image:
  distribution: "RaspberryPiOS"
  release: "bullseye"

source:
  downloader: debootstrap
  #InitDownloadREPO  
  url: http://raspbian.raspberrypi.org/raspbian
  keyserver: keys.openpgp.org
  keys:

  - |-
    -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: GnuPG v1.4.12 (GNU/Linux)

    mQENBE94wmkBCADPW5ga8ZyIsW0pym3c+o7l/N1ipRfs2+9HaEWeyPZS6wdTdSp3
    Wo0OOv3rGQDGclbvsrMZoJFzxfsADoMfPkToWg+pY4w3xkjZt4Mh7gO/kDsaOMDz
    OQS2JCHQ3BgysEdiSzy1dMf2N/ziKItOUK8t2gI3QWLwe9eXg+Uv4VUtQO+TRz7o
    qLMvbg32C1ahDfi416+Y7mopFTHh8qBOhZNGgdq240Vr6B9NCGywO2tl+8Nd87BS
    fVgCTPtvabcf1RChQd6yH4K5WS0IFt8h5vkcgpJXa7sxUyJH/ysnUchsYA+2B0cP
    UKUZrraRMfHuXhI2VNpRuZZSoSUn7/hkX4BlABEBAAG0Sk1pa2UgVGhvbXBzb24g
    KFJhc3BiZXJyeSBQaSBEZWJpYW4gYXJtaGYgQVJNdjYrVkZQKSA8bXB0aG9tcHNv
    bkBnbWFpbC5jb20+iQE4BBMBAgAiBQJPeMJpAhsDBgsJCAcDAgYVCAIJCgsEFgID
    AQIeAQIXgAAKCRCRZZONkP3dLqEKCADE++X4BtDYxB1mONtOsKSPWE7dPzOP/Is/
    x0+BnJahVf9rSZh26NWANwUMfVrZ9ImU+SHnFsuYGpJhb6mjauScXtfN4BrdptC3
    aPBhlyAUst23r/Cw4r4zWJuYerLNAsKmzO3Gjk8Yi6mH80UtgwWFKdQcdVTelyVI
    zRB/2RtilHtjpzHZGDeWi6wFxTGnd2wtHJ+h+HGSySofKAzM12ZtniTHZuTSijii
    I90thwiydBEG4uIcuMQRyBeu3r5wCk4v+L0a/HZ4hrH2nU/65OxQdSSnCSjSHqcg
    19T/+NN8hFQ51BSXdNJeGQRbPqB//6yA9zRMjFOhLhTod1sIeWEVuQENBE94wmkB
    CACgDGyg0/0h2cgf5BrEXtDAwvPwPDH4IxCgmHA7fqZ+IeXFXDCIKtOdFVEmLGQY
    yr6jL6M4P+DtgVnoru7jB8oPt0YcWRFztdPdIZgtL5E5rBDNusdSHn8DNXQizILm
    KBRdoVywqS4Peesu1RuW4srQk/5vaXtCTuAjANISJsOIa+NIHIXufFERZN2kdO+W
    Ch/IMYlmTsm3ino5a4kHL48H1LhVzUKLHR4yJ2K6W4HPCJZe6q8rJSqeyjtFUTu1
    bXZ0PI/AVAHfCTY3z6BXhhVrx64ArwxcWvsbOurnKVaypO47Dvn0k4z9QCasFu6i
    rmermJTDSmCEvqHDTm93xY5fABEBAAGJAR8EGAECAAkFAk94wmkCGwwACgkQkWWT
    jZD93S4swwgAojOdjjQh0PFy/2qpHlVBJiDW2PJIrgMtuy8JHgVOHFq1vNB5FEoj
    W/bxiok69OyKawu2cs6rg2eE3Ft5BoWErkXyBFYd77aa+E4wLp2bh5lNoY3TAO9y
    FhfDAkwViZ3P/BozL4uOcMKXLi+D5JmuTtRgtlI9/UjYG38kMju2wvZDxOiokA+S
    mpS3eF+NTMy5wxxHcMwBilX+Xm64cQp8EQROYXgjW4lEuJAaKWsS/ZEBqIeZHlaM
    RYDJ6Y2ubJVFpp8YYCvbU/CuUzPTs1wnTBseXAskwdUEms+5IxJV3ovy44gU8d73
    kDxVdsBg/Yhd7QORY6ZRi27AxYAsM3329g==
    =gzRN
    -----END PGP PUBLIC KEY BLOCK-----



  variant: minbase

targets:
  lxc:
    #create-message: |-
    #  You just created a {{ image.description }} container.

    config:
    - type: all
      before: 5
      content: |-
        lxc.include = LXC_TEMPLATE_CONFIG/debian.common.conf

    - type: user
      before: 5
      content: |-
        lxc.include = LXC_TEMPLATE_CONFIG/debian.userns.conf

    - type: all
      after: 4
      content: |-
        lxc.include = LXC_TEMPLATE_CONFIG/common.conf

    - type: user
      after: 4
      content: |-
        lxc.include = LXC_TEMPLATE_CONFIG/userns.conf
    - type: all
      content: |-
        lxc.arch = {{ image.architecture_personality }}

files:
- path: /etc/hostname
  generator: hostname

- path: /etc/hosts
  generator: hosts

- path: /etc/resolvconf/resolv.conf.d/original
  generator: remove

- path: /etc/resolvconf/resolv.conf.d/tail
  generator: remove

- path: /etc/machine-id
  generator: dump

- path: /var/lib/dbus/machine-id
  generator: remove

- path: /etc/network/interfaces
  generator: dump
  content: |-
    # This file describes the network interfaces available on your system
    # and how to activate them. For more information, see interfaces(5).

    # The loopback network interface
    auto lo
    iface lo inet loopback

    auto eth0
    iface eth0 inet dhcp

    source /etc/network/interfaces.d/*
  types:
  - container

#Unattended-Upgrade configuration
- path: /etc/apt/apt.conf.d/50unattended-upgrades
  generator: dump
  content: |-
   Unattended-Upgrade::Origins-Pattern {

   };

   Dpkg::Options {
     "--force-confdef";
     "--force-confold";
   };

   Unattended-Upgrade::Package-Blacklist {
     "mysql$";
     "mariadb$";
   };

   Unattended-Upgrade::AutoFixInterruptedDpkg "true";
   Unattended-Upgrade::MinimalSteps "false";
   Unattended-Upgrade::InstallOnShutdown "false";
   Unattended-Upgrade::Remove-Unused-Kernel-Packages "true";
   Unattended-Upgrade::Remove-Unused-Dependencies "true";
   //Unattended-Upgrade::Automatic-Reboot "true";
   //Unattended-Upgrade::Automatic-Reboot-WithUsers "true";
   //Unattended-Upgrade::Automatic-Reboot-Time "02:00";
   Unattended-Upgrade::SyslogEnable "true";

- path: /etc/apt/apt.conf.d/20auto-upgrades
  generator: dump
  content: |-
   APT::Periodic::Update-Package-Lists "1";
   APT::Periodic::Download-Upgradeable-Packages "1";
   APT::Periodic::AutocleanInterval "3";
   APT::Periodic::Unattended-Upgrade "1";

packages:
  manager: apt
  update: true
  cleanup: true
  sets:

  #Minimal pkgs
  - packages:
    - dialog
    - ifupdown
    - init
    - iproute2
    - iputils-ping
    - isc-dhcp-client
    - locales
    - netbase
    - net-tools
    - openssh-client
    - procps
    - unattended-upgrades
    - bash-completion
    action: install  

#Basic/Default pkgs    
  - packages:
    - nano
    - openssh-server
    action: install
    variants:
    - default



  repositories:
  - name: sources.list
    url: |-
      deb http://raspbian.raspberrypi.org/raspbian/  {{ image.release }} main contrib non-free rpi


actions:
- trigger: post-unpack
  action: |-
    #!/bin/sh
    #Disable apt Recommends and Suggests
    echo 'APT::Install-Recommends "false";' > /etc/apt/apt.conf.d/01Recommends
    echo 'APT::Install-Suggests "false";' > /etc/apt/apt.conf.d/01Suggests
    #ProxyCacheSetting
    echo '#CacheServer not set' > /etc/apt/apt.conf.d/01prox
- trigger: post-packages
  action: |-
    #!/bin/sh
    set -eux

    # Disable networkd (unused)
    systemctl mask systemd-networkd.service
    systemctl mask systemd-networkd.socket
    systemctl mask systemd-networkd-wait-online.service

    # Make sure the locale is built and functional
    echo en_US.UTF-8 UTF-8 >> /etc/locale.gen
    locale-gen en_US.UTF-8 UTF-8
    update-locale LANG=en_US.UTF-8

    # Cleanup underlying /run
    mount -o bind / /mnt
    rm -rf /mnt/run/*
    umount /mnt
    
    #Set TimeZone
    echo "Europe/Amsterdam" > /etc/timezone
    rm /etc/localtime
    ln -s /usr/share/zoneinfo/Europe/Amsterdam /etc/localtime

    # Cleanup temporary shadow paths
    rm /etc/*-




mappings:
  architecture_map: debian