bump kickstart version

- create generate_recipe.py for universal template recipe generation
- support cartesian product expansion from recipes_manifest.yaml
- generate 72 unique recipes with proper filename disambiguation
- update Makefile with simplified validation using ksflatten
- keep ksflatten-relative script as-is for dish flattening

The generator reads recipe_templates.yaml and recipes_manifest.yaml to
produce recipe files that ksflatten then flattens into final dishes.

.gitea/workflows/build-iso.yaml

@@ -1,75 +1,75 @@
-name: release
+name: build-iso
 
-on: 
+on:
   push:
-    branches:
-      - main  # Or your desired branch
+    branches: [main]
+  release:
+    types: [published]
 
 jobs:
-  checkout:
-    runs-on: fedora-cloud-42
-    defaults:
-      run:
-        shell: bash
-    container: 
+  validate:
+    runs-on: fedora
+    container:
       image: git.phyllo.me/devops/fedora-runner-image:latest
-
+    
     steps:
       - uses: https://git.phyllo.me/devops/checkout@v5
         with:
           fetch-depth: 0
-   
+      
+      - name: Install dependencies
+        run: |
+          pip install PyYAML pykickstart
+      
+      - name: Generate all recipes
+        run: |
+          cd recipe-generator
+          python3 generate_recipe.py \
+            --manifest recipes_manifest.yaml \
+            --output-dir ../recipes/
+      
+      - name: Validate recipes (strict mode)
+        run: |
+          cd recipe-generator
+          python3 generate_recipe.py --validate ../recipes/*.cfg --strict
+  
+  build-iso:
+    needs: validate
+    runs-on: fedora-cloud-42
+    container:
+      image: git.phyllo.me/devops/fedora-runner-image:latest
+    
+    steps:
+      - uses: https://git.phyllo.me/devops/checkout@v5
+        with:
+          fetch-depth: 0
+      
       - name: Initialize mock
         run: |
           mock -r fedora-43-x86_64 --init
-
+      
       - name: Install required packages
         run: |
           mock -r fedora-43-x86_64 --install lorax-lmc-novirt vim-minimal pykickstart livecd-tools
-
+      
       - name: Copy configuration file to mock
         run: |
-          mock -r fedora-43-x86_64 --copyin dishes/live-server.cfg /builddir
-
+          mock -r fedora-43-x86_64 --copyin recipes/live-server_rawhide.cfg /builddir
+      
       - name: Build ISO with livemedia-creator
         run: |
           mock -r fedora-43-x86_64 --shell --enable-network --isolation=simple << 'EOF'
           cd /builddir
-          livemedia-creator --ks live-server.cfg --no-virt --resultdir /var/lmc --project live-desktop-hypervisor --make-iso --volid live-desktop-hypervisor --iso-only --iso-name server-43.iso --releasever 43 --macboot
+          livemedia-creator --ks live-server_rawhide.cfg --no-virt --resultdir /var/lmc --project live-server --make-iso --volid live-server --iso-only --iso-name server-43.iso --releasever 43 --macboot
           EOF
-
+      
       - name: Upload ISO as artifact
         uses: actions/upload-artifact@v3
         with:
           name: server-43.iso
           path: /var/lmc/server-43.iso
           if-no-files-found: error
-
-      - name: Create Release
-        if: github.ref == 'refs/heads/main'
-        uses: actions/create-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tag_name: iso-build-${{ github.run_number }}
-          release_name: ISO Build ${{ github.run_number }}
-          body: |
-            Build artifact from workflow run ${{ github.run_number }}
-            ISO file: server-43.iso
-          draft: false
-          prerelease: false
-
-      - name: Upload ISO to Release
-        if: github.ref == 'refs/heads/main'
-        uses: actions/upload-release-asset@v2
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          upload_url: ${{ steps.create_release.outputs.upload_url }}
-          asset_path: /var/lmc/server-43.iso
-          asset_name: server-43.iso
-          asset_content_type: application/x-iso9660-image
-
+      
       - name: Cleanup mock environment
         if: always()
         run: |

.gitea/workflows/build-iso_more-recent.yaml

@@ -0,0 +1,54 @@
+name: release
+
+on: 
+  push:
+    tags:
+      - "v*.*.*"
+
+env:
+  FEDORA_VERSION: 43
+  KICKSTART_FILE: live-desktop-hypervisor
+
+jobs:
+  checkout:
+    runs-on: fedora
+    defaults:
+      run:
+        shell: bash
+
+    steps:
+      - uses: https://git.phyllo.me/devops/checkout@v5
+        with:
+          fetch-depth: 0
+   
+      - name: Initialize mock
+        run: |
+          mock -r fedora-${{ env.FEDORA_VERSION }}-x86_64 --init
+
+      - name: Install required packages
+        run: |
+          mock -r fedora-${{ env.FEDORA_VERSION }}-x86_64 --install lorax-lmc-novirt vim-minimal pykickstart livecd-tools
+
+      - name: Copy configuration file to mock
+        run: |
+          mock -r fedora-${{ env.FEDORA_VERSION }}-x86_64 --copyin dishes/${{ env.KICKSTART_FILE }} /builddir
+
+      - name: Build ISO with livemedia-creator
+        run: |
+          mock -r fedora-${{ env.FEDORA_VERSION }}-x86_64 --shell --enable-network --isolation=simple << 'EOF'
+          cd /builddir
+          livemedia-creator --ks ${{ env.KICKSTART_FILE }}.cfg --no-virt --resultdir /var/lmc --project ${{ env.KICKSTART_FILE }} --make-iso --volid ${{ env.KICKSTART_FILE }} --iso-only --iso-name ${{ env.KICKSTART_FILE }}-${{ env.FEDORA_VERSION }}.iso --releasever ${{ env.FEDORA_VERSION }} --macboot
+          EOF
+
+      - name: Release
+        uses: https://git.phyllo.me/devops/action-gh-release@v2
+        if: github.ref_type == 'tag'
+        with:
+          files: /var/lib/mock/fedora-${{ env.FEDORA_VERSION }}-x86_64/root/var/lmc/${{ env.KICKSTART_FILE }}-${{ env.FEDORA_VERSION }}.iso
+          draft: false
+          prerelease: false
+
+      - name: Cleanup mock environment
+        if: always()
+        run: |
+          mock -r fedora-${{ env.FEDORA_VERSION }}-x86_64 --clean

.gitignore

@@ -1,3 +0,0 @@
-.aider*
-# dishes/
-# !dishes/

README.md

@@ -15,7 +15,7 @@ chmod +x deploy-vm.sh
 ```
 ./deploy-vm.sh
 
-Executing: ./scripts/core-count.sh
+Executing: ./deploy/core-count.sh
 System has more than 2 core (nproc --all: 6).
 [...]
 10. virtual-desktop-hypervisor

cook/Makefile

@@ -0,0 +1,52 @@
+.PHONY: help generate-recipes validate-recipes clean clean-dishes install-deps flatten-dishes all
+
+help:
+	@echo "Phyllome OS Recipe Generator"
+	@echo ""
+	@echo "Available targets:"
+	@echo "  generate-recipes  - Generate all recipes from manifest"
+	@echo "  validate-recipes  - Validate existing recipes"
+	@echo "  all               - Generate, validate, and flatten all recipes (default)"
+	@echo "  flatten-dishes    - Flatten all recipes to dishes"
+	@echo "  clean-dishes      - Remove flattened dishes"
+	@echo "  clean-recipes     - Remove generated recipes"
+	@echo "  clean-all	       - Remove recipes and dishes"
+	@echo "  install-deps      - Install Python dependencies"
+
+all: generate-recipes flatten-dishes validate-recipes
+	@echo "✓ All recipes generated, flattened, and validated"
+
+install-deps:
+	pip install -r requirements.txt
+
+generate-recipes:
+	@rm -f recipes/*.cfg
+	@python3 generate_recipe.py \
+		--manifest recipes_manifest.yaml \
+		--output-dir recipes/
+
+validate-recipes:
+	@echo "Validating recipes..."
+	@for f in dishes/*.cfg; do \
+		if [ -f "$$f" ]; then \
+			echo "  Processing: $$(basename $$f)"; \
+			ksflatten -c "$$f" -o /dev/null 2>&1 && echo "    ✓ OK" || { echo "    ✗ FAILED"; exit 1; }; \
+		fi; \
+	done
+
+flatten-dishes:
+	@echo "Flattening recipes to dishes..."
+	@python bin/ksflatten-relative recipes dishes
+
+clean-dishes:
+	rm -f dishes/*.cfg
+	@echo "✓ Flattened dishes removed. Run 'make flatten-dishes' to regenerate."
+
+clean-recipes:
+	rm -f recipes/*.cfg
+	@echo "Generated recipes removed. Edit recipes_manifest.yaml and run 'make generate-recipes' to regenerate. Run 'make clean-dishes' to remove flattened dishes."
+
+clean-all:
+	rm -f dishes/*.cfg
+	rm -f recipes/*.cfg
+	@echo "✓ Flattened dishes and generated recipes removed. Run 'make all' to regenerate."

cook/bin/generate-recipe

@@ -0,0 +1,2 @@
+#!/bin/bash
+exec "$(dirname "$0")/../generate_recipe.py" "$@"

cook/bin/ksflatten-relative

@@ -0,0 +1,90 @@
+#!/usr/bin/env python3
+"""
+Flatten kickstart recipes with relative %include paths.
+Converts %include ingredients/... to %include ../ingredients/... relative to recipes/ location.
+"""
+
+import os
+import sys
+import subprocess
+import tempfile
+
+
+def flatten_recipe(recipe_path, output_path):
+    """Flatten a recipe file, converting relative paths."""
+    project_root = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+    
+    # Read the recipe
+    with open(recipe_path, 'r') as f:
+        content = f.read()
+    
+    # Convert %include paths to relative (from recipes/ perspective)
+    lines = []
+    for line in content.split('\n'):
+        if line.startswith('%include '):
+            # Get the fragment path from %include path
+            parts = line.split(None, 1)
+            if len(parts) >= 2:
+                fragment_path = parts[1]
+                # Make it relative to recipes/
+                # From recipes/, ingredients/ is at ../ingredients/
+                if fragment_path.startswith('ingredients/'):
+                    relative_path = '../' + fragment_path
+                else:
+                    relative_path = '../ingredients/' + fragment_path
+                lines.append('%include ' + relative_path)
+            else:
+                lines.append(line)
+        else:
+            lines.append(line)
+    
+    # Write to temp file in recipes directory
+    temp_fd, temp_path = tempfile.mkstemp(suffix='.ks', dir=os.path.dirname(recipe_path))
+    
+    try:
+        os.write(temp_fd, '\n'.join(lines).encode('utf-8'))
+        os.close(temp_fd)
+        
+        # Call ksflatten
+        cmd = ['ksflatten', '-c', temp_path, '-o', output_path]
+        result = subprocess.run(cmd, capture_output=True, text=True)
+        
+        if result.returncode != 0:
+            print(f"Error flattening {os.path.basename(recipe_path)}:", file=sys.stderr)
+            print(result.stderr, file=sys.stderr)
+            return False
+        return True
+    finally:
+        os.unlink(temp_path)
+
+
+def main():
+    if len(sys.argv) < 3:
+        print("Usage: ksflatten-relative RECIPE_DIR DISH_DIR", file=sys.stderr)
+        print("Example: ksflatten-relative recipes dishes", file=sys.stderr)
+        sys.exit(1)
+    
+    recipe_dir = sys.argv[1]
+    dish_dir = sys.argv[2]
+    
+    if not os.path.isdir(recipe_dir):
+        print(f"Error: {recipe_dir} is not a directory", file=sys.stderr)
+        sys.exit(1)
+    
+    os.makedirs(dish_dir, exist_ok=True)
+    
+    recipes = [f for f in os.listdir(recipe_dir) if f.endswith('.cfg')]
+    
+    for recipe_name in sorted(recipes):
+        recipe_path = os.path.join(recipe_dir, recipe_name)
+        dish_path = os.path.join(dish_dir, recipe_name)
+        
+        print(f"  Processing: {recipe_name}")
+        if not flatten_recipe(recipe_path, dish_path):
+            sys.exit(1)
+    
+    print("✓ All recipes flattened to dishes")
+
+
+if __name__ == '__main__':
+    main()

cook/dishes/gnome_43.cfg

@@ -0,0 +1,138 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_43.cfg

@@ -0,0 +1,138 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_hardware-support_43.cfg

@@ -0,0 +1,139 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_hardware-support_rawhide.cfg

@@ -0,0 +1,138 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_rawhide.cfg

@@ -0,0 +1,137 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_systemd-boot_43.cfg

@@ -0,0 +1,138 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_systemd-boot_hardware-support_43.cfg

@@ -0,0 +1,139 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_systemd-boot_hardware-support_rawhide.cfg

@@ -0,0 +1,138 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_encrypted_systemd-boot_rawhide.cfg

@@ -0,0 +1,137 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_hardware-support_43.cfg

@@ -0,0 +1,139 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_hardware-support_rawhide.cfg

@@ -1,4 +1,4 @@
-# Generated by pykickstart v3.62
+# Generated by pykickstart v3.68
 #version=DEVEL
 # Use text mode install
 text
@@ -34,37 +34,11 @@ zerombr
 # Partition clearing information
 clearpart --all --initlabel
 # Disk partitioning information
-part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=512 --label=boot
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
 part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
 
-%post --logfile=/mnt/sysimage/root/post.log
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-## Append lines to existing vendor.conf file, so that options are skipped upon reboot
-cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
-[pages]
-skip=privacy
-[goa]
-providers=local-first!
-EOF
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
-
-# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
-# [org.gnome.desktop.background]
-# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
-# EOF
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
 [org.gnome.desktop.media-handling]
@@ -76,7 +50,7 @@ cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.overr
 [org.gnome.Terminal.Legacy.Profile]
 font='DejaVu Sans Mono 12'
 use-system-font=false
-audible-bell=false
+auditable-bell=false
 EOF
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
@@ -97,7 +71,7 @@ EOF
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
 [org.gnome.desktop.privacy]
 remove-old-temp-files=true
-remember-recent-files=false
+remember-recent-file=false
 remember-app-usage=false
 disable-camera=true
 disable-microphone=true
@@ -129,94 +103,36 @@ glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
 %end
 
 %packages --exclude-weakdeps
-NetworkManager
-NetworkManager-config-connectivity-fedora
-NetworkManager-wifi
-alsa-sof-firmware
-amd-gpu-firmware
-atheros-firmware
-audit
-b43-fwcutter
-b43-openfwwf
-basesystem
-bash
-brcmfmac-firmware
-cirrus-audio-firmware
-coreutils
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
 curl
+dconf
 dejavu-sans-mono-fonts
-dhcp-client
-dnf5
-dnf5-plugins
-dracut
-dracut-config-rescue
-e2fsprogs
 fedora-remix-logos
-filesystem
 firefox
-firewalld
-fwupd
+gdm
 generic-logos
 generic-release
 generic-release-common
 generic-release-notes
-glibc
 gnome-backgrounds.noarch
 gnome-control-center
-gnome-initial-setup
+gnome-session-wayland-session
 gnome-shell
 gnome-terminal
-hostname
-intel-audio-firmware
-intel-gpu-firmware
-intel-vsc-firmware
-iproute
-iputils
-iwlegacy-firmware
-iwlwifi-dvm-firmware
-iwlwifi-mvm-firmware
-kbd
-kernel
-less
-libertas-firmware
+gvfs-fuse
+initial-setup
 libusb
-man-db
-mesa-dri-drivers
 mozilla-ublock-origin.noarch
-mt7xxx-firmware
 nano
-ncurses
-nvidia-gpu-firmware
-nxpwireless-firmware
-openssh-clients
-openssh-server
-parted
+nautilus
 pciutils
 pipewire-alsa
 pipewire-jack-audio-connection-kit
 pipewire-pulseaudio
-plymouth
-policycoreutils
-prefixdevname
-procps-ng
-realtek-firmware
-rootfiles
-rpm
-selinux-policy-targeted
-setup
-shadow-utils
-sssd-common
-sssd-kcm
-sudo
-systemd
-systemd-resolved
-tiwilink-firmware
 usbutils
-util-linux
-vim-minimal
 wget
-wpa_supplicant
-zram-generator-defaults
--gnome-tour
 
 %end

cook/dishes/gnome_rawhide.cfg

@@ -0,0 +1,137 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_systemd-boot_43.cfg

@@ -0,0 +1,138 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_systemd-boot_hardware-support_43.cfg

@@ -0,0 +1,139 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_systemd-boot_hardware-support_rawhide.cfg

@@ -0,0 +1,138 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/gnome_systemd-boot_rawhide.cfg

@@ -0,0 +1,137 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+usbutils
+wget
+
+%end

cook/dishes/virtual_43.cfg

@@ -1,9 +1,11 @@
-# Generated by pykickstart v3.62
+# Generated by pykickstart v3.68
 #version=DEVEL
 # Use text mode install
 text
 # Firewall configuration
 firewall --enabled --service=ssh
+# Run the Setup Agent on first boot
+firstboot --reconfig
 # Keyboard layouts
 keyboard --xlayouts='ch (fr)'
 # System language
@@ -12,7 +14,8 @@ lang en_US.UTF-8
 network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
 # Shutdown after installation
 shutdown
-repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
 # Root password
 rootpw --plaintext --allow-ssh 1234
 # SELinux configuration
@@ -22,7 +25,7 @@ services --enabled="NetworkManager,systemd-resolved"
 # System timezone
 timezone Europe/Zurich --utc
 # Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
 # System bootloader configuration
 bootloader --location=mbr --timeout=1
 # Clear the Master Boot Record
@@ -30,67 +33,25 @@ zerombr
 # Partition clearing information
 clearpart --all --initlabel
 # Disk partitioning information
-part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=512 --label=boot
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
 part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
 
 %packages --exclude-weakdeps
-NetworkManager
-NetworkManager-config-connectivity-fedora
-audit
-basesystem
-bash
-coreutils
+@core
 curl
-dhcp-client
-dnf5
-dnf5-plugins
-dracut
-dracut-config-rescue
-e2fsprogs
 fedora-remix-logos
-filesystem
-firewalld
-fwupd
 generic-logos
 generic-release
 generic-release-common
 generic-release-notes
-glibc
-hostname
-iproute
-iputils
-kbd
-kernel
-less
+initial-setup
 libusb
-man-db
 nano
-ncurses
-openssh-clients
-openssh-server
-parted
 pciutils
-plymouth
-policycoreutils
-prefixdevname
-procps-ng
 qemu-guest-agent
-rootfiles
-rpm
-selinux-policy-targeted
-setup
-shadow-utils
 spice-vdagent
-sssd-common
-sssd-kcm
-sudo
-systemd
-systemd-resolved
 usbutils
-util-linux
-vim-minimal
 wget
-zram-generator-defaults
 
 %end

cook/dishes/virtual_gnome_43.cfg

@@ -0,0 +1,140 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_43.cfg

@@ -0,0 +1,140 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_hardware-support_43.cfg

@@ -0,0 +1,141 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_hardware-support_rawhide.cfg

@@ -0,0 +1,140 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_rawhide.cfg

@@ -0,0 +1,139 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_systemd-boot_43.cfg

@@ -0,0 +1,140 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_systemd-boot_hardware-support_43.cfg

@@ -0,0 +1,141 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_systemd-boot_hardware-support_rawhide.cfg

@@ -0,0 +1,140 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_encrypted_systemd-boot_rawhide.cfg

@@ -0,0 +1,139 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --encrypted --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_hardware-support_43.cfg

@@ -0,0 +1,141 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_hardware-support_rawhide.cfg

@@ -1,9 +1,11 @@
-# Generated by pykickstart v3.62
+# Generated by pykickstart v3.68
 #version=DEVEL
 # Use text mode install
 text
 # Firewall configuration
-firewall --enabled --service=ssh
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
 # Keyboard layouts
 keyboard --xlayouts='ch (fr)'
 # System language
@@ -13,10 +15,10 @@ network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
 # Shutdown after installation
 shutdown
 repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
-# Root password
-rootpw --plaintext --allow-ssh 1234
+#Root password
+rootpw --lock
 # SELinux configuration
-selinux --disabled
+selinux --enforcing
 # System services
 services --enabled="NetworkManager,systemd-resolved"
 # System timezone
@@ -32,16 +34,11 @@ zerombr
 # Partition clearing information
 clearpart --all --initlabel
 # Disk partitioning information
-part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=512 --label=boot
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
 part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
 
-%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
-
-# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
-# [org.gnome.desktop.background]
-# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
-# EOF
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
 [org.gnome.desktop.media-handling]
@@ -53,7 +50,7 @@ cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.overr
 [org.gnome.Terminal.Legacy.Profile]
 font='DejaVu Sans Mono 12'
 use-system-font=false
-audible-bell=false
+auditable-bell=false
 EOF
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
@@ -74,7 +71,7 @@ EOF
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
 [org.gnome.desktop.privacy]
 remove-old-temp-files=true
-remember-recent-files=false
+remember-recent-file=false
 remember-app-usage=false
 disable-camera=true
 disable-microphone=true
@@ -106,76 +103,38 @@ glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
 %end
 
 %packages --exclude-weakdeps
-NetworkManager
-NetworkManager-config-connectivity-fedora
-NetworkManager-wifi
-audit
-basesystem
-bash
-coreutils
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
 curl
+dconf
 dejavu-sans-mono-fonts
-dhcp-client
-dnf5
-dnf5-plugins
-dracut
-dracut-config-rescue
-e2fsprogs
 fedora-remix-logos
-filesystem
 firefox
-firewalld
-fwupd
+gdm
 generic-logos
 generic-release
 generic-release-common
 generic-release-notes
-glibc
 gnome-backgrounds.noarch
 gnome-control-center
+gnome-session-wayland-session
 gnome-shell
 gnome-terminal
-hostname
-iproute
-iputils
-kbd
-kernel
-less
+gvfs-fuse
+initial-setup
 libusb
-man-db
-mesa-dri-drivers
 mozilla-ublock-origin.noarch
 nano
-ncurses
-openssh-clients
-openssh-server
-parted
+nautilus
 pciutils
 pipewire-alsa
 pipewire-jack-audio-connection-kit
 pipewire-pulseaudio
-plymouth
-policycoreutils
-prefixdevname
-procps-ng
 qemu-guest-agent
-rootfiles
-rpm
-selinux-policy-targeted
-setup
-shadow-utils
 spice-vdagent
-sssd-common
-sssd-kcm
-sudo
-systemd
-systemd-resolved
 usbutils
-util-linux
-vim-minimal
 wget
-wpa_supplicant
-zram-generator-defaults
--gnome-tour
 
 %end

cook/dishes/virtual_gnome_rawhide.cfg

@@ -1,4 +1,4 @@
-# Generated by pykickstart v3.62
+# Generated by pykickstart v3.68
 #version=DEVEL
 # Use text mode install
 text
@@ -34,37 +34,11 @@ zerombr
 # Partition clearing information
 clearpart --all --initlabel
 # Disk partitioning information
-part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=512 --label=boot
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
 part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
 
-%post --logfile=/mnt/sysimage/root/post.log
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-## Append lines to existing vendor.conf file, so that options are skipped upon reboot
-cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
-[pages]
-skip=privacy
-[goa]
-providers=local-first!
-EOF
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
-
-# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
-# [org.gnome.desktop.background]
-# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
-# EOF
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
 [org.gnome.desktop.media-handling]
@@ -76,7 +50,7 @@ cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.overr
 [org.gnome.Terminal.Legacy.Profile]
 font='DejaVu Sans Mono 12'
 use-system-font=false
-audible-bell=false
+auditable-bell=false
 EOF
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
@@ -97,7 +71,7 @@ EOF
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
 [org.gnome.desktop.privacy]
 remove-old-temp-files=true
-remember-recent-files=false
+remember-recent-file=false
 remember-app-usage=false
 disable-camera=true
 disable-microphone=true
@@ -129,96 +103,37 @@ glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
 %end
 
 %packages --exclude-weakdeps
-NetworkManager
-NetworkManager-config-connectivity-fedora
-NetworkManager-wifi
-alsa-sof-firmware
-amd-gpu-firmware
-atheros-firmware
-audit
-b43-fwcutter
-b43-openfwwf
-basesystem
-bash
-brcmfmac-firmware
-cirrus-audio-firmware
-coreutils
+@base-graphical
+@core
+bash-color-prompt
 curl
+dconf
 dejavu-sans-mono-fonts
-dhcp-client
-dnf5
-dnf5-plugins
-dracut
-dracut-config-rescue
-e2fsprogs
 fedora-remix-logos
-filesystem
 firefox
-firewalld
-fwupd
+gdm
 generic-logos
 generic-release
 generic-release-common
 generic-release-notes
-glibc
 gnome-backgrounds.noarch
 gnome-control-center
-gnome-initial-setup
+gnome-session-wayland-session
 gnome-shell
 gnome-terminal
-hostname
-intel-audio-firmware
-intel-gpu-firmware
-intel-vsc-firmware
-iproute
-iputils
-iwlegacy-firmware
-iwlwifi-dvm-firmware
-iwlwifi-mvm-firmware
-kbd
-kernel
-less
-libertas-firmware
+gvfs-fuse
+initial-setup
 libusb
-man-db
-mesa-dri-drivers
 mozilla-ublock-origin.noarch
-mt7xxx-firmware
 nano
-ncurses
-nvidia-gpu-firmware
-nxpwireless-firmware
-openssh-clients
-openssh-server
-parted
+nautilus
 pciutils
 pipewire-alsa
 pipewire-jack-audio-connection-kit
 pipewire-pulseaudio
-plymouth
-policycoreutils
-prefixdevname
-procps-ng
 qemu-guest-agent
-realtek-firmware
-rootfiles
-rpm
-selinux-policy-targeted
-setup
-shadow-utils
 spice-vdagent
-sssd-common
-sssd-kcm
-sudo
-systemd
-systemd-resolved
-tiwilink-firmware
 usbutils
-util-linux
-vim-minimal
 wget
-wpa_supplicant
-zram-generator-defaults
--gnome-tour
 
 %end

cook/dishes/virtual_gnome_systemd-boot_43.cfg

@@ -0,0 +1,140 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_systemd-boot_hardware-support_43.cfg

@@ -0,0 +1,141 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_systemd-boot_hardware-support_rawhide.cfg

@@ -0,0 +1,140 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+@hardware-support
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_gnome_systemd-boot_rawhide.cfg

@@ -0,0 +1,139 @@
+# Generated by pykickstart v3.68
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --enabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="rawhide" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+#Root password
+rootpw --lock
+# SELinux configuration
+selinux --enforcing
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Zurich --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --sdboot
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
+
+%post --nochroot --logfile=/mnt/sysimage/root/gnome-desktop-post.log
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+auditable-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-file=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@base-graphical
+@core
+bash-color-prompt
+curl
+dconf
+dejavu-sans-mono-fonts
+fedora-remix-logos
+firefox
+gdm
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+gnome-backgrounds.noarch
+gnome-control-center
+gnome-session-wayland-session
+gnome-shell
+gnome-terminal
+gvfs-fuse
+initial-setup
+libusb
+mozilla-ublock-origin.noarch
+nano
+nautilus
+pciutils
+pipewire-alsa
+pipewire-jack-audio-connection-kit
+pipewire-pulseaudio
+qemu-guest-agent
+spice-vdagent
+usbutils
+wget
+
+%end

cook/dishes/virtual_rawhide.cfg

@@ -1,9 +1,11 @@
-# Generated by pykickstart v3.62
+# Generated by pykickstart v3.68
 #version=DEVEL
 # Use text mode install
 text
 # Firewall configuration
 firewall --enabled --service=ssh
+# Run the Setup Agent on first boot
+firstboot --reconfig
 # Keyboard layouts
 keyboard --xlayouts='ch (fr)'
 # System language
@@ -30,67 +32,25 @@ zerombr
 # Partition clearing information
 clearpart --all --initlabel
 # Disk partitioning information
-part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=512 --label=boot
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=2048 --label=boot
 part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit"
 
 %packages --exclude-weakdeps
-NetworkManager
-NetworkManager-config-connectivity-fedora
-audit
-basesystem
-bash
-coreutils
+@core
 curl
-dhcp-client
-dnf5
-dnf5-plugins
-dracut
-dracut-config-rescue
-e2fsprogs
 fedora-remix-logos
-filesystem
-firewalld
-fwupd
 generic-logos
 generic-release
 generic-release-common
 generic-release-notes
-glibc
-hostname
-iproute
-iputils
-kbd
-kernel
-less
+initial-setup
 libusb
-man-db
 nano
-ncurses
-openssh-clients
-openssh-server
-parted
 pciutils
-plymouth
-policycoreutils
-prefixdevname
-procps-ng
 qemu-guest-agent
-rootfiles
-rpm
-selinux-policy-targeted
-setup
-shadow-utils
 spice-vdagent
-sssd-common
-sssd-kcm
-sudo
-systemd
-systemd-resolved
 usbutils
-util-linux
-vim-minimal
 wget
-zram-generator-defaults
 
 %end

cook/generate_recipe.py

@@ -0,0 +1,383 @@
+#!/usr/bin/env python3
+"""
+Recipe generator for Phyllome OS.
+Reads recipes_manifest.yaml and generates kickstart recipe files.
+"""
+
+import argparse
+import itertools
+import os
+import sys
+
+import yaml
+
+
+# Template mappings from recipe_templates.yaml
+TEMPLATES = {
+    'required': {
+        'repository': {
+            '43': 'repo/fedora-43-mirrors.ks',
+            'rawhide': 'repo/rawhide-mirrors.ks',
+        },
+        'core': {
+            'base': 'core/base.ks',
+        },
+        'bootloader': {
+            'grub': 'bootloader/grub.ks',
+            'systemd-boot': 'bootloader/systemd-boot.ks',
+        },
+        'storage': {
+            'standard': 'storage/standard.ks',
+            'encrypted': 'storage/encrypted.ks',
+        },
+        'locale': {
+            'default': 'core/locale.ks',
+        },
+        'services': {
+            'minimal': 'core/services.ks',
+        },
+        'network': {
+            'network-manager': 'core/network.ks',
+        },
+        'packages': {
+            'core': 'packages/core.ks',
+        },
+        'brand': {
+            'fedora-remix': 'packages/fedora-remix.ks',
+        },
+        'extra': {
+            'extra': 'packages/hand-picked.ks',
+        },
+        'security': {
+            'secure': 'core/security/enabled.ks',
+            'insecure': 'core/security/disabled.ks',
+        },
+        'initial-setup': {
+            'server': 'initial-setup/server/config.ks',
+            'gnome': 'initial-setup/gnome/config.ks',
+            'generic-wayland': 'initial-setup/generic-wayland/config.ks',
+        },
+    },
+    'optional': {
+        'hardware-support': 'packages/hardware-support.ks',
+        'guest-agents': 'guest-agents/base.ks',
+        'hypervisor': {
+            'base': [
+                'hypervisor/base/packages.ks',
+                'hypervisor/base/services.ks',
+                'hypervisor/base/post-scripts.ks',
+            ],
+            'desktop': [
+                'packages/virtual-machine-manager/packages.ks',
+                'packages/virtual-machine-manager/post-scripts.ks',
+            ],
+        },
+        'desktop': {
+            'gnome': [
+                'desktop/gnome/config.ks',
+                'desktop/gnome/packages.ks',
+                'desktop/gnome/post-scripts.ks',
+            ],
+            'labwc': [
+                'desktop/labwc/config.ks',
+            ],
+        },
+        'hypervisor_type': {
+            'amdcpu': 'hypervisor/amdcpu.ks',
+            'intelcpu': 'hypervisor/intelcpu.ks',
+            'intelgpu': 'hypervisor/intelgpu.ks',
+        },
+    },
+    'live': {
+        'core': [
+            'live/core/base.ks',
+            'live/core/storage.ks',
+            'live/core/packages.ks',
+        ],
+        'bootloader': {
+            'grub': 'live/core/bootloader/grub.ks',
+            'systemd-boot': 'live/core/bootloader/systemd-boot.ks',
+        },
+        'post': [
+            'live/post/base.ks',
+            'live/post/session.ks',
+        ],
+    },
+}
+
+
+def expand_variants(variant_config):
+    """Expand variant config with list values into cartesian product."""
+    keys = variant_config.keys()
+    values = []
+    for key in keys:
+        val = variant_config[key]
+        if isinstance(val, list):
+            values.append([(key, v) for v in val])
+        else:
+            values.append([(key, val)])
+    
+    combos = itertools.product(*values)
+    return [dict(combo) for combo in combos]
+
+
+def get_required_ingredients(variant):
+    """Get required ingredients for a variant."""
+    ingredients = []
+    
+    # Build variant dict with special mappings
+    variant_map = dict(variant)
+    
+    for category, mapping in TEMPLATES['required'].items():
+        key = variant_map.get(category, list(mapping.keys())[0])
+        if category == 'version':
+            key = str(key)
+        path = mapping.get(key)
+        if path:
+            ingredients.append(path)
+    
+    return ingredients
+
+
+def get_optional_ingredients(variant):
+    """Get optional ingredients based on variant flags."""
+    ingredients = []
+    
+    # Handle boolean flags
+    for opt_key in ['hardware-support', 'guest-agents']:
+        if variant.get(opt_key):
+            path = TEMPLATES['optional'].get(opt_key)
+            if path:
+                ingredients.append(path)
+    
+    # Handle live flag
+    if variant.get('live'):
+        ingredients.extend(TEMPLATES['live']['core'])
+        bootloader = variant.get('bootloader', 'grub')
+        ingredients.append(TEMPLATES['live']['bootloader'][bootloader])
+        ingredients.extend(TEMPLATES['live']['post'])
+    
+    # Handle desktop
+    desktop = variant.get('desktop')
+    if desktop:
+        desktop_map = TEMPLATES['optional']['desktop']
+        if desktop in desktop_map:
+            ingredients.extend(desktop_map[desktop])
+    
+    # Handle hypervisor
+    hypervisor = variant.get('hypervisor')
+    if hypervisor:
+        hypervisor_map = TEMPLATES['optional']['hypervisor']
+        if hypervisor in hypervisor_map:
+            ingredients.extend(hypervisor_map[hypervisor])
+    
+    # Handle hypervisor_type
+    hypervisor_type = variant.get('hypervisor_type')
+    if hypervisor_type:
+        path = TEMPLATES['optional']['hypervisor_type'].get(hypervisor_type)
+        if path:
+            ingredients.append(path)
+    
+    return ingredients
+
+
+def generate_filename(variant, group_name=None):
+    """Generate filename from variant configuration."""
+    parts = []
+
+    # Guest agents
+    if variant.get('guest-agents'):
+        parts.append('virtual')
+
+    # Desktop
+    desktop = variant.get('desktop')
+    if desktop:
+        parts.append(desktop)
+
+    # Hypervisor type
+    if variant.get('hypervisor'):
+        parts.append(f"hypervisor-{variant['hypervisor']}")
+    
+    if variant.get('hypervisor_type'):
+        parts.append(variant['hypervisor_type'])
+    
+    # Storage
+    if variant.get('storage') == 'encrypted':
+        parts.append('encrypted')
+    
+    # Bootloader
+    if variant.get('bootloader') == 'systemd-boot':
+        parts.append('systemd-boot')
+
+    # Hardware support
+    if variant.get('hardware-support'):
+        parts.append('hardware-support')
+        
+    # Security (only if not default)
+    if variant.get('security') == 'disabled':
+        parts.append('security-disabled')
+    
+    # Add group name if specified (for uniqueness)
+    if group_name and group_name in ['desktop-live', 'server-live']:
+        parts.append(group_name.replace('live', ''))
+    
+    # Version
+    parts.append(str(variant.get('repository', '43')))
+    
+    return '_'.join(parts) + '.cfg'
+
+
+def write_recipe_file(ingredients, variant, output_dir, group_name=None):
+    """Write recipe file with header and includes."""
+    os.makedirs(output_dir, exist_ok=True)
+    
+    filename = generate_filename(variant, group_name)
+    filepath = os.path.join(output_dir, filename)
+    
+    header = f"""#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \\/ ___/
+#    / __ \\/ __ \\/ / / / / / __ \\/ __ `__ \\/ _ \\   / / / /\\__ \\
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\\__, /_/_/\\____/_/ /_/ /_/\\___/   \\____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+"""
+    
+    # Use ingredient paths as-is (simple paths relative to project root)
+    # ksflatten-relative will handle conversion during flattening
+    seen = set()
+    unique_ingredients = []
+    for ing in ingredients:
+        if ing not in seen:
+            seen.add(ing)
+            unique_ingredients.append(ing)
+    
+    includes = '\n'.join(f'%include {ing}' for ing in unique_ingredients)
+    
+    content = header + includes + '\n'
+    
+    with open(filepath, 'w') as f:
+        f.write(content)
+    
+    return filepath
+
+
+def generate_recipes(manifest_path, output_dir):
+    """Generate all recipes from manifest."""
+    with open(manifest_path) as f:
+        manifest = yaml.safe_load(f)
+    
+    generated = []
+    
+    for recipe_group in manifest.get('recipes', []):
+        group_name = recipe_group.get('name', 'unknown')
+        for variant_config in recipe_group.get('variants', []):
+            for variant in expand_variants(variant_config):
+                required = get_required_ingredients(variant)
+                optional = get_optional_ingredients(variant)
+                all_ingredients = required + optional
+                
+                filepath = write_recipe_file(all_ingredients, variant, output_dir, group_name)
+                generated.append(filepath)
+    
+    return generated
+
+
+def validate_recipe(recipe_path):
+    """Validate a recipe file using pykickstart."""
+    try:
+        from pykickstart.parser import KickstartParser
+        from pykickstart.version import returnClassForVersion
+        
+        ks_class = returnClassForVersion()
+        parser = KickstartParser(ks_class)
+        
+        # Get absolute path and change to that directory for include resolution
+        abs_path = os.path.abspath(recipe_path)
+        recipe_dir = os.path.dirname(abs_path)
+        original_dir = os.getcwd()
+        
+        os.chdir(recipe_dir)
+        parser.readKickstart(abs_path)
+        os.chdir(original_dir)
+        return True, None
+    except Exception as e:
+        os.chdir(original_dir)
+        return False, str(e)
+
+
+def validate_all(recipes_dir):
+    """Validate all recipes in directory."""
+    if not os.path.isdir(recipes_dir):
+        print(f"Error: {recipes_dir} is not a directory", file=sys.stderr)
+        return False
+    
+    errors = []
+    for filename in sorted(os.listdir(recipes_dir)):
+        if filename.endswith('.cfg'):
+            filepath = os.path.join(recipes_dir, filename)
+            valid, error = validate_recipe(filepath)
+            if valid:
+                print(f"✓ {filename}")
+            else:
+                print(f"✗ {filename}: {error}", file=sys.stderr)
+                errors.append((filename, error))
+    
+    return len(errors) == 0
+
+
+def main():
+    parser = argparse.ArgumentParser(description='Generate Phyllome OS recipes')
+    parser.add_argument('--manifest', default='recipes_manifest.yaml',
+                        help='Path to recipes manifest YAML')
+    parser.add_argument('--output-dir', default='recipes/',
+                        help='Output directory for recipe files')
+    parser.add_argument('--validate', action='store_true',
+                        help='Validate generated recipes')
+    parser.add_argument('files', nargs='*', default=[],
+                        help='Recipe files to validate')
+    args = parser.parse_args()
+    
+    # Generate recipes from cook/ directory
+    script_dir = os.path.dirname(os.path.abspath(__file__))
+    os.chdir(script_dir)
+    
+    # Paths relative to cook/ directory
+    manifest_path = args.manifest
+    if not os.path.isabs(args.manifest):
+        manifest_path = os.path.join(script_dir, args.manifest)
+    
+    output_dir = args.output_dir
+    if not os.path.isabs(args.output_dir):
+        output_dir = os.path.join(script_dir, args.output_dir)
+    
+    print(f"Generating recipes from {manifest_path} to {output_dir}...")
+    recipes = generate_recipes(manifest_path, output_dir)
+    print(f"✓ Generated {len(recipes)} recipe files")
+    
+    # Validate if requested (from command line files or directory)
+    if args.validate or args.files:
+        print("\nValidating recipes...")
+        if args.files:
+            # Validate specific files
+            all_valid = True
+            for filepath in args.files:
+                valid, error = validate_recipe(filepath)
+                if valid:
+                    print(f"✓ {os.path.basename(filepath)}")
+                else:
+                    print(f"✗ {os.path.basename(filepath)}: {error}", file=sys.stderr)
+                    all_valid = False
+            if not all_valid:
+                sys.exit(1)
+        else:
+            # Validate output directory
+            if not validate_all(output_dir):
+                sys.exit(1)
+        print("✓ All recipes validated")
+
+
+if __name__ == '__main__':
+    main()

cook/ingredients/bootloader/grub.ks

@@ -1 +1,3 @@
-bootloader --timeout=1 # Set the GNU GRUB bootloader timeout to 1
+# GRUB bootloader configuration
+
+bootloader --timeout=1 # Set the GNU GRUB bootloader timeout to 1

cook/ingredients/bootloader/systemd-boot.ks

@@ -0,0 +1,3 @@
+# systemd-boot bootloader configuration
+
+bootloader --sdboot --location=mbr --timeout=1 # Use systemd-boot and set a timeout to 1

cook/ingredients/core/base.ks

@@ -0,0 +1,5 @@
+# Core base kickstart configuration
+# Common settings for all Phyllome OS installations
+
+text # Kickstart installation in text mode
+poweroff # Shut down the system after a successful installation

cook/ingredients/core/locale.ks

@@ -1,3 +1,5 @@
+# Keyboard, language, and timezone configuration
+
 keyboard --xlayouts='ch (fr)' # Set keyboard layouts for Romandy
 lang en_US.UTF-8 # Set system language to American English. More languages could be supported: --addsupport=cs_CZ,de_DE,en_UK
-timezone Europe/Zurich --utc # Set system timezone to Zurich
+timezone Europe/Zurich --utc # Set system timezone to Zurich

cook/ingredients/core/network.ks

@@ -1 +1,3 @@
-network  --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network devices, enable them at boot time device and sets a particular hostname. "link" selects the first device reaching an up state
+# Network configuration
+
+network  --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network devices, enable them at boot time device and sets a particular hostname. "link" selects the first device reaching an up state

cook/ingredients/core/security/disabled.ks

@@ -1,3 +1,5 @@
+# Security configuration - disabled mode
+
 rootpw --plaintext 1234 --allow-ssh # Root account is enabled with weak password and allow ssh
 selinux --disabled # Disable SELinux
-firewall --enabled --ssh # Reject incoming connections that are not in response to outbound requests except SSH
+firewall --enabled --ssh # Reject incoming connections that are not in response to outbound requests except SSH

cook/ingredients/core/security/enabled.ks

@@ -1,3 +1,5 @@
+# Security configuration - enabled mode
+
 rootpw --lock # No root login from the console
 selinux --enforcing # Set SELinux to enforcing mode
-firewall --enabled # Enable firewall
+firewall --enabled # Enable firewall

cook/ingredients/core/services.ks

@@ -1 +1,3 @@
+# System services
+
 services --enabled=NetworkManager,systemd-resolved # List of comma-separated systemd services that can be explicitly enabled

cook/ingredients/desktop/gnome/config.ks

@@ -0,0 +1 @@
+xconfig --startxonboot --defaultdesktop=GNOME # Start the display session on boot. Although it says --startx, which seems to imply xorg, it is actually generic and thus works also with Wayland.

cook/ingredients/desktop/gnome/packages.ks

@@ -0,0 +1,51 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# GNOME desktop packages
+
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies
+
+@base-graphical
+## provides the following as mandatory packages:
+# mesa-dri-drivers
+# mesa-vulkan-drivers
+# plymouth-system-theme
+
+# @critical-path-gnome not using this group but hand-picking packages 
+## Mandatory packages found in hidden `@critical-path-gnome` group (`dnf group info --hidden critical-path-gnome`)
+## Not using 
+## provides the following as mandatory packages:
+bash-color-prompt # Color prompt for bash shell
+dconf # A configuration system
+gdm # The GNOME Display Manager
+# gnome-classic-session # GNOME "classic" mode session
+gnome-control-center # Utilities to configure the GNOME desktop
+# gnome-initial-setup # Bootstrapping your OS
+gnome-shell # Window management and application launching for GNOME
+gvfs-fuse # FUSE support for gvfs
+# ptyxis # A container oriented terminal for GNOME
+### and the following as default packages
+# NetworkManager-pptp # NetworkManager VPN plugin for PPTP
+# avahi # Local network service discovery
+# gnome-bluetooth # Bluetooth graphical utilities
+gnome-session-wayland-session # Desktop file for wayland based gnome session
+# gnome-software # A software center for GNOME
+nautilus # File manager for GNOME
+# toolbox # Tool for interactive command line environments on Linux
+
+## Extra hand-picked packages
+gnome-backgrounds.noarch # wallpapers from the GNOME project
+gnome-terminal # Terminal emulator for GNOME
+dejavu-sans-mono-fonts # the gnome-shell package doesn't include much fonts by default, resulting in weird spacings in GNOME Terminal. GNOME Terminal unfortunately doesn't automatically pick this font 
+firefox # Mozilla Firefox Web browser
+mozilla-ublock-origin.noarch # An efficient blocker for Firefox
+
+pipewire-alsa # PipeWire media server ALSA support
+pipewire-pulseaudio # PipeWire PulseAudio implementation
+pipewire-jack-audio-connection-kit # PipeWire JACK implementation
+
+%end # End of the packagages section

cook/ingredients/desktop/gnome/post-scripts.ks

@@ -1,30 +1,6 @@
-xconfig --startxonboot --defaultdesktop=GNOME # Start the display session on boot. Although it says --startx, which seems to imply xorg, it is actually generic and thus works also with Wayland.
+# GNOME desktop post-installation configuration
 
-%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak dependencies
-
-gnome-shell # the version 3 of the GNOME desktop environment, without any presintalled applications
-gnome-terminal # install the default terminal for GNOME Shell
-gnome-control-center # Utilities to configure the GNOME desktop
--gnome-tour # delete GNOME Tour so it doesn't automatically launch on boot 
-mesa-dri-drivers # add mesa drivers otherwise there is a blank screen when first booting a desktop-based kickstart without virtualization tools 
-dejavu-sans-mono-fonts # the gnome-shell package doesn't include much fonts by default, resulting in weird spacings in GNOME Terminal. GNOME Terminal unfortunately doesn't automatically pick this font 
-gnome-backgrounds.noarch # wallpapers from the GNOME project
-wpa_supplicant # WPA Supplicant for Linux. It is not packaged by default in GNOME Shell, but necessary to configure wireless networks using the Network Manager
-NetworkManager-wifi # Provides the plugin to manage Wireless networking within GNOME Shell
-firefox # Internet browser
-mozilla-ublock-origin.noarch # An efficient ad blocker for Firefox
-pipewire-alsa # PipeWire media server ALSA support
-pipewire-pulseaudio # PipeWire PulseAudio implementation
-pipewire-jack-audio-connection-kit # PipeWire JACK implementation
-
-%end # End of the packagages section
-
-%post --nochroot --log=/mnt/sysimage/root/base-desktop-gnome.log # Beginning of %post section. Those commands are executed outside the chroot environment
-
-# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
-# [org.gnome.desktop.background]
-# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
-# EOF
+%post --nochroot --log=/mnt/sysimage/root/gnome-desktop-post.log # Beginning of %post section. Those commands are executed outside the chroot environment
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
 [org.gnome.desktop.media-handling]
@@ -36,7 +12,7 @@ cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.overr
 [org.gnome.Terminal.Legacy.Profile]
 font='DejaVu Sans Mono 12'
 use-system-font=false
-audible-bell=false
+auditable-bell=false
 EOF
 
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
@@ -57,7 +33,7 @@ EOF
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
 [org.gnome.desktop.privacy]
 remove-old-temp-files=true
-remember-recent-files=false
+remember-recent-file=false
 remember-app-usage=false
 disable-camera=true
 disable-microphone=true
@@ -86,4 +62,4 @@ EOF
 
 glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/desktop/labwc/config.ks

@@ -0,0 +1,19 @@
+# Untested
+
+xconfig --startxonboot # Start the display session on boot. Although it says --startx, which seems to imply xorg, it is actually generic and thus works also with Wayland.
+
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies.
+
+@base-graphical
+## provides the following as mandatory packages:
+# mesa-dri-drivers
+# mesa-vulkan-drivers
+# plymouth-system-theme
+
+labwc # A Wayland window-stacking compositor
+
+## Extra hand-picked packages
+firefox # Mozilla Firefox Web browser
+mozilla-ublock-origin.noarch # An efficient blocker for Firefox
+
+%end # End of the packagages section

cook/ingredients/guest-agents/base.ks

@@ -0,0 +1,6 @@
+# Guest agents for virtual machines
+
+%packages --exclude-weakdeps
+qemu-guest-agent
+spice-vdagent
+%end

cook/ingredients/hypervisor/amdcpu.ks

@@ -1,7 +1,9 @@
-%post --nochroot --log=/mnt/sysimage/root/base-hypervisor-amdcpu.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
+# AMD CPU optimization for hypervisor
+
+%post --nochroot --log=/mnt/sysimage/root/hypervisor-amdcpu-post.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
 
 sed -i 's/\(quiet\)/\1 iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB. 
 
 echo "options kvm_amd nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested virtualization
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/hypervisor/base/packages.ks

@@ -0,0 +1,30 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Virtualization packages
+
+%packages --exclude-weakdeps # Beginning of the packages section. Does not include weak dependencies.
+
+qemu-kvm # QEMU metapackage for KVM support
+libvirt # Library providing a simple virtualization API
+libvirt-client # Client side utilities of the libvirt library
+libvirt-client-qemu # Additional client side utilities for QEMU. Used to interact with some QEMU specific features of libvirt.
+libvirt-daemon # Server side daemon and supporting files for libvirt library
+libvirt-daemon-common # Miscellaneous files and utilities used by other libvirt daemons
+libvirt-daemon-config-network # Default configuration files for the libvirtd daemon. Provides NAT based networking
+libvirt-daemon-driver-interface # Interface driver plugin for the libvirtd daemon
+libvirt-daemon-driver-network # The network driver plugin for the libvirtd daemon, providing an implementation of the virtual network APIs using the Linux bridge capabilities.
+libvirt-daemon-driver-qemu # QEMU driver plugin for the libvirtd daemon
+libvirt-daemon-kvm # Server side daemon & driver required to run KVM guests
+libvirt-daemon-log # Server side daemon for managing logs
+libvirt-daemon-qemu # Server side daemon and driver required to manage the virtualization capabilities of the QEMU TCG emulators
+libvirt-nss # Libvirt plugin for Name Service Switch
+libvirt-dbus # libvirt D-Bus API binding
+libvirt-daemon-driver-ch # Cloud-Hypervisor driver plugin for libvirtd daemon
+virt-install # Utilities for installing virtual machines
+
+%end # End of the packages section

cook/ingredients/hypervisor/base/post-scripts.ks

@@ -0,0 +1,31 @@
+# Hypervisor base post-installation configuration
+
+%post --nochroot --log=/mnt/sysimage/root/hypervisor-base-post.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end # End of the %post section

cook/ingredients/hypervisor/base/services.ks

@@ -0,0 +1,3 @@
+# Hypervisor base configuration
+
+services --enabled="NetworkManager,systemd-resolved,libvirtd" # Without libvirtd here, it appears the service won't automatically start

cook/ingredients/hypervisor/intelcpu.ks

@@ -1,7 +1,9 @@
-%post --nochroot --log=/mnt/sysimage/root/base-hypervisor-intelcpu.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
+# Intel CPU optimization for hypervisor
+
+%post --nochroot --log=/mnt/sysimage/root/hypervisor-intelcpu-post.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
 
 sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB.
 
 echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested virtualization on Intel CPUs
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/hypervisor/intelgpu.ks

@@ -1,4 +1,6 @@
-%post --nochroot --log=/mnt/sysimage/root/base-hypervisor-intelgpu.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installtion troubleshooting
+# Intel GPU passthrough configuration
+
+%post --nochroot --log=/mnt/sysimage/root/hypervisor-intelgpu-post.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installtion troubleshooting
 
 sed -i 's/\(vfio-pci\)/\1 i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub # Load kernel modules in grub.
 
@@ -6,4 +8,4 @@ sed -i 's/\(vfio-pci\)/\1 i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub #
 echo "kvmgt" > /mnt/sysimage/etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
 echo "vfio-mdev" > /mnt/sysimage/etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/initial-setup/desktop/config.ks

@@ -0,0 +1,9 @@
+# Desktop initial-setup configuration
+
+firstboot --enable # Enable the Setup Agent to start at boot time
+
+%packages --exclude-weakdeps
+
+initial-setup
+
+%end

cook/ingredients/initial-setup/generic-wayland/config.ks

@@ -0,0 +1,11 @@
+# Initial setup - generic wayland desktop mode
+
+firstboot --enable # Initial Setup will start after the first reboot
+
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies.
+
+# TO BE TESTED -> initial-setup-gui # Graphical user interface for the initial-setup utility
+# TO BE TESTED -> initial-setup-gui-wayland-generic.x86_64 # Run the initial-setup GUI in Wayland
+gnome-initial-setup # Add GNOME initial setup too to let user create local account.
+
+%end # End of the packages section

cook/ingredients/initial-setup/gnome/config.ks

@@ -0,0 +1,25 @@
+# Initial setup - GNOME desktop mode
+
+firstboot --enable # Initial Setup will start after the first reboot
+
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies.
+
+# TO BE TESTED -> initial-setup-gui # Graphical user interface for the initial-setup utility
+# TO BE TESTED -> initial-setup-gui-wayland-generic.x86_64 # Run the initial-setup GUI in Wayland
+gnome-initial-setup # Add GNOME initial setup too to let user create local account.
+
+%end # End of the packages section
+
+# %post --nochroot --log=/mnt/sysimage/root/initial-setup-gnome.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
+# 
+# truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+# 
+# ## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+# cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+# [pages]
+# skip=privacy
+# [goa]
+# providers=local-first!
+# EOF
+# 
+# %end # End of the %post section

cook/ingredients/initial-setup/server/config.ks

@@ -1,7 +1,9 @@
+# Initial setup - server mode
+
 firstboot --enable --reconfig # Enable the Setup Agent to start at boot time in reconfiguration mode. This mode enables the language, mouse, keyboard, root password, security level, time zone, and networking configuration options in addition to the default ones
 
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies.
 
 initial-setup # Initial setup package
 
-%end # End of the packages section
+%end # End of the packages section

cook/ingredients/live/core/base.ks

@@ -0,0 +1,3 @@
+# Live core base configuration
+
+poweroff # Shut down the system after a successful installation

cook/ingredients/live/core/bootloader/grub.ks

@@ -0,0 +1,3 @@
+# Live core bootloader configuration
+
+bootloader --timeout=1 # Set the GNU GRUB bootloader timeout to 1 and to location to none

cook/ingredients/live/core/bootloader/systemd-boot.ks

@@ -0,0 +1,3 @@
+# Live core systemd-boot configuration
+
+bootloader --sdboot --location=none --timeout=1 # Use systemd-boot and set location to none

cook/ingredients/live/core/packages.ks

@@ -1,3 +1,5 @@
+# Anaconda tools and kernel packages for live media
+
 %packages # Beginning of the package section. Include weak dependencies. Description courtesy of the Fedora project
 
 @anaconda-tools
@@ -20,4 +22,4 @@ glibc-all-langpacks
 # provide the livesys scripts
 livesys-scripts
 
-%end
+%end

cook/ingredients/live/core/storage.ks

@@ -1,5 +1,7 @@
+# Live core storage configuration
+
 zerombr # WARNING : Dangerous command ! Will clear the Master Boot Record
 clearpart --all --initlabel # Partition clearing information. This setup uses GPT by default.
 
 part / --fstype="ext4" --size=5120 # Create a root partition of around 7GB
-part / --size=8576
+part / --size=8576

cook/ingredients/live/hypervisor.ks

@@ -0,0 +1,14 @@
+# Live desktop hypervisor configuration
+
+# Enable virtualization support in live environment
+%packages
+qemu-kvm
+libvirt-client
+virt-install
+%end
+
+%post --erroronfail
+# Setup libvirt for live environment
+mkdir -p /var/lib/libvirt
+systemctl enable libvirtd
+%end

cook/ingredients/live/post/base.ks

@@ -1,4 +1,6 @@
-%post --log=/mnt/sysimage/root/post-live-core.log # Beginning of the post-installation section. Add logging.
+# Live core post-installation configuration
+
+%post --log=/mnt/sysimage/root/live-core-post.log # Beginning of the post-installation section. Add logging.
 
 # Enable livesys services
 systemctl enable livesys.service
@@ -48,4 +50,4 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
-%end
+%end

cook/ingredients/live/post/session.ks

@@ -1,6 +1,8 @@
+# Live session configuration
+
 %post --log=/mnt/sysimage/root/post-live-session.log # Beginning of the post-installation section. Add logging.
 
 # set livesys session type
 sed -i 's/^livesys_session=.*/livesys_session="gnome"/' /etc/sysconfig/livesys
 
-%end
+%end

cook/ingredients/packages/core.ks

@@ -0,0 +1,67 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Core DNF package group
+# More information: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#id240
+
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies. Package description courtesy of the Fedora project
+
+@core
+## Mandatory packages found in hidden `core` group (`dnf group info --hidden core`)
+# audit # User space tools for kernel auditing
+# basesystem # The skeleton package which defines a simple Fedora system
+# bash # The Bourne Again SHell, a command-line interpreter.
+# coreutils # A set of basic GNU tools commonly used in shell scripts
+# curl # A utility for getting files from remote servers (FTP, HTTP, and others)
+# dhcp-client # Provides the ISC DHCP client daemon and dhclient-script
+# dnf5 # Command-line package manager
+# e2fsprogs # Utilities for managing ext2, ext3, and ext4 file systems
+# filesystem # The basic directory layout for a Linux system
+# glibc # The GNU libc libraries
+# hostname # Utility to set/show the host name or domain name
+# iproute # Advanced IP routing and network device configuration tools
+# iputils # Network monitoring tools including ping
+# kbd # Tools for configuring the console (keyboard, virtual terminals, etc.)
+# kernel # The Linux kernel
+# less # A text file browser similar to more, but better. Can be excluded
+# man-db # Tools for searching and reading man pages. Can be excluded
+# ncurses # Ncurses support utilities
+# openssh-clients # An open source SSH client applications. Can be excluded
+# openssh-server # An open source SSH server daemon. Can be excluded
+# parted # The GNU disk partition manipulation program
+# policycoreutils # SELinux policy core utilities. Can be excluded
+# procps-ng # System and process monitoring utilities
+# rootfiles # The basic required files for the root user's directory
+# rpm # The RPM package management system
+# selinux-policy-targeted # SELinux targeted policy. Can be excluded
+# setup # A set of system configuration and setup files
+# shadow-utils # Utilities for managing accounts and shadow password files
+# sssd-common # Common files for the SSSD. Can be excluded
+# sssd-kcm # An implementation of a Kerberos KCM server. Can be excluded
+# sudo # Allows restricted root access for specified users
+# systemd # System and Service Manager
+# util-linux # Collection of basic system utilities
+# vim-minimal # A minimal version of the VIM editor
+
+## Default packages found in hidden `core` group (`dnf group info --hidden core`)
+# NetworkManager # Network connection manager and user applications
+# dnf5-plugins # Plugins for dnf5
+# dracut-config-rescue # dracut configuration to turn on rescue image generation
+# firewalld # A firewall daemon with D-Bus interface providing a dynamic firewall
+# fwupd # Firmware update daemon
+# plymouth # Graphical Boot Animation and Logger
+# prefixdevname # Udev helper utility that provides network interface naming using user defined prefix
+# systemd-resolved # Network Name Resolution manager
+# zram-generator-defaults # Default configuration for zram-generator
+
+## Optionnal packages found in hidden `core` group (`dnf group info --hidden core`)
+## Not installed by default unless "@core --optional" is used
+# dracut-config-generic
+# initial-setup
+# initscripts
+
+%end # End of the packages section

cook/ingredients/packages/fedora-remix.ks

@@ -0,0 +1,18 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Packages to be used to create a Fedora Remix and comply Fedora Remix legal guidelines: https://fedoraproject.org/wiki/Remix
+
+%packages --exclude-weakdeps
+
+fedora-remix-logos # Fedora Remix logos
+generic-release # Generic release files
+generic-logos # Icons and pictures
+generic-release-common # Generic release files
+generic-release-notes # Release Notes
+
+%end # End of the packages section

cook/ingredients/packages/hand-picked.ks

@@ -0,0 +1,12 @@
+# Hand-picked packages
+
+%packages --exclude-weakdeps
+
+pciutils # PCI bus related utilities
+libusb # Library for accessing USB devices
+usbutils # Linux USB utilities
+curl # transfer a URL
+wget # An advanced file and recursive website downloader
+nano # A small text editor
+
+%end # End of the packages section

cook/ingredients/packages/hardware-support.ks

@@ -0,0 +1,61 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Extended physical hardware support. Useful for bare metal deployments.
+
+%packages --exclude-weakdeps
+
+@hardware-support
+## Mandatory packages found in hidden `hardware-support` group
+# alsa-sof-firmware # Audio drivers and firmware for ALSA. Essential for audio functionality.
+# amd-gpu-firmware # Firmware for AMD GPUs.  Required for proper GPU operation.
+# atheros-firmware # Firmware for Atheros wireless network adapters.  Critical for wireless connectivity.
+# b43-fwcutter # Utility for cutting firmware files for B43 drivers.  Needed for driver compatibility.
+# b43-openfwwf # Driver and firmware for B43 network cards.  Essential for network card operation.
+# brcmfmac-firmware # Firmware for Broadcom MAC controllers.  Required for wireless and wired network performance.
+# cirrus-audio-firmware # Firmware for Cirrus Logic audio chips.  Necessary for audio hardware support.
+# intel-audio-firmware # Firmware for Intel audio processors.  Required for integrated audio functionality.
+# intel-gpu-firmware # Firmware for Intel GPUs. Essential for GPU operation.
+# intel-vsc-firmware # Firmware for Intel Video Scheduling Controller. Required for GPU performance.
+# iwlegacy-firmware # Legacy firmware for older Intel wireless cards.  Needed for compatibility.
+# iwlwifi-dvm-firmware # Firmware for Intel Wireless Link 5100/5200 series. Crucial for wireless connectivity.
+# iwlwifi-mvm-firmware # Firmware for Intel Wireless Link 5300/5400 series. Required for wireless performance.
+# libertas-firmware # Firmware for Broadcom wireless network cards.  Essential for wireless connectivity.
+# mt7xxx-firmware # Firmware for MediaTek wireless network adapters.  Required for wireless connectivity.
+# nvidia-gpu-firmware # Firmware for NVIDIA GPUs. Essential for GPU operation.
+# nxpwireless-firmware # Firmware for NXP wireless network adapters. Required for wireless connectivity.
+# realtek-firmware # Firmware for Realtek network adapters and audio devices.  Essential for various device support.
+# tiwilink-firmware # Firmware for TI WiLink wireless network adapters. Required for wireless connectivity.
+
+## Optional packages found in hidden `hardware-support` group
+## Not installed by default unless "@hardware-support --optional" is used
+# acpi # Command-line ACPI client
+# acpitool # Command line ACPI client
+# alsa-firmware # Firmware for several ALSA-supported sound cards
+# atmel-firmware # Firmware for Atmel at76c50x wireless network chips
+# cmospwd # BIOS password cracker utility
+# dvb-firmware # Firmware for various DVB broadcast receivers
+# gpsd # Service daemon for mediating access to a GPS
+# gpsd-clients # Clients for gpsd
+# hddtemp # Hard disk temperature tool
+# hdparm # A utility for displaying and/or setting hard disk parameters
+# iscan-firmware # Firmware for Epson flatbed scanners
+# libifp # General-purpose library-driver for iRiver's iFP portable audio players
+# lsscsi # List SCSI devices (or hosts) and associated information
+# mlxsw_spectrum-firmware # Firmware for Mellanox Spectrum 1/2/3 Switches
+# mrvlprestera-firmware # Firmware for Marvell Prestera Switchdev/ASIC devices
+# netronome-firmware # Firmware for Netronome Smart NICs
+# opensc # Smart card library and applications
+# pcsc-lite # PC/SC Lite smart card framework and applications
+# pcsc-lite-ccid # Generic USB CCID smart card reader driver
+# qcom-accel-firmware # Firmware for Qualcomm Technologies data center / Open-vRAN Accelerators
+# qed-firmware # Firmware for Marvell FastLinQ adapters family
+# radeontop # AMD Radeon video cards monitoring utility
+# wpan-tools # Userspace tools for the Linux IEEE 802.15.4 stack
+# zd1211-firmware # Firmware for wireless devices based on zd1211 chipset
+
+%end # End of the packages section

cook/ingredients/packages/virtual-machine-manager/packages.ks

@@ -0,0 +1,5 @@
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies.
+
+virt-manager # Install virt-manager, a graphical front-end for QEMU/KVM
+
+%end

cook/ingredients/packages/virtual-machine-manager/post-scripts.ks

@@ -1,10 +1,6 @@
-%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies
+# Virt-manager post-installation configuration
 
-virt-manager # Install virt-manager, a graphical front-end for QEMU/KVM
-
-%end
-
-%post --nochroot --log=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
+%post --nochroot --log=/mnt/sysimage/root/vmm-post-scripts.log # Beginning of %post section
 
 # Create a file to autostart virt-manager
 cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
@@ -17,45 +13,37 @@ EOF
 # Modify the default virt-manager behavior for misc. options
 cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
 
-# Modify the default virt-manager behavior for misc. options
 [org.virt-manager.virt-manager]
 xmleditor-enabled=true
 manager-window-height=600
 manager-window-width=200
 
-# Libvirt URIs listed in the manager window
 [org.virt-manager.virt-manager.connections]
 uris=['qemu:///system', 'qemu:///session']
 autoconnect=['qemu:///session']
 
-# Show usage in the domain list
 [org.virt-manager.virt-manager.vmlist-fields]
 cpu-usage=false
 
-# Settings related to statistics
 [org.virt-manager.virt-manager.stats]
 update-interval=3
 enable-disk-poll=true
 enable-memory-poll=true
 enable-net-poll=true
 
-# Default behavior for the console
 [org.virt-manager.virt-manager.console]
 scaling=2
 resize-guest=1
 autoconnect=false
 
-# Do not show toolbar
 [org.virt-manager.virt-manager.details]
 show-toolbar=false
 
-# Modify default values for new VMs
 [org.virt-manager.virt-manager.new-vm]
 storage-format='raw'
 cpu-default='host-model'
 graphics-type='spice'
 
-# Modify the default virt-manager behavior for confirmation dialogues
 [org.virt-manager.virt-manager.confirm]
 forcepoweroff=false
 removedev=false

cook/ingredients/repo/fedora-43-mirrors.ks

@@ -1,3 +1,5 @@
+# Fedora 43 repositories
+
 repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 # Official Fedora mirror
 repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64 # Official Fedora updates mirror
-url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 # Official Fedora updates mirror
+url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64 # Official Fedora updates mirror

cook/ingredients/repo/rawhide-mirrors.ks

@@ -1,2 +1,4 @@
+# Fedora Rawhide repositories
+
 repo --name=rawhide --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
-url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64
+url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=x86_64

cook/ingredients/repo/rpmfusion-nonfree.ks

@@ -1,3 +1,5 @@
+# RPM Fusion non-free repositories
+
 # RPM fusion repositories
 # For the current release tree
 repo --name=rpmfusion-nonfree --mirrorlist=https://mirrors.rpmfusion.org/mirrorlist?repo=nonfree-fedora-$releasever&arch=$basearch --includepkgs=rpmfusion-nonfree-release
@@ -16,4 +18,4 @@ echo "List of incuded RPM Fusion packages with their size:"
 rpm -q --qf '%{SIZE} %{NAME}\n' $(rpm -qa --qf '%{NAME} %{SIGGPG:pgpsig} %{SIGPGP:pgpsig} \n' | grep -e 3DE8C682E38EE9BC0FDFEA47FCAE2EA87F858107 | awk ' { print $1 } ') | sort -n
 echo
 
-%end
+%end

cook/ingredients/section-data/post/base.ks

@@ -1,6 +1,9 @@
+# Core post-installation configuration
+
 %post --log=/mnt/sysimage/root/post.log # Beginning of the post-installation section. Log all messages to a given file
 
 localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
+dnf update -y # Update the system
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/section-data/post/nochroot.ks

@@ -1,3 +1,5 @@
+# Post-installation no-chroot section
+
 %post --nochroot --log=/mnt/sysimage/root/post-nochroot.log # Beginning of the post-installation section. Log all messages to a given file
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/section-data/post/server.ks

@@ -0,0 +1 @@
+# Server-specific post-install tasks

cook/ingredients/section-data/pre/base.ks

@@ -1,3 +1,5 @@
+# Pre-installation kickstart section
+
 %pre --log=/mnt/sysimage/root/pre.log Beginning of the pre section. Log all messages to a given file
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/section-data/pre/install.ks

@@ -1,3 +1,5 @@
+# Pre-installation kickstart section
+
 %pre --log=/mnt/sysimage/root/pre-install.log Beginning of the pre-installation section. Log all messages to a given file
 
-%end # End of the %post section
+%end # End of the %post section

cook/ingredients/storage/encrypted.ks

@@ -0,0 +1,8 @@
+# Encrypted storage configuration
+
+zerombr # Destroy all the contents of disks with invalid partition tables or other formatting unrecognizable to the installer
+clearpart --all --initlabel # Erase all partitions and Initializes the disk label to the default for the target architecture
+
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi # Creates a 512 MiB EFI system partition
+part /boot --fstype="ext4" --size=2048 --label=boot # Creates a 2048 MiB ext4 boot partition
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit" --encrypted --passphrase= # Create a single encrypted root partition with the remaining space.

cook/ingredients/storage/standard.ks

@@ -1,6 +1,8 @@
+# Standard storage configuration
+
 zerombr # Destroy all the contents of disks with invalid partition tables or other formatting unrecognizable to the installer
 clearpart --all --initlabel # Erase all partitions and Initializes the disk label to the default for the target architecture
 
-part /boot/efi --fstype="efi" --size=2048 --fsoptions="umask=0077,shortname=winnt" --label=efi # Creates a 2 GB EFI system partition
-part /boot --fstype="ext4" --size=512 --label=boot # Creates a 512 MiB ext4 boot partition
-part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit" # Create a single root partition with the remaining space
+part /boot/efi --fstype="efi" --size=512 --fsoptions="umask=0077,shortname=winnt" --label=efi # Creates a 512 MiB EFI system partition
+part /boot --fstype="ext4" --size=2048 --label=boot # Creates a 2048 MiB ext4 boot partition
+part / --fstype="ext4" --grow --label=root --mkfsoptions="-O encrypt,fast_commit" # Create a single root partition with the remaining space

cook/ingredients/validation/success-if-empty.ks

@@ -0,0 +1,6 @@
+# Validation fragment - success if empty
+
+%post
+# If this is being run, it's a success
+echo SUCCESS > /root/RESULT
+%end

cook/recipe_templates.yaml

@@ -0,0 +1,76 @@
+# Proteus is a template generator for Phyllome OS
+# Fragment paths use relative paths from project root
+# Required elements can all be replaced by a listed modifier
+# Optional elements add features
+
+name: proteus
+description: "Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system"
+required:
+  repository: 
+    "43": repo/fedora-43-mirrors.ks
+  core:
+    "base": core/base.ks
+  bootloader:
+    "grub": bootloader/grub.ks
+  storage:
+    "ext4": storage/standard.ks
+  locale:
+    "fr_CH": core/locale.ks 
+  services:
+    "minimal": core/services.ks
+  network:
+    "network-manager": core/network.ks
+  packages:
+    "core": packages/core.ks
+  brand:
+    "fedora-remix": packages/fedora-remix.ks
+  extra:
+    "extra": packages/hand-picked.ks
+  security:
+    "secure": core/security/enabled.ks
+  initial-setup:
+    "server": initial-setup/server/config.ks
+modifiers:
+  repository: 
+    "rawhide": repo/rawhide-mirrors.ks
+  storage:
+    "encrypted": storage/encrypted.ks
+  security:
+    "disabled": core/security/disabled.ks
+  initial-setup:
+    gnome: initial-setup/gnome/config.ks
+    generic-wayland: initial-setup/generic-wayland/config.ks
+  live: 
+    core:
+      "live-base": livecore/base.ks
+    bootloader:
+      "systemd-boot": live/core/bootloader/systemd-boot.ks
+    packages:
+      "live-core": live/core/packages.ks
+optional:
+  hardware-support: packages/hardware-support.ks
+  guest-agents: guest-agents/base.ks
+  hypervisor: live/hypervisor.ks
+  desktop:
+    gnome:
+      - desktop/gnome/config.ks
+      - desktop/gnome/packages.ks
+      - desktop/gnome/post-scripts.ks
+    labwc:
+      - desktop/labwc/config.ks
+  hypervisor_type:
+    amdcpu: hypervisor/amdcpu.ks
+    intelcpu: hypervisor/intelcpu.ks
+    intelgpu: hypervisor/intelgpu.ks
+  hypervisor:
+    base:
+      - hypervisor/base/packages.ks
+      - hypervisor/base/services.ks
+      - hypervisor/base/post-scripts.ks
+    desktop:
+      - packages/virtual-machine-manager/packages.ks
+      - packages/virtual-machine-manager/post-scripts.ks
+  post:
+    live:
+      - base: live/post/base.ks
+      - session: live/post/session.ks

cook/recipes/gnome_43.cfg

@@ -0,0 +1,24 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/fedora-43-mirrors.ks
+%include core/base.ks
+%include bootloader/grub.ks
+%include storage/standard.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks

cook/recipes/gnome_encrypted_43.cfg

@@ -0,0 +1,24 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/fedora-43-mirrors.ks
+%include core/base.ks
+%include bootloader/grub.ks
+%include storage/encrypted.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks

cook/recipes/gnome_encrypted_hardware-support_43.cfg

@@ -0,0 +1,25 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/fedora-43-mirrors.ks
+%include core/base.ks
+%include bootloader/grub.ks
+%include storage/encrypted.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include packages/hardware-support.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks

cook/recipes/gnome_encrypted_hardware-support_rawhide.cfg

@@ -0,0 +1,25 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/rawhide-mirrors.ks
+%include core/base.ks
+%include bootloader/grub.ks
+%include storage/encrypted.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include packages/hardware-support.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks

cook/recipes/gnome_encrypted_rawhide.cfg

@@ -0,0 +1,24 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/rawhide-mirrors.ks
+%include core/base.ks
+%include bootloader/grub.ks
+%include storage/encrypted.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks

cook/recipes/gnome_encrypted_systemd-boot_43.cfg

@@ -0,0 +1,24 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/fedora-43-mirrors.ks
+%include core/base.ks
+%include bootloader/systemd-boot.ks
+%include storage/encrypted.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks

cook/recipes/gnome_encrypted_systemd-boot_hardware-support_43.cfg

@@ -0,0 +1,25 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/fedora-43-mirrors.ks
+%include core/base.ks
+%include bootloader/systemd-boot.ks
+%include storage/encrypted.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include packages/hardware-support.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks

cook/recipes/gnome_encrypted_systemd-boot_hardware-support_rawhide.cfg

@@ -0,0 +1,25 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# Universal template to generate kickstart recipes for a server, a desktop or a hypervisor system
+
+%include repo/rawhide-mirrors.ks
+%include core/base.ks
+%include bootloader/systemd-boot.ks
+%include storage/encrypted.ks
+%include core/locale.ks
+%include core/services.ks
+%include core/network.ks
+%include packages/core.ks
+%include packages/fedora-remix.ks
+%include packages/hand-picked.ks
+%include core/security/enabled.ks
+%include initial-setup/server/config.ks
+%include packages/hardware-support.ks
+%include desktop/gnome/config.ks
+%include desktop/gnome/packages.ks
+%include desktop/gnome/post-scripts.ks