# Alloy bootc install configuration.
#
# Declares the root filesystem type used when the image is installed
# to disk. Without this, bootc-image-builder fails with
# "missing required info: DefaultRootFs" and any consumer has to pass
# --rootfs on the CLI. xfs matches Fedora bootc's own default.

[install]
# Which to-disk backends this image permits. Unset means `direct` alone, and
# `bootc install --block-setup tpm2-luks` then fails with "tpm2-luks not
# enabled in installation config" — which is what every encrypted install did
# until this line existed, on hardware with a perfectly good TPM. The
# installer offers encryption on step 4 and defaults it to on, so the whole
# encrypted path was unreachable.
#
# Order is load-bearing: bootc takes the FIRST entry as the default for an
# install that passes no --block-setup, and the installer passes the flag only
# when the user asked for encryption. `direct` must therefore stay first, or
# declining encryption would silently produce an encrypted disk.
block = ["direct", "tpm2-luks"]

[install.filesystem.root]
type = "xfs"