#!/usr/bin/env bash
# Runs once inside the airootfs chroot during mkarchiso.
set -e -u

# --- locale ---
sed -i 's/#\(en_US\.UTF-8 UTF-8\)/\1/' /etc/locale.gen
locale-gen

# --- trust the [tanin] key(s) (so Required DatabaseOptional verifies) ---
# tanin-repo.gpg currently holds Gitea's repo-DB-signing key (fingerprint
# below), which covers the optional DB signature. Per-PACKAGE signatures
# (now Required) are made by the packaging/gen-signing-key.sh packager key
# instead, so after running that script ONCE:
#   1) re-export tanin-repo.gpg to also contain the packager pubkey, e.g.
#      `gpg --export <gitea-fpr> <packager-fpr> > .../pacman.d/tanin-repo.gpg`
#      (see the exact steps gen-signing-key.sh prints), then
#   2) add a second line here: `pacman-key --lsign-key <packager-fpr>`
# — without step 2, Required package-signature checks will fail even though
# the key is imported, because it isn't locally trusted yet.
pacman-key --init
pacman-key --populate archlinux
pacman-key --add /etc/pacman.d/tanin-repo.gpg
pacman-key --lsign-key 63F0415879323F6BFE0FBFB2B6FDF356206AF4F6

# --- services in the LIVE image ---
systemctl enable NetworkManager.service
systemctl enable seatd.service

# Live: greetd auto-launches the installer (cage + calamares) via initial_session.
# greetd creates a real logind session WITH A SEAT (the getty-autologin couldn't),
# so cage/wlroots starts. No login prompt — the installer comes up directly.
# (The tanin-greet package set config.toml to its greeter; we override it here for
#  the live, and Calamares restores the tanin-greet config on the target.)
cat > /etc/greetd/config.toml <<'GEOF'
[terminal]
vt = 1

[initial_session]
command = "cage -s -- calamares"
user = "root"

[default_session]
command = "agreety --cmd /bin/zsh"
user = "greeter"
GEOF
systemctl enable greetd.service
systemctl set-default graphical.target

# --- plymouth: add the hook so the target initramfs shows the splash ---
# (Calamares regenerates the initramfs on the target; this drop-in is carried
#  over by unpackfs. 'quiet splash' goes on the kernel cmdline at install time.)
if ! grep -q plymouth /etc/mkinitcpio.conf 2>/dev/null; then
  sed -i 's/^\(HOOKS=.*\)\(udev\)/\1\2 plymouth/' /etc/mkinitcpio.conf 2>/dev/null || true
fi