
#  one directory deeper (iso/config/auto/config) for a while, which is why
#  an early desktop ISO was bootstrapped as Debian 11 with a main-only
#  archive area: live-build never read it and used its own defaults.
#  iso/build.sh runs it explicitly so the flags land on the command line.
# =============================================================================
set -e

PROFILE="${THADD_PROFILE:-desktop}"
VERSION="${THADD_VERSION:-$(date -u +%Y.%m.%d)}"

# GNU coreutils on some hosts still lack --no-tty semantics under CI; harmless.
export LC_ALL=C

lb config noauto \
    --mode debian \
    --distribution bookworm \
    --parent-distribution bookworm \
    --architecture amd64 \
    --linux-flavours amd64 \
    --archive-areas "main contrib non-free non-free-firmware" \
    --parent-archive-areas "main contrib non-free non-free-firmware" \
    --mirror-bootstrap "http://deb.debian.org/debian/" \
    --mirror-chroot "http://deb.debian.org/debian/" \
    --mirror-chroot-security "http://security.debian.org/debian-security/" \
    --mirror-binary "http://deb.debian.org/debian/" \
    --mirror-binary-security "http://security.debian.org/debian-security/" \
    --binary-image iso-hybrid \
    --debian-installer none \
    --memtest none \
    --initramfs live-boot \
    --apt-recommends false \
    --apt-indices false \
    --apt-options "--yes --no-install-recommends -o Acquire::Retries=5" \
    --debootstrap-options "--variant=minbase --include=ca-certificates,apt-transport-https,gnupg" \
    --firmware-chroot true \
    --compression xz \
    --chroot-squashfs-compression-type xz \
    --checksums sha256 \
    --bootappend-live "boot=live components quiet noswap username=thadd user-fullname=THADD hostname=thadd-os locales=en_US.UTF-8 keyboard-layouts=us timezone=UTC persistence persistence-label=THADD-PERSISTENCE" \
    --bootappend-live-failsafe "boot=live components username=thadd hostname=thadd-os locales=en_US.UTF-8 keyboard-layouts=us timezone=UTC nox11" \
    --image-name "THADD-OS-${VERSION}" \
    --iso-application "THADD OS ${VERSION} — One OS. Every Capability." \
    --iso-publisher "THADD OS Project — https://github.com/ThaddeusHackz/RDP-universal-" \
    --iso-volume "THADD_OS" \
    --initsystem systemd \
    --iso-preparer "THADD OS build system <noreply@thadd.os>" \
    --uefi-secure-boot disable \
    --bootloaders "syslinux,grub-efi" \
    --zsync false \
    "${@}"

# Profile-specific package list selection
if [ "$PROFILE" = "minimal" ]; then
    rm -f config/package-lists/20-desktop.list.chroot \
          config/package-lists/40-apps.list.chroot 2>/dev/null || true
fi

exit 0
