roots/phyllomeos
1
0
Fork 1
Code Pull Requests Activity

All non-virtual dishes / recipes are meant to be shipped with sane security defaults

Browse Source
This commit is contained in:
Lukas Greve
2025-12-10 21:29:25 +01:00
parent 8245bdf3b9
commit bc5f156cd9
18 changed files with 45 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
dishes/desktop-hypervisor-amdcpu.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -17,9 +17,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

6
dishes/desktop-hypervisor-intelcpu-intelgpu.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -17,9 +17,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

6
dishes/desktop-hypervisor-intelcpu.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -17,9 +17,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

6
dishes/desktop-hypervisor.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -17,9 +17,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

6
dishes/desktop.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -17,9 +17,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved" services --enabled="NetworkManager,systemd-resolved"
# System timezone # System timezone

6
dishes/live-desktop-hypervisor.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -15,9 +15,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

6
dishes/live-desktop.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -15,9 +15,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved" services --enabled="NetworkManager,systemd-resolved"
# System timezone # System timezone

6
dishes/live-server-hypervisor.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -15,9 +15,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

6
dishes/live-server.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -15,9 +15,9 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
#Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved" services --enabled="NetworkManager,systemd-resolved"
# System timezone # System timezone

2
recipes/desktop-hypervisor-amdcpu.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # Storage configuration %include ../ingredients/core-storage.cfg # Storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale %include ../ingredients/core-locale.cfg # System locale
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop-hypervisor-intelcpu-intelgpu.cfg
View File

@@ -12,7 +12,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop-hypervisor-intelcpu.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop-hypervisor.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-desktop-hypervisor.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-desktop.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-server-hypervisor.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-server.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages