Updating definitions, including disabling SELinux

adding new dishes

dishes/server-hypervisor-intelcpu-intelgpu.cfg

@@ -0,0 +1,130 @@
+# Generated by pykickstart v3.47
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --disabled="sshd" --enabled="NetworkManager,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=384 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/opt/base.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/opt/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/iso # Create a directory to store iso images
+
+wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/iso/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# fetch custom script and make it executable
+wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/create-generic-vm-virtio-spice.sh -P /mnt/sysimage/usr/local/bin/
+chmod +x /mnt/sysimage/usr/local/bin/create-generic-vm-virtio-spice.sh
+
+# fetch custom script and make it executable
+wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/deploy-minimal-server.sh -P /mnt/sysimage/usr/local/bin/
+chmod +x /mnt/sysimage/usr/local/bin/deploy-minimal-server.sh
+
+# fetch custom script and make it executable
+wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/deploy-minimal-workstation.sh -P /mnt/sysimage/usr/local/bin/
+chmod +x /mnt/sysimage/usr/local/bin/deploy-minimal-workstation.sh
+
+# fetch custom script and make it executable
+wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/deploy-phyllome-desktop.sh -P /mnt/sysimage/usr/local/bin/
+chmod +x /mnt/sysimage/usr/local/bin/deploy-phyllome-desktop.sh
+
+# fetch custom script and make it executable
+wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/opt/base-hypervisor-intelcpu.log
+
+sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB.
+
+echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested-virtualization
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/opt/base-hypervisor-intelgpu.log
+
+sed -i 's/\(vfio-pci\)/\1 i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub # Load kernel modules in grub.
+
+# Load extra kernel modules to enable vfio-mdev on selected hardware
+echo "kvmgt" > /mnt/sysimage/etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
+echo "vfio-mdev" > /mnt/sysimage/etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
+
+%end
+
+%packages --exclude-weakdeps
+@core
+@hardware-support
+fedora-remix-logos
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+guestfs-tools
+initial-setup
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+nano
+neofetch
+pciutils
+python3-libguestfs
+qemu-kvm
+usbutils
+virt-install
+virt-top
+wget
+-fedora-logos
+-fedora-release
+-fedora-release-common
+-fedora-release-identity-basic
+-fedora-release-notes
+
+%end