archangel/installer/velox-btrfs.conf.example, branch main Arch Linux installer ISO — ZFS-on-root or BTRFS, doubles as rescue disk https://git.cjennings.net/archangel/atom?h=main 2026-08-14T16:51:27+00:00 fix(install): refuse out-of-range passphrases before the disk is wiped 2026-08-14T16:51:27+00:00 Craig Jennings c@cjennings.net 2026-08-14T16:51:27+00:00 urn:sha1:e9f82d19c75ac8602f5840794d6bd62e30576c30 The unattended path only checked that a passphrase was non-empty, while zpool create enforces 8-512 characters, so a short passphrase failed after partitioning had already destroyed the old pool. The velox reinstall hit exactly that: its profile shipped a 7-char placeholder, and run 1 died post-wipe. validate_encryption_passphrase now takes min/max bounds. ZFS gets 8-512 pre-flight, and LUKS gets the same 8 minimum the interactive prompt enforces. Two adjacent gaps close with it: SWAP_SIZE now rejects zero sizes, which previously passed validation and died at sgdisk after the wipe. validate_config warns when the swap partition lands next to an encrypted root, since a hibernate image is a full RAM dump with keys included. The tracked example profiles' 7-char placeholders are now 8 characters. security: gitignore host configs, add .example templates 2026-04-13T03:20:48+00:00 Craig Jennings c@cjennings.net 2026-04-13T03:20:48+00:00 urn:sha1:33ff55507895af2c29a20ec7e7e707d317cb8ef1 velox-{zfs,btrfs}.conf contain LUKS/ZFS passphrases and root passwords. Untrack them and add velox-*.conf to .gitignore. Committed .example templates show the expected structure with 'welcome' placeholders.