api_version: 1
kind: apt-ostree

metadata:
  name: debian-minimal
  version: "14"
  ref_name: debian/14/x86_64/minimal

ostree:
  ref: debian/14/x86_64/minimal
  repo: /tmp/apt-ostree/debian/repo

base: debian:trixie

repositories:
  - name: debian
    url: http://deb.debian.org/debian
    suite: trixie
    components: [main, contrib, non-free]
    enabled: true
    gpgkey: https://ftp-master.debian.org/keys/archive-key-12.asc
  - name: debian-security
    url: http://deb.debian.org/debian-security
    suite: trixie-security
    components: [main, contrib, non-free]
    enabled: true
    gpgkey: https://ftp-master.debian.org/keys/archive-key-12.asc

apt:
  sources:
    - "deb http://deb.debian.org/debian trixie main contrib non-free"
    - "deb http://deb.debian.org/debian-security trixie-security main contrib non-free"

packages:
  include:
    - systemd
    - systemd-sysv
    - dbus
    - dbus-user-session
    - policykit-1
    - polkitd
    - sudo
    - passwd
    - bash
    - coreutils
    - util-linux
    - procps
    - sysvinit-utils
    - ostree
    - apt-ostree
    - less
    - vim-tiny
    - wget
    - curl
    - ca-certificates
    - gnupg
    - iproute2
    - net-tools
    - openssh-client
    - openssh-server
    - htop
    - rsync
    - tar
    - gzip
    - unzip

system:
  hostname: debian-minimal
  keyboard: us
  locale: en_US.UTF-8
  timezone: UTC

services:
  - systemd-networkd
  - systemd-resolved
  - ssh

directories:
  - /etc/apt-ostree
  - /var/lib/apt-ostree
  - /root/.ssh

postinstall:
  - echo "apt-ostree Debian minimal system created successfully"
  - echo "OSTree ref: debian/14/x86_64/minimal"
  - echo "System is ready for headless operation"