# MoomsLab — Debian 12 base preseed
# Test target : VM Proxmox UEFI Secure Boot OFF, VLAN 50

### Locale + clavier
d-i debian-installer/locale string en_US.UTF-8
d-i keyboard-configuration/xkb-keymap select fr

### Network (DHCP via UDR7 sur VLAN 50)
d-i netcfg/choose_interface select auto
d-i netcfg/get_hostname string debian-pxe
d-i netcfg/get_domain string moomslab.com
d-i netcfg/wireless_wep string

### Mirror Debian
d-i mirror/country string manual
d-i mirror/http/hostname string deb.debian.org
d-i mirror/http/directory string /debian

### Compte root + user de base
d-i passwd/root-login boolean true
d-i passwd/root-password password moomslab-tmp
d-i passwd/root-password-again password moomslab-tmp
d-i passwd/make-user boolean false

### Timezone — RULE MoomsLab
d-i clock-setup/utc boolean true
d-i time/zone string Pacific/Noumea
d-i clock-setup/ntp boolean true

### Partitionnement — single disk, LVM, ext4
d-i partman-auto/disk string /dev/sda /dev/vda /dev/nvme0n1
d-i partman-auto/method string regular
d-i partman-lvm/device_remove_lvm boolean true
d-i partman-md/device_remove_md boolean true
d-i partman-lvm/confirm boolean true
d-i partman-lvm/confirm_nooverwrite boolean true
d-i partman-auto/choose_recipe select atomic
d-i partman-partitioning/confirm_write_new_label boolean true
d-i partman/choose_partition select finish
d-i partman/confirm boolean true
d-i partman/confirm_nooverwrite boolean true

### APT
d-i apt-setup/non-free boolean true
d-i apt-setup/contrib boolean true

### Packages
tasksel tasksel/first multiselect standard, ssh-server
d-i pkgsel/include string openssh-server qemu-guest-agent curl wget vim sudo
d-i pkgsel/upgrade select full-upgrade
popularity-contest popularity-contest/participate boolean false

### GRUB
d-i grub-installer/only_debian boolean true
d-i grub-installer/with_other_os boolean true
d-i grub-installer/bootdev string default

### Fin
d-i finish-install/reboot_in_progress note

### Late command : configure apt-cacher-ng proxy cote SYSTEM TARGET (pas d-i)
### + pull authorized_keys via HTTP avec --no-proxy (le wget n'utilise pas le cache pour ce fetch)
### PXE_HOST extrait de /proc/cmdline pour supporter LAN ET VLAN 50
d-i preseed/late_command string \
  PXE_HOST=$(grep -oE 'url=http://[^/]+' /proc/cmdline | head -1 | cut -d/ -f3); \
  in-target sh -c "echo 'Acquire::HTTP::Proxy \"http://$PXE_HOST:3142/\";' > /etc/apt/apt.conf.d/00proxy"; \
  in-target mkdir -p /root/.ssh; \
  in-target wget --no-proxy -q -O /root/.ssh/authorized_keys http://$PXE_HOST/preseed/authorized_keys; \
  in-target chmod 700 /root/.ssh; \
  in-target chmod 600 /root/.ssh/authorized_keys; \
  in-target grub-install --target=x86_64-efi --removable; in-target systemctl enable ssh qemu-guest-agent