swithcing from CoreOS to Fedora Server

build-config.yaml.example

@@ -1,7 +1,7 @@
 # Build Configuration
 image:
-  name: fedora-coreos-nullpoint
-  stream: stable
+  name: nullpoint
+  version: 39
   arch: x86_64
   hetzner_arch: x86
 
@@ -11,15 +11,46 @@ system:
   luks:
     tang_url: https://tang.example.com
     tang_thumbprint: your-tang-thumbprint
+    
+    # TPM Configuration
+    tpm:
+      pcr_bank: sha256  # PCR bank to use (sha1 or sha256)
+      pcr_ids: [0,4,7,8,9]  # PCRs to measure
+      # PCR descriptions:
+      # 0:  Core System Firmware executable code (BIOS/UEFI) (RECOMMENDED)
+      # 1:  Core System Firmware data (BIOS/UEFI settings)
+      # 2:  Extended or pluggable executable code
+      # 3:  Extended or pluggable firmware data
+      # 4:  Boot Manager Code (bootloader) (RECOMMENDED)
+      # 5:  Boot Manager Configuration and Data
+      # 6:  Platform-specific code
+      # 7:  Platform-specific configuration (RECOMMENDED)
+      # 8:  UEFI driver and application code (RECOMMENDED)
+      # 9:  UEFI driver and application configuration (RECOMMENDED)
+      # 10: UEFI Handoff Tables
+      # 11: UEFI Boot Services Code
+      # 12: UEFI Boot Services Data
+      # 13: UEFI Runtime Services Code
+      # 14: UEFI Runtime Services Data
+      # 15: UEFI Secure Boot State
 
-  # Storage Configuration
-  storage:
-    boot_size_mib: 512
-    compression: zstd
-    subvolumes:
-      - name: "@"
-        path: "/"
-      - name: "@home"
-        path: "/home"
-      - name: "@var"
-        path: "/var" 
+  # Cloud-init Configuration
+  cloud_init:
+    timezone: UTC
+    users:
+      - name: admin
+        groups: wheel
+        sudo: ALL=(ALL) NOPASSWD:ALL
+        ssh_authorized_keys:
+          - "your-ssh-key-here"
+    packages:
+      - btrfs-progs
+      - clevis
+      - clevis-luks
+      - clevis-tang
+      - clevis-tpm2
+      - tpm2-tools
+      - tpm2-tss
+      - cryptsetup
+      - systemd
+      - curl