# Felhom ISO build profile — nested-canary (Scenario D: disk-filter fail-safe regression). # # A udev filter that matches NOTHING. Proves the pipeline preserves the spike-proven S5c semantics: # the installer aborts (exit 1, "filter did not match any device") and touches NO disk — verified by # a host-side canary sha256 that stays byte-identical. NOT for real installs. FELHOM_FQDN="felhom-host.local" FELHOM_DISK_SETUP='[disk-setup] filesystem = "ext4" filter-match = "all" filter.ID_SERIAL_SHORT = "no-such-disk-zzz"'