moving to no-secure-boot, and more generally a simpler virtual machine definition

scripts/deploy-distro.sh

@@ -106,16 +106,17 @@ virt-install \
     --arch x86_64 \
     --machine q35 \
     --name "$vm_name" \
-    --boot uefi \
-    --cpu host-model,topology.sockets=1,topology.cores=2,topology.threads=2 \
-    --vcpus 4 \
+    --boot uefi,firmware.feature0.name=secure-boot,firmware.feature0.enabled=no \
+    --cpu host-model,topology.sockets=1,topology.cores=1,topology.threads=1 \
+    --vcpus 1 \
+    --cpu host-passthrough,cache.mode=passthrough \
     --memory "$memory_size" \
     --video virtio \
     --graphics spice,listen=0.0.0.0 \
     --channel unix,target.type=virtio,target.name=org.qemu.guest_agent.0 \
     --autoconsole none \
     --console pty,target.type=virtio \
-    --sound virtio \
+    --sound none \
     --network type="$network_type",model=virtio \
     --controller type=virtio-serial \
     --controller type=usb,model=none \
@@ -123,7 +124,9 @@ virt-install \
     --input type=keyboard,bus=virtio \
     --input type=mouse,bus=virtio \
     --rng /dev/urandom,model=virtio \
+    --tpm none \
     --iommu model=virtio \
+    --watchdog none \
     --memballoon none \
     --disk path="${disk_path}/${vm_name}.img",format=raw,bus=virtio,cache=writeback,size="$disk_size" \
     --location=https://download.fedoraproject.org/pub/fedora/linux/releases/42/Everything/x86_64/os/ \