roots/phyllomeos
1
0
Fork 1
Code Pull Requests Activity

Compare commits

base: roots:de5acaf289c63e323eac1fd3378756f5de1c8165
Branches Tags
roots:main roots:dev-recipes roots:new-devel roots:packages-selection-optimization roots:local-iso roots:simplify-virtual-editions roots:nano roots:new-partition-scheme
roots:v.0.2.0-alpha
..
compare: roots:simplify-virtual-editions
Branches Tags
roots:main roots:dev-recipes roots:new-devel roots:packages-selection-optimization roots:local-iso roots:simplify-virtual-editions roots:nano roots:new-partition-scheme
roots:v.0.2.0-alpha

9 Commits
de5acaf289 ... simplify-v

Author SHA1 Message Date
Lukas Greve
e018870d0e updated recipes 2025-12-11 20:50:24 +01:00
Lukas Greve
0c76e7626d make it even more insecure, to make it easier to debug 2025-12-11 20:50:13 +01:00
Lukas Greve
28c390f1b4 remove the post section to speed installation process 2025-12-11 20:49:29 +01:00
Lukas Greve
ebd35f0b1f virtual dishes are for development-only 2025-12-10 21:31:31 +01:00
Lukas Greve
6832142907 add allow ssh incoming connection 2025-12-10 21:31:01 +01:00
Lukas Greve
eae12100a8 correct an awful regression. SELinux is either disabled or in enforcing mode. The enable switch does not work 2025-12-10 21:30:19 +01:00
Lukas Greve
bc5f156cd9 All non-virtual dishes / recipes are meant to be shipped with sane security defaults 2025-12-10 21:29:25 +01:00
Lukas Greve
8245bdf3b9 revert back gitignore to include dishes 2025-12-10 21:27:45 +01:00
Lukas Greve
674b34d441 Merge pull request 'add fast_commit and encrypt filesystem feature for ext4. Encrypt is a prerequisite for fscrypt support. Fast_commit is a faster journaling method.' (#2) from ext4-improvement into main 
Reviewed-on: #2
 2025-12-10 16:18:33 +00:00
29 changed files with 67 additions and 143 deletions
Expand all files Collapse all files

4
.gitignore vendored
View File

@@ -1,3 +1,3 @@
.aider* .aider*
dishes/ # dishes/
!dishes/ # !dishes/

8
dishes/desktop-hypervisor-amdcpu.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -16,10 +16,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

8
dishes/desktop-hypervisor-intelcpu-intelgpu.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -16,10 +16,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

8
dishes/desktop-hypervisor-intelcpu.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -16,10 +16,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

8
dishes/desktop-hypervisor.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -16,10 +16,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

8
dishes/desktop.cfg
View File

@@ -3,7 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -16,10 +16,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved" services --enabled="NetworkManager,systemd-resolved"
# System timezone # System timezone

8
dishes/live-desktop-hypervisor.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -14,10 +14,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

8
dishes/live-desktop.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -14,10 +14,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved" services --enabled="NetworkManager,systemd-resolved"
# System timezone # System timezone

8
dishes/live-server-hypervisor.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -14,10 +14,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved,libvirtd" services --enabled="NetworkManager,systemd-resolved,libvirtd"
# System timezone # System timezone

8
dishes/live-server.cfg
View File

@@ -1,7 +1,7 @@
# Generated by pykickstart v3.62 # Generated by pykickstart v3.62
#version=DEVEL #version=DEVEL
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled
# Run the Setup Agent on first boot # Run the Setup Agent on first boot
firstboot --reconfig firstboot --reconfig
# Keyboard layouts # Keyboard layouts
@@ -14,10 +14,10 @@ network --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
shutdown shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password #Root password
rootpw --plaintext 1234 rootpw --lock
# SELinux configuration # SELinux configuration
selinux --disabled selinux --enforcing
# System services # System services
services --enabled="NetworkManager,systemd-resolved" services --enabled="NetworkManager,systemd-resolved"
# System timezone # System timezone

28
dishes/virtual-desktop-hypervisor.cfg
View File

@@ -3,9 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled --service=ssh
# Run the Setup Agent on first boot
firstboot --reconfig
# Keyboard layouts # Keyboard layouts
keyboard --xlayouts='ch (fr)' keyboard --xlayouts='ch (fr)'
# System language # System language
@@ -17,7 +15,7 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password # Root password
rootpw --plaintext 1234 rootpw --plaintext --allow-ssh 1234
# SELinux configuration # SELinux configuration
selinux --disabled selinux --disabled
# System services # System services
@@ -39,27 +37,6 @@ part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winn
part /boot --fstype="ext4" --size=512 --label=boot part /boot --fstype="ext4" --size=512 --label=boot
part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit" part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
%post --logfile=/mnt/sysimage/root/post.log
localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
dnf update -y # Update the system
%end
%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
## Append lines to existing vendor.conf file, so that options are skipped upon reboot
cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
[pages]
skip=privacy
[goa]
providers=local-first!
EOF
%end
%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log %post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF # cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
@@ -250,7 +227,6 @@ generic-release-notes
glibc glibc
gnome-backgrounds.noarch gnome-backgrounds.noarch
gnome-control-center gnome-control-center
gnome-initial-setup
gnome-shell gnome-shell
gnome-terminal gnome-terminal
hostname hostname

28
dishes/virtual-desktop.cfg
View File

@@ -3,9 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled --service=ssh
# Run the Setup Agent on first boot
firstboot --reconfig
# Keyboard layouts # Keyboard layouts
keyboard --xlayouts='ch (fr)' keyboard --xlayouts='ch (fr)'
# System language # System language
@@ -17,7 +15,7 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password # Root password
rootpw --plaintext 1234 rootpw --plaintext --allow-ssh 1234
# SELinux configuration # SELinux configuration
selinux --disabled selinux --disabled
# System services # System services
@@ -39,27 +37,6 @@ part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winn
part /boot --fstype="ext4" --size=512 --label=boot part /boot --fstype="ext4" --size=512 --label=boot
part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit" part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
%post --logfile=/mnt/sysimage/root/post.log
localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
dnf update -y # Update the system
%end
%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
## Append lines to existing vendor.conf file, so that options are skipped upon reboot
cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
[pages]
skip=privacy
[goa]
providers=local-first!
EOF
%end
%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log %post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF # cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
@@ -157,7 +134,6 @@ generic-release-notes
glibc glibc
gnome-backgrounds.noarch gnome-backgrounds.noarch
gnome-control-center gnome-control-center
gnome-initial-setup
gnome-shell gnome-shell
gnome-terminal gnome-terminal
hostname hostname

14
dishes/virtual-server-hypervisor.cfg
View File

@@ -3,9 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled --service=ssh
# Run the Setup Agent on first boot
firstboot --reconfig
# Keyboard layouts # Keyboard layouts
keyboard --xlayouts='ch (fr)' keyboard --xlayouts='ch (fr)'
# System language # System language
@@ -17,7 +15,7 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password # Root password
rootpw --plaintext 1234 rootpw --plaintext --allow-ssh 1234
# SELinux configuration # SELinux configuration
selinux --disabled selinux --disabled
# System services # System services
@@ -37,13 +35,6 @@ part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winn
part /boot --fstype="ext4" --size=512 --label=boot part /boot --fstype="ext4" --size=512 --label=boot
part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit" part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
%post --logfile=/mnt/sysimage/root/post.log
localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
dnf update -y # Update the system
%end
%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log %post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd # Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
@@ -98,7 +89,6 @@ generic-release-common
generic-release-notes generic-release-notes
glibc glibc
hostname hostname
initial-setup
iproute iproute
iputils iputils
kbd kbd

14
dishes/virtual-server.cfg
View File

@@ -3,9 +3,7 @@
# Use text mode install # Use text mode install
text text
# Firewall configuration # Firewall configuration
firewall --disabled firewall --enabled --service=ssh
# Run the Setup Agent on first boot
firstboot --reconfig
# Keyboard layouts # Keyboard layouts
keyboard --xlayouts='ch (fr)' keyboard --xlayouts='ch (fr)'
# System language # System language
@@ -17,7 +15,7 @@ shutdown
repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
# Root password # Root password
rootpw --plaintext 1234 rootpw --plaintext --allow-ssh 1234
# SELinux configuration # SELinux configuration
selinux --disabled selinux --disabled
# System services # System services
@@ -37,13 +35,6 @@ part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winn
part /boot --fstype="ext4" --size=512 --label=boot part /boot --fstype="ext4" --size=512 --label=boot
part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit" part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
%post --logfile=/mnt/sysimage/root/post.log
localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
dnf update -y # Update the system
%end
%packages --exclude-weakdeps %packages --exclude-weakdeps
NetworkManager NetworkManager
NetworkManager-config-connectivity-fedora NetworkManager-config-connectivity-fedora
@@ -68,7 +59,6 @@ generic-release-common
generic-release-notes generic-release-notes
glibc glibc
hostname hostname
initial-setup
iproute iproute
iputils iputils
kbd kbd

4
ingredients/core-security-off.cfg
View File

@@ -1,3 +1,3 @@
rootpw --plaintext 1234 # Root account is enabled with weak password rootpw --plaintext 1234 --allow-ssh # Root account is enabled with weak password and allow ssh
selinux --disabled # Disable SELinux selinux --disabled # Disable SELinux
firewall --disabled # Disable firewall firewall --enabled --ssh # Reject incoming connections that are not in response to outbound requests except SSH

4
ingredients/core-security-on.cfg
View File

@@ -1,3 +1,3 @@
rootpw --lock # No root login from the console rootpw --lock # No root login from the console
selinux --enabled # Enable SELinux selinux --enforcing # Set SELinux to enforcing mode
firewall --enabled # Enable firewall firewall --enabled # Enable firewall

2
recipes/desktop-hypervisor-amdcpu.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # Storage configuration %include ../ingredients/core-storage.cfg # Storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale %include ../ingredients/core-locale.cfg # System locale
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop-hypervisor-intelcpu-intelgpu.cfg
View File

@@ -12,7 +12,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop-hypervisor-intelcpu.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop-hypervisor.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/desktop.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-desktop-hypervisor.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-desktop.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-server-hypervisor.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

2
recipes/live-server.cfg
View File

@@ -11,7 +11,7 @@
%include ../ingredients/live-core-storage.cfg # For live systems only %include ../ingredients/live-core-storage.cfg # For live systems only
%include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/live-core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-on.cfg # Lock root account, enable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages

6
recipes/virtual-desktop-hypervisor.cfg
View File

@@ -5,20 +5,18 @@
# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ # / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/
# /_/ /____/ # /_/ /____/
# A recipe for virtual desktop hypervisor # Unsafe. Development-only. A recipe for a virtual desktop hypervisor
%include ../ingredients/core.cfg # Text mode %include ../ingredients/core.cfg # Text mode
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-off.cfg # Enable root account, disable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages
%include ../ingredients/core-packages-default.cfg # Default but not necessary packages %include ../ingredients/core-packages-default.cfg # Default but not necessary packages
%include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora %include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora
%include ../ingredients/core-post.cfg # Triggered after the installation
%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment %include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
%include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager %include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager
%include ../ingredients/base-hypervisor.cfg # Base hypervisor %include ../ingredients/base-hypervisor.cfg # Base hypervisor

6
recipes/virtual-desktop.cfg
View File

@@ -5,19 +5,17 @@
# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ # / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/
# /_/ /____/ # /_/ /____/
# A recipe for a virtual desktop # Unsafe. Development-only. A recipe for a virtual desktop
%include ../ingredients/core.cfg # Text mode %include ../ingredients/core.cfg # Text mode
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-off.cfg # Enable root account, disable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages
%include ../ingredients/core-packages-default.cfg # Default but not necessary packages %include ../ingredients/core-packages-default.cfg # Default but not necessary packages
%include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora %include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora
%include ../ingredients/core-post.cfg # Triggered after the installation
%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment %include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
%include ../ingredients/base-guest-agents.cfg # Guest agents %include ../ingredients/base-guest-agents.cfg # Guest agents

6
recipes/virtual-server-hypervisor.cfg
View File

@@ -5,19 +5,17 @@
# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ # / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/
# /_/ /____/ # /_/ /____/
# A recipe for a virtual headless hypervisor # # Unsafe. Development-only. A recipe for a virtual headless hypervisor
%include ../ingredients/core.cfg # Text mode %include ../ingredients/core.cfg # Text mode
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-off.cfg # Enable root account, disable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages
%include ../ingredients/core-packages-default.cfg # Default but not necessary packages %include ../ingredients/core-packages-default.cfg # Default but not necessary packages
%include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora %include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora
%include ../ingredients/core-post.cfg # Triggered after the installation
%include ../ingredients/core-initial-setup-server.cfg # For headless systems
%include ../ingredients/base-hypervisor.cfg # Base hypervisor %include ../ingredients/base-hypervisor.cfg # Base hypervisor
%include ../ingredients/base-guest-agents.cfg # Guest agents %include ../ingredients/base-guest-agents.cfg # Guest agents

6
recipes/virtual-server.cfg
View File

@@ -5,18 +5,16 @@
# / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/ # / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/ \____//____/
# /_/ /____/ # /_/ /____/
# A recipe for a virtual desktop # # Unsafe. Development-only. A recipe for a virtual server
%include ../ingredients/core.cfg # Text mode %include ../ingredients/core.cfg # Text mode
%include ../ingredients/core-storage.cfg # ext4-based storage configuration %include ../ingredients/core-storage.cfg # ext4-based storage configuration
%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB %include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GRUB
%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language %include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux %include ../ingredients/core-security-off.cfg # Enable root account, disable firewall and SELinux
%include ../ingredients/core-services.cfg # Required systemd services %include ../ingredients/core-services.cfg # Required systemd services
%include ../ingredients/core-network.cfg # Network configuration %include ../ingredients/core-network.cfg # Network configuration
%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages
%include ../ingredients/core-packages-default.cfg # Default but not necessary packages %include ../ingredients/core-packages-default.cfg # Default but not necessary packages
%include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora %include ../ingredients/core-fedora-repo-43.cfg # Offical repositories for Fedora
%include ../ingredients/core-post.cfg # Triggered after the installation
%include ../ingredients/core-initial-setup-server.cfg # For headless systems
%include ../ingredients/base-guest-agents.cfg # Guest agents %include ../ingredients/base-guest-agents.cfg # Guest agents