---
hypervisor: "none"
install_type: "physical"
install_drive: "/dev/sda"

os: "archlinux"
filesystem: "btrfs"

cis: false
selinux: true

luks_enabled: true
luks_passphrase: "1234"
luks_mapper_name: "SYSTEM_DECRYPTED"
luks_auto_decrypt: true
luks_auto_decrypt_method: "tpm2"
luks_tpm2_device: "auto"
luks_tpm2_pcrs: "7"