From a1a0d4fbd14fe2d8a611c5eb2241e1d91d2b7530 Mon Sep 17 00:00:00 2001
From: Vincent Mahnke <vincent@mahn.ke>
Date: Thu, 18 Dec 2025 11:04:01 +0100
Subject: [PATCH] tmp

---
 post_install.sh | 74 +++++++++++++++++++++++++++++++++++++++++
 preseed.cfg     | 87 +++++++++++--------------------------------------
 2 files changed, 93 insertions(+), 68 deletions(-)
 create mode 100644 post_install.sh

diff --git a/post_install.sh b/post_install.sh
new file mode 100644
index 0000000..4ff2943
--- /dev/null
+++ b/post_install.sh
@@ -0,0 +1,74 @@
+printf "[daemon]\nAutomaticLoginEnable=true\nAutomaticLogin=kiosk\n\n[security]\n\n[xdmcp]\n\n[chooser]\n\n[debug]\n" > /etc/gdm3/daemon.conf
+mkdir -p /usr/lib/firefox-esr/distribution
+tee /usr/lib/firefox-esr/distribution/policies.json > /dev/null <<'EOF'
+{
+  "policies": {
+    "DisableDeveloperTools": true,
+    "BlockAboutAddons": true,
+    "BlockAboutConfig": true,
+    "BlockAboutProfiles": true,
+    "BlockAboutSupport": true,
+    "DisableFirefoxAccounts": true,
+    "DisablePrivateBrowsing": true,
+    "DisableProfileImport": true,
+    "DisableProfileRefresh": true,
+    "DisableSafeMode": true,
+    "DisablePocket": true,
+    "DisableFirefoxScreenshots": true,
+    "DisableSetDesktopBackground": true,
+    "Homepage": {
+      "URL": "https://mahn.ke",
+      "Locked": true
+    },
+    "NewTabPage": {
+      "Enabled": false
+    },
+    "DownloadDirectory": {
+      "Path": "C:\\KioskDownloads",
+      "Locked": true
+    },
+    "PromptForDownloadLocation": false,
+    "StartDownloadsInTempDirectory": false,
+    "DisableAppUpdate": true,
+    "Permissions": {
+      "Camera": "deny",
+      "Microphone": "deny",
+      "Location": "deny",
+      "Notifications": "deny"
+    },
+    "ShowHomeButton": false,
+    "DisplayMenuBar": false,
+    "DisplayBookmarksToolbar": false,
+    "policies": {
+        "UserMessaging": {
+            "ExtensionRecommendations": false,
+            "FeatureRecommendations": false,
+            "UrlbarInterventions": false,
+            "SkipOnboarding": false,
+            "MoreFromMozilla": false,
+            "FirefoxLabs": false,
+            "Locked": false
+        }
+    }
+  }
+}
+EOF
+chown -R kiosk:kiosk /home/kiosk/.config
+tee /etc/systemd/system/firefox-kiosk.service > /dev/null <<'EOF'
+[Unit]
+Description=Firefox Kiosk
+After=graphical.target
+Wants=graphical.target
+
+[Service]
+User=kiosk
+Type=simple
+ExecStart=/usr/bin/firefox --kiosk https://mahn.ke
+Restart=always
+RestartSec=5
+Environment=DISPLAY=:0
+
+[Install]
+WantedBy=graphical.target
+EOF
+systemctl enable firefox-kiosk.service
\ No newline at end of file
diff --git a/preseed.cfg b/preseed.cfg
index ab6082e..0a500ec 100644
--- a/preseed.cfg
+++ b/preseed.cfg
@@ -1,5 +1,19 @@
+#_preseed_V1
+
+# Installer interface language
+d-i localechooser/language string en
+d-i localechooser/language-name string English
+d-i localechooser/supported-locales multiselect en_US.UTF-8
+
+d-i debian-installer/language string en
+d-i debian-installer/country string US
 d-i debian-installer/locale string en_US.UTF-8
-d-i keyboard-configuration/xkb-keymap select us
+d-i keyboard-configuration/xkb-keymap select en
+
+# System locale
+d-i debian-installer/locale string en_US.UTF-8
+d-i console-setup/ask_detect boolean false
+d-i keyboard-configuration/layoutcode string us
 d-i time/zone string UTC
 
 d-i netcfg/choose_interface select auto
@@ -49,71 +63,8 @@ d-i grub-installer/only_debian boolean true
 d-i grub-installer/bootdev string default
 
 d-i finish-install/reboot_in_progress note
-
 d-i preseed/late_command string \
-    in-target sh -c 'printf "[daemon]\nAutomaticLoginEnable=true\nAutomaticLogin=kiosk\n\n[security]\n\n[xdmcp]\n\n[chooser]\n\n[debug]\n" > /etc/gdm3/daemon.conf'; \
-    in-target sh -c 'printf "[Desktop Entry]\nType=Application\nName=Firefox\nExec=firefox --kiosk https://mahn.ke\nX-GNOME-Autostart-enabled=true\n" > /etc/xdg/autostart/myapp.desktop'; \
-    in-target sh -c 'sudo tee /usr/lib/firefox-esr/distribution/policies.json > /dev/null <<EOF
-{
-  "policies": {
-    "DisableDeveloperTools": true,
-    "BlockAboutAddons": true,
-    "BlockAboutConfig": true,
-    "BlockAboutProfiles": true,
-    "BlockAboutSupport": true,
-    "DisableFirefoxAccounts": true,
-    "DisablePrivateBrowsing": true,
-    "DisableProfileImport": true,
-    "DisableProfileRefresh": true,
-    "DisableSafeMode": true,
-    "DisablePocket": true,
-    "DisableFirefoxScreenshots": true,
-    "DisableSetDesktopBackground": true,
-    
-    "Homepage": {
-      "URL": "https://mahn.ke",
-      "Locked": true
-    },
-    
-    "NewTabPage": {
-      "Enabled": false
-    },
-    
-    "DownloadDirectory": {
-      "Path": "C:\\KioskDownloads",
-      "Locked": true
-    },
-    
-    "PromptForDownloadLocation": false,
-    
-    "StartDownloadsInTempDirectory": false,
-    
-    "DisableAppUpdate": true,
-    
-    "Permissions": {
-      "Camera": "deny",
-      "Microphone": "deny",
-      "Location": "deny",
-      "Notifications": "deny"
-    },
-    
-    "ShowHomeButton": false,
-    "DisplayMenuBar": false,
-    "DisplayBookmarksToolbar": false,
-    "policies": {
-        "UserMessaging": {
-            "ExtensionRecommendations": false,
-            "FeatureRecommendations": false,
-            "UrlbarInterventions": false,
-            "SkipOnboarding": false,
-            "MoreFromMozilla": false,
-            "FirefoxLabs": false,
-            "Locked": false
-        }
-    }
-  }
-}
-
-EOF'
-    in-target chown -R kiosk:kiosk /home/kiosk/.config; \
-    in-target mkdir -p /usr/lib/firefox-esr/distribution
\ No newline at end of file
+    # Download and execute post_install.sh
+    in-target curl -o /tmp/post_install.sh https://example.com/post_install.sh; \
+    in-target chmod +x /tmp/post_install.sh; \
+    in-target /tmp/post_install.sh