fix(iso): bind colibri_daemon_require_secured=YES to complete the interlock

The rc.conf.sample on the live USB now sets require_secured=YES.
Together with the paired colibri change, this ensures the daemon
disables autospawn until the console gate writes .secured.
This commit is contained in:
Sam & Claude 2026-06-25 07:05:16 +02:00
parent 73b603d995
commit 2fa7825f12

View file

@ -105,6 +105,7 @@ colibri_daemon_logfile="/var/log/colibri/daemon.log"
colibri_daemon_provider_env="/usr/local/etc/colibri/provider.env"
colibri_daemon_host="\$(/bin/hostname)"
colibri_daemon_cost_mode="${COLIBRI_COST_MODE}"
colibri_daemon_require_secured="YES"
EOF
cat > "${ETC_DIR}/provider.env" <<'EOF'