bump hardware requirements, change default network, correct paths

the extra-args should refer to the file, irrespective of its location.

LICENSE.md

@@ -1,10 +1,625 @@
-# MIT License
+GNU GENERAL PUBLIC LICENSE
 
-Copyright (c) 2021 Lukas Greve
+Version 3, 29 June 2007
 
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+Copyright © 2007 Free Software Foundation, Inc. <https://fsf.org/>
 
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+Everyone is permitted to copy and distribute verbatim copies of this license
+document, but changing it is not allowed.
 
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+Preamble
+
+The GNU General Public License is a free, copyleft license for software and
+other kinds of works.
+
+The licenses for most software and other practical works are designed to take
+away your freedom to share and change the works. By contrast, the GNU General
+Public License is intended to guarantee your freedom to share and change all
+versions of a program--to make sure it remains free software for all its users.
+We, the Free Software Foundation, use the GNU General Public License for most
+of our software; it applies also to any other work released this way by its
+authors. You can apply it to your programs, too.
+
+When we speak of free software, we are referring to freedom, not price. Our
+General Public Licenses are designed to make sure that you have the freedom
+to distribute copies of free software (and charge for them if you wish), that
+you receive source code or can get it if you want it, that you can change
+the software or use pieces of it in new free programs, and that you know you
+can do these things.
+
+To protect your rights, we need to prevent others from denying you these rights
+or asking you to surrender the rights. Therefore, you have certain responsibilities
+if you distribute copies of the software, or if you modify it: responsibilities
+to respect the freedom of others.
+
+For example, if you distribute copies of such a program, whether gratis or
+for a fee, you must pass on to the recipients the same freedoms that you received.
+You must make sure that they, too, receive or can get the source code. And
+you must show them these terms so they know their rights.
+
+Developers that use the GNU GPL protect your rights with two steps: (1) assert
+copyright on the software, and (2) offer you this License giving you legal
+permission to copy, distribute and/or modify it.
+
+For the developers' and authors' protection, the GPL clearly explains that
+there is no warranty for this free software. For both users' and authors'
+sake, the GPL requires that modified versions be marked as changed, so that
+their problems will not be attributed erroneously to authors of previous versions.
+
+Some devices are designed to deny users access to install or run modified
+versions of the software inside them, although the manufacturer can do so.
+This is fundamentally incompatible with the aim of protecting users' freedom
+to change the software. The systematic pattern of such abuse occurs in the
+area of products for individuals to use, which is precisely where it is most
+unacceptable. Therefore, we have designed this version of the GPL to prohibit
+the practice for those products. If such problems arise substantially in other
+domains, we stand ready to extend this provision to those domains in future
+versions of the GPL, as needed to protect the freedom of users.
+
+Finally, every program is threatened constantly by software patents. States
+should not allow patents to restrict development and use of software on general-purpose
+computers, but in those that do, we wish to avoid the special danger that
+patents applied to a free program could make it effectively proprietary. To
+prevent this, the GPL assures that patents cannot be used to render the program
+non-free.
+
+The precise terms and conditions for copying, distribution and modification
+follow.
+
+TERMS AND CONDITIONS
+
+   0. Definitions.
+
+   "This License" refers to version 3 of the GNU General Public License.
+
+"Copyright" also means copyright-like laws that apply to other kinds of works,
+such as semiconductor masks.
+
+"The Program" refers to any copyrightable work licensed under this License.
+Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals
+or organizations.
+
+To "modify" a work means to copy from or adapt all or part of the work in
+a fashion requiring copyright permission, other than the making of an exact
+copy. The resulting work is called a "modified version" of the earlier work
+or a work "based on" the earlier work.
+
+A "covered work" means either the unmodified Program or a work based on the
+Program.
+
+To "propagate" a work means to do anything with it that, without permission,
+would make you directly or secondarily liable for infringement under applicable
+copyright law, except executing it on a computer or modifying a private copy.
+Propagation includes copying, distribution (with or without modification),
+making available to the public, and in some countries other activities as
+well.
+
+To "convey" a work means any kind of propagation that enables other parties
+to make or receive copies. Mere interaction with a user through a computer
+network, with no transfer of a copy, is not conveying.
+
+An interactive user interface displays "Appropriate Legal Notices" to the
+extent that it includes a convenient and prominently visible feature that
+(1) displays an appropriate copyright notice, and (2) tells the user that
+there is no warranty for the work (except to the extent that warranties are
+provided), that licensees may convey the work under this License, and how
+to view a copy of this License. If the interface presents a list of user commands
+or options, such as a menu, a prominent item in the list meets this criterion.
+
+   1. Source Code.
+
+The "source code" for a work means the preferred form of the work for making
+modifications to it. "Object code" means any non-source form of a work.
+
+A "Standard Interface" means an interface that either is an official standard
+defined by a recognized standards body, or, in the case of interfaces specified
+for a particular programming language, one that is widely used among developers
+working in that language.
+
+The "System Libraries" of an executable work include anything, other than
+the work as a whole, that (a) is included in the normal form of packaging
+a Major Component, but which is not part of that Major Component, and (b)
+serves only to enable use of the work with that Major Component, or to implement
+a Standard Interface for which an implementation is available to the public
+in source code form. A "Major Component", in this context, means a major essential
+component (kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to produce
+the work, or an object code interpreter used to run it.
+
+The "Corresponding Source" for a work in object code form means all the source
+code needed to generate, install, and (for an executable work) run the object
+code and to modify the work, including scripts to control those activities.
+However, it does not include the work's System Libraries, or general-purpose
+tools or generally available free programs which are used unmodified in performing
+those activities but which are not part of the work. For example, Corresponding
+Source includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically linked
+subprograms that the work is specifically designed to require, such as by
+intimate data communication or control flow between those subprograms and
+other parts of the work.
+
+The Corresponding Source need not include anything that users can regenerate
+automatically from other parts of the Corresponding Source.
+
+   The Corresponding Source for a work in source code form is that same work.
+
+   2. Basic Permissions.
+
+All rights granted under this License are granted for the term of copyright
+on the Program, and are irrevocable provided the stated conditions are met.
+This License explicitly affirms your unlimited permission to run the unmodified
+Program. The output from running a covered work is covered by this License
+only if the output, given its content, constitutes a covered work. This License
+acknowledges your rights of fair use or other equivalent, as provided by copyright
+law.
+
+You may make, run and propagate covered works that you do not convey, without
+conditions so long as your license otherwise remains in force. You may convey
+covered works to others for the sole purpose of having them make modifications
+exclusively for you, or provide you with facilities for running those works,
+provided that you comply with the terms of this License in conveying all material
+for which you do not control copyright. Those thus making or running the covered
+works for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of your copyrighted
+material outside their relationship with you.
+
+Conveying under any other circumstances is permitted solely under the conditions
+stated below. Sublicensing is not allowed; section 10 makes it unnecessary.
+
+   3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+No covered work shall be deemed part of an effective technological measure
+under any applicable law fulfilling obligations under article 11 of the WIPO
+copyright treaty adopted on 20 December 1996, or similar laws prohibiting
+or restricting circumvention of such measures.
+
+When you convey a covered work, you waive any legal power to forbid circumvention
+of technological measures to the extent such circumvention is effected by
+exercising rights under this License with respect to the covered work, and
+you disclaim any intention to limit operation or modification of the work
+as a means of enforcing, against the work's users, your or third parties'
+legal rights to forbid circumvention of technological measures.
+
+   4. Conveying Verbatim Copies.
+
+You may convey verbatim copies of the Program's source code as you receive
+it, in any medium, provided that you conspicuously and appropriately publish
+on each copy an appropriate copyright notice; keep intact all notices stating
+that this License and any non-permissive terms added in accord with section
+7 apply to the code; keep intact all notices of the absence of any warranty;
+and give all recipients a copy of this License along with the Program.
+
+You may charge any price or no price for each copy that you convey, and you
+may offer support or warranty protection for a fee.
+
+   5. Conveying Modified Source Versions.
+
+You may convey a work based on the Program, or the modifications to produce
+it from the Program, in the form of source code under the terms of section
+4, provided that you also meet all of these conditions:
+
+a) The work must carry prominent notices stating that you modified it, and
+giving a relevant date.
+
+b) The work must carry prominent notices stating that it is released under
+this License and any conditions added under section 7. This requirement modifies
+the requirement in section 4 to "keep intact all notices".
+
+c) You must license the entire work, as a whole, under this License to anyone
+who comes into possession of a copy. This License will therefore apply, along
+with any applicable section 7 additional terms, to the whole of the work,
+and all its parts, regardless of how they are packaged. This License gives
+no permission to license the work in any other way, but it does not invalidate
+such permission if you have separately received it.
+
+d) If the work has interactive user interfaces, each must display Appropriate
+Legal Notices; however, if the Program has interactive interfaces that do
+not display Appropriate Legal Notices, your work need not make them do so.
+
+A compilation of a covered work with other separate and independent works,
+which are not by their nature extensions of the covered work, and which are
+not combined with it such as to form a larger program, in or on a volume of
+a storage or distribution medium, is called an "aggregate" if the compilation
+and its resulting copyright are not used to limit the access or legal rights
+of the compilation's users beyond what the individual works permit. Inclusion
+of a covered work in an aggregate does not cause this License to apply to
+the other parts of the aggregate.
+
+   6. Conveying Non-Source Forms.
+
+You may convey a covered work in object code form under the terms of sections
+4 and 5, provided that you also convey the machine-readable Corresponding
+Source under the terms of this License, in one of these ways:
+
+a) Convey the object code in, or embodied in, a physical product (including
+a physical distribution medium), accompanied by the Corresponding Source fixed
+on a durable physical medium customarily used for software interchange.
+
+b) Convey the object code in, or embodied in, a physical product (including
+a physical distribution medium), accompanied by a written offer, valid for
+at least three years and valid for as long as you offer spare parts or customer
+support for that product model, to give anyone who possesses the object code
+either (1) a copy of the Corresponding Source for all the software in the
+product that is covered by this License, on a durable physical medium customarily
+used for software interchange, for a price no more than your reasonable cost
+of physically performing this conveying of source, or (2) access to copy the
+Corresponding Source from a network server at no charge.
+
+c) Convey individual copies of the object code with a copy of the written
+offer to provide the Corresponding Source. This alternative is allowed only
+occasionally and noncommercially, and only if you received the object code
+with such an offer, in accord with subsection 6b.
+
+d) Convey the object code by offering access from a designated place (gratis
+or for a charge), and offer equivalent access to the Corresponding Source
+in the same way through the same place at no further charge. You need not
+require recipients to copy the Corresponding Source along with the object
+code. If the place to copy the object code is a network server, the Corresponding
+Source may be on a different server (operated by you or a third party) that
+supports equivalent copying facilities, provided you maintain clear directions
+next to the object code saying where to find the Corresponding Source. Regardless
+of what server hosts the Corresponding Source, you remain obligated to ensure
+that it is available for as long as needed to satisfy these requirements.
+
+e) Convey the object code using peer-to-peer transmission, provided you inform
+other peers where the object code and Corresponding Source of the work are
+being offered to the general public at no charge under subsection 6d.
+
+A separable portion of the object code, whose source code is excluded from
+the Corresponding Source as a System Library, need not be included in conveying
+the object code work.
+
+A "User Product" is either (1) a "consumer product", which means any tangible
+personal property which is normally used for personal, family, or household
+purposes, or (2) anything designed or sold for incorporation into a dwelling.
+In determining whether a product is a consumer product, doubtful cases shall
+be resolved in favor of coverage. For a particular product received by a particular
+user, "normally used" refers to a typical or common use of that class of product,
+regardless of the status of the particular user or of the way in which the
+particular user actually uses, or expects or is expected to use, the product.
+A product is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent the
+only significant mode of use of the product.
+
+"Installation Information" for a User Product means any methods, procedures,
+authorization keys, or other information required to install and execute modified
+versions of a covered work in that User Product from a modified version of
+its Corresponding Source. The information must suffice to ensure that the
+continued functioning of the modified object code is in no case prevented
+or interfered with solely because modification has been made.
+
+If you convey an object code work under this section in, or with, or specifically
+for use in, a User Product, and the conveying occurs as part of a transaction
+in which the right of possession and use of the User Product is transferred
+to the recipient in perpetuity or for a fixed term (regardless of how the
+transaction is characterized), the Corresponding Source conveyed under this
+section must be accompanied by the Installation Information. But this requirement
+does not apply if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has been installed
+in ROM).
+
+The requirement to provide Installation Information does not include a requirement
+to continue to provide support service, warranty, or updates for a work that
+has been modified or installed by the recipient, or for the User Product in
+which it has been modified or installed. Access to a network may be denied
+when the modification itself materially and adversely affects the operation
+of the network or violates the rules and protocols for communication across
+the network.
+
+Corresponding Source conveyed, and Installation Information provided, in accord
+with this section must be in a format that is publicly documented (and with
+an implementation available to the public in source code form), and must require
+no special password or key for unpacking, reading or copying.
+
+   7. Additional Terms.
+
+"Additional permissions" are terms that supplement the terms of this License
+by making exceptions from one or more of its conditions. Additional permissions
+that are applicable to the entire Program shall be treated as though they
+were included in this License, to the extent that they are valid under applicable
+law. If additional permissions apply only to part of the Program, that part
+may be used separately under those permissions, but the entire Program remains
+governed by this License without regard to the additional permissions.
+
+When you convey a copy of a covered work, you may at your option remove any
+additional permissions from that copy, or from any part of it. (Additional
+permissions may be written to require their own removal in certain cases when
+you modify the work.) You may place additional permissions on material, added
+by you to a covered work, for which you have or can give appropriate copyright
+permission.
+
+Notwithstanding any other provision of this License, for material you add
+to a covered work, you may (if authorized by the copyright holders of that
+material) supplement the terms of this License with terms:
+
+a) Disclaiming warranty or limiting liability differently from the terms of
+sections 15 and 16 of this License; or
+
+b) Requiring preservation of specified reasonable legal notices or author
+attributions in that material or in the Appropriate Legal Notices displayed
+by works containing it; or
+
+c) Prohibiting misrepresentation of the origin of that material, or requiring
+that modified versions of such material be marked in reasonable ways as different
+from the original version; or
+
+d) Limiting the use for publicity purposes of names of licensors or authors
+of the material; or
+
+e) Declining to grant rights under trademark law for use of some trade names,
+trademarks, or service marks; or
+
+f) Requiring indemnification of licensors and authors of that material by
+anyone who conveys the material (or modified versions of it) with contractual
+assumptions of liability to the recipient, for any liability that these contractual
+assumptions directly impose on those licensors and authors.
+
+All other non-permissive additional terms are considered "further restrictions"
+within the meaning of section 10. If the Program as you received it, or any
+part of it, contains a notice stating that it is governed by this License
+along with a term that is a further restriction, you may remove that term.
+If a license document contains a further restriction but permits relicensing
+or conveying under this License, you may add to a covered work material governed
+by the terms of that license document, provided that the further restriction
+does not survive such relicensing or conveying.
+
+If you add terms to a covered work in accord with this section, you must place,
+in the relevant source files, a statement of the additional terms that apply
+to those files, or a notice indicating where to find the applicable terms.
+
+Additional terms, permissive or non-permissive, may be stated in the form
+of a separately written license, or stated as exceptions; the above requirements
+apply either way.
+
+   8. Termination.
+
+You may not propagate or modify a covered work except as expressly provided
+under this License. Any attempt otherwise to propagate or modify it is void,
+and will automatically terminate your rights under this License (including
+any patent licenses granted under the third paragraph of section 11).
+
+However, if you cease all violation of this License, then your license from
+a particular copyright holder is reinstated (a) provisionally, unless and
+until the copyright holder explicitly and finally terminates your license,
+and (b) permanently, if the copyright holder fails to notify you of the violation
+by some reasonable means prior to 60 days after the cessation.
+
+Moreover, your license from a particular copyright holder is reinstated permanently
+if the copyright holder notifies you of the violation by some reasonable means,
+this is the first time you have received notice of violation of this License
+(for any work) from that copyright holder, and you cure the violation prior
+to 30 days after your receipt of the notice.
+
+Termination of your rights under this section does not terminate the licenses
+of parties who have received copies or rights from you under this License.
+If your rights have been terminated and not permanently reinstated, you do
+not qualify to receive new licenses for the same material under section 10.
+
+   9. Acceptance Not Required for Having Copies.
+
+You are not required to accept this License in order to receive or run a copy
+of the Program. Ancillary propagation of a covered work occurring solely as
+a consequence of using peer-to-peer transmission to receive a copy likewise
+does not require acceptance. However, nothing other than this License grants
+you permission to propagate or modify any covered work. These actions infringe
+copyright if you do not accept this License. Therefore, by modifying or propagating
+a covered work, you indicate your acceptance of this License to do so.
+
+   10. Automatic Licensing of Downstream Recipients.
+
+Each time you convey a covered work, the recipient automatically receives
+a license from the original licensors, to run, modify and propagate that work,
+subject to this License. You are not responsible for enforcing compliance
+by third parties with this License.
+
+An "entity transaction" is a transaction transferring control of an organization,
+or substantially all assets of one, or subdividing an organization, or merging
+organizations. If propagation of a covered work results from an entity transaction,
+each party to that transaction who receives a copy of the work also receives
+whatever licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the Corresponding
+Source of the work from the predecessor in interest, if the predecessor has
+it or can get it with reasonable efforts.
+
+You may not impose any further restrictions on the exercise of the rights
+granted or affirmed under this License. For example, you may not impose a
+license fee, royalty, or other charge for exercise of rights granted under
+this License, and you may not initiate litigation (including a cross-claim
+or counterclaim in a lawsuit) alleging that any patent claim is infringed
+by making, using, selling, offering for sale, or importing the Program or
+any portion of it.
+
+   11. Patents.
+
+A "contributor" is a copyright holder who authorizes use under this License
+of the Program or a work on which the Program is based. The work thus licensed
+is called the contributor's "contributor version".
+
+A contributor's "essential patent claims" are all patent claims owned or controlled
+by the contributor, whether already acquired or hereafter acquired, that would
+be infringed by some manner, permitted by this License, of making, using,
+or selling its contributor version, but do not include claims that would be
+infringed only as a consequence of further modification of the contributor
+version. For purposes of this definition, "control" includes the right to
+grant patent sublicenses in a manner consistent with the requirements of this
+License.
+
+Each contributor grants you a non-exclusive, worldwide, royalty-free patent
+license under the contributor's essential patent claims, to make, use, sell,
+offer for sale, import and otherwise run, modify and propagate the contents
+of its contributor version.
+
+In the following three paragraphs, a "patent license" is any express agreement
+or commitment, however denominated, not to enforce a patent (such as an express
+permission to practice a patent or covenant not to sue for patent infringement).
+To "grant" such a patent license to a party means to make such an agreement
+or commitment not to enforce a patent against the party.
+
+If you convey a covered work, knowingly relying on a patent license, and the
+Corresponding Source of the work is not available for anyone to copy, free
+of charge and under the terms of this License, through a publicly available
+network server or other readily accessible means, then you must either (1)
+cause the Corresponding Source to be so available, or (2) arrange to deprive
+yourself of the benefit of the patent license for this particular work, or
+(3) arrange, in a manner consistent with the requirements of this License,
+to extend the patent license to downstream recipients. "Knowingly relying"
+means you have actual knowledge that, but for the patent license, your conveying
+the covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that country
+that you have reason to believe are valid.
+
+If, pursuant to or in connection with a single transaction or arrangement,
+you convey, or propagate by procuring conveyance of, a covered work, and grant
+a patent license to some of the parties receiving the covered work authorizing
+them to use, propagate, modify or convey a specific copy of the covered work,
+then the patent license you grant is automatically extended to all recipients
+of the covered work and works based on it.
+
+A patent license is "discriminatory" if it does not include within the scope
+of its coverage, prohibits the exercise of, or is conditioned on the non-exercise
+of one or more of the rights that are specifically granted under this License.
+You may not convey a covered work if you are a party to an arrangement with
+a third party that is in the business of distributing software, under which
+you make payment to the third party based on the extent of your activity of
+conveying the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory patent
+license (a) in connection with copies of the covered work conveyed by you
+(or copies made from those copies), or (b) primarily for and in connection
+with specific products or compilations that contain the covered work, unless
+you entered into that arrangement, or that patent license was granted, prior
+to 28 March 2007.
+
+Nothing in this License shall be construed as excluding or limiting any implied
+license or other defenses to infringement that may otherwise be available
+to you under applicable patent law.
+
+   12. No Surrender of Others' Freedom.
+
+If conditions are imposed on you (whether by court order, agreement or otherwise)
+that contradict the conditions of this License, they do not excuse you from
+the conditions of this License. If you cannot convey a covered work so as
+to satisfy simultaneously your obligations under this License and any other
+pertinent obligations, then as a consequence you may not convey it at all.
+For example, if you agree to terms that obligate you to collect a royalty
+for further conveying from those to whom you convey the Program, the only
+way you could satisfy both those terms and this License would be to refrain
+entirely from conveying the Program.
+
+   13. Use with the GNU Affero General Public License.
+
+Notwithstanding any other provision of this License, you have permission to
+link or combine any covered work with a work licensed under version 3 of the
+GNU Affero General Public License into a single combined work, and to convey
+the resulting work. The terms of this License will continue to apply to the
+part which is the covered work, but the special requirements of the GNU Affero
+General Public License, section 13, concerning interaction through a network
+will apply to the combination as such.
+
+   14. Revised Versions of this License.
+
+The Free Software Foundation may publish revised and/or new versions of the
+GNU General Public License from time to time. Such new versions will be similar
+in spirit to the present version, but may differ in detail to address new
+problems or concerns.
+
+Each version is given a distinguishing version number. If the Program specifies
+that a certain numbered version of the GNU General Public License "or any
+later version" applies to it, you have the option of following the terms and
+conditions either of that numbered version or of any later version published
+by the Free Software Foundation. If the Program does not specify a version
+number of the GNU General Public License, you may choose any version ever
+published by the Free Software Foundation.
+
+If the Program specifies that a proxy can decide which future versions of
+the GNU General Public License can be used, that proxy's public statement
+of acceptance of a version permanently authorizes you to choose that version
+for the Program.
+
+Later license versions may give you additional or different permissions. However,
+no additional obligations are imposed on any author or copyright holder as
+a result of your choosing to follow a later version.
+
+   15. Disclaimer of Warranty.
+
+THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE
+LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
+OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER
+EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM
+PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR
+CORRECTION.
+
+   16. Limitation of Liability.
+
+IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL
+ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM
+AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL,
+INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO
+USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED
+INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE
+PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER
+PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+   17. Interpretation of Sections 15 and 16.
+
+If the disclaimer of warranty and limitation of liability provided above cannot
+be given local legal effect according to their terms, reviewing courts shall
+apply local law that most closely approximates an absolute waiver of all civil
+liability in connection with the Program, unless a warranty or assumption
+of liability accompanies a copy of the Program in return for a fee. END OF
+TERMS AND CONDITIONS
+
+How to Apply These Terms to Your New Programs
+
+If you develop a new program, and you want it to be of the greatest possible
+use to the public, the best way to achieve this is to make it free software
+which everyone can redistribute and change under these terms.
+
+To do so, attach the following notices to the program. It is safest to attach
+them to the start of each source file to most effectively state the exclusion
+of warranty; and each file should have at least the "copyright" line and a
+pointer to where the full notice is found.
+
+<one line to give the program's name and a brief idea of what it does.>
+
+Copyright (C) <year> <name of author>
+
+This program is free software: you can redistribute it and/or modify it under
+the terms of the GNU General Public License as published by the Free Software
+Foundation, either version 3 of the License, or (at your option) any later
+version.
+
+This program is distributed in the hope that it will be useful, but WITHOUT
+ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License along with
+this program. If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program does terminal interaction, make it output a short notice like
+this when it starts in an interactive mode:
+
+<program> Copyright (C) <year> <name of author>
+
+This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+
+This is free software, and you are welcome to redistribute it under certain
+conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License. Of course, your program's commands might
+be different; for a GUI interface, you would use an "about box".
+
+You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary. For
+more information on this, and how to apply and follow the GNU GPL, see <https://www.gnu.org/licenses/>.
+
+The GNU General Public License does not permit incorporating your program
+into proprietary programs. If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library. If this is what you want to do, use the GNU Lesser General Public
+License instead of this License. But first, please read <https://www.gnu.org/
+licenses /why-not-lgpl.html>.

README.md

@@ -1,182 +1,162 @@
-# Phyllome OS
+# Kickstart Phyllome OS
 
-> Virtualization for the rest of us
+[Phyllome OS](https://wiki.phyllo.me/phyllomeos/context) uses the [kickstart installation method](https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#chapter-1-introduction) to deploy itself to a specific target computer or virtual machine by means of kickstart files.
 
-*Phyllome OS is a [Fedora Remix](https://fedoraproject.org/wiki/Remix) based on [Fedora Server 35](https://getfedora.org/en/server/) designed to leverage hardware-assisted virtualization and paravirtualization to make it easier to run modern guest operating systems locally.*
+This repository contains such files broken down as:
 
-> This is the **alpha version** of Phyllome OS. Expect bugs and disappointment.
+* `ingredients`🥑 🥥 🥭 🥝 🥦 🥬 🥒 🧄: the basic building blocks for assembling Phyllome OS and other derivatives.
 
-> External contributions to Phyllome OS are welcome. Have a look [here](https://kanboard.phyllo.me/b/CH7qd98J2v7egmodk/development) for some ideas on what to do next, or feel free to create an issue and suggest an idea you wish to work on. Also, it might be good to skim through the [white-paper](https://files.phyllo.me/s/oYwfxYpZcbppwr6) to understand what it is about and what the project is trying to achieve.
+* `recipes`🧾 🧩: lists of ingredients to compose several editions
 
-> The Phyllome OS Project is **looking for core contributors**, willing to contribute regularly to the project. If you are interested in making cutting-edge open-source virtualization more accessible, please send an email to contact@phyllo.me. 
+* `dishes`🥨 🥐 🥖 🥧 🥞 🥯 🧆 🧁: read-to-consume and standalone kickstart artifacts, which can be used to deploy complete systems
 
-## What
+Each ingredient represents a feature or a set of integrated features, such as a specific Desktop Environment or a storage configuration. 
+    - Ingredients prefixed with *live* such as `live-core.cfg` are to be used with live editions only
+    - *core* ingredients are meant be used in all their respective recipes, *base* ingredients, recommended but optional, and extra provides more stuff (sic)
 
-This repository contains the basic building blocks required to deploy [Phyllome OS](https://phyllo.me/) in a virtual machine, using kickstart files. 
+## Development
 
-Kickstart files are used to automate the installation and configuration of RPM-based operating systems.
-
-> If you would like to install Phyllome OS on your computer, please follow [this guide](https://wiki.phyllo.me/deploy/install) instead.
-
-### Structure of the repository
-
-* `blocks` : this directory contains the basic building blocks for assembling Phyllome OS Desktop and Phyllome OS Server.
-    * This is where most of the development happens.
-* `blocks-live` : this directory contains the basic building blocks for creating a live medium for Phyllome OS.
-    * The code in this directory usually lags behind what is found in the `blocks` directory. 
-    * The `blocks` and `blocks-live` repository will eventually be merged, and the number of blocks will be reduced to avoid code duplication.  
-* `leaves` : this directory contains the end product in the form of stand-alone and ready-to-use kickstart files.
-    * For instance, the Phyllome OS Desktop version optimized for Intel(tm) CPUs and Intel(tm) graphics cards, referred to internally as `flat-dhi`, is stored there (*d* stands for desktop, *h* for hypervisor and *i* for intel).
-* `post` : this directory contains scripts that are meant to be run after a successful installation, after Phyllome OS has started.
-    * Ideally, these code snippets will be merged with existing building blocks, or summoned as a systemd unit.
-
-## How to hack Phyllome OS
-
-> Only Linux-based development is possible at the moment, sorry. Support for macOS and Windows-based development will follow.
-
-As of now, hacking kickstart files is the main way to develop Phyllome OS. 
-
-Have a look [here](https://docs.fedoraproject.org/en-US/fedora/rawhide/install-guide/appendixes/Kickstart_Syntax_Reference/) to learn the kickstart syntax.
+Using a pull request, you can suggest a modification to an existing ingredient or create a new ingredient from scratch.
 
 ### Requirements
 
-* A Linux distribution, with a recent Linux Kernel (> 5.X)
-* A x86_64 platform with hardware-assisted virtualization [enabled](https://wiki.phyllo.me/deploy/prepare)
-* Nested-virtualization enabled
-* `virt-install` and `virt-manager`, as well as `libvirt` and `qemu-kvm` up and running
+- `qemu`
+- `libvirt`
+- `virt-install`
+- `pykickstart`
 
-**Enable** nested-virtualization on **AMD-based systems**, then reboot:
+### Example 1: add a new package and include it into a recipe
+
+- Add [Luanti](https://www.luanti.org/), a free and open-source sandbox video game engine formerly known as Minetest, as a standalone ingredient, using the `echo` command
 
 ```
-sudo echo "options kvm_amd nested=1" >> /etc/modprobe.d/kvm.conf
+echo "%packages --exclude-weakdeps # Beginning of the package section. Does not include weak dependencies
+
+luanti # Multiplayer infinite-world block sandbox with survival mode
+
+%end # End of the packages section" > ingredients/extra-luanti.cfg
 ```
 
-**Enable** nested-virtualization on **Intel-based systems**, then reboot:
+Instead of creating a recipe from scratch, let's make a copy of the `virtual-desktop.cfg` recipe, which provide a Desktop environment necessary for *luanti* to function
 
 ```
-sudo echo "options kvm_intel nested=1" >> /etc/modprobe.d/kvm.conf`
+cp recipes/virtual-desktop.cfg recipes/virtual-desktop-luanti.cfg
 ```
 
-**Install the prerequisites on Fedora 35**
+- Add the extra ingredient to the new recipe:
 
-```
-sudo dnf install -y qemu-kvm libvirt libvirt-daemon-config-network libvirt-daemon-kvm virt-install virt-top virt-manager libguestfs-tools python3-libguestfs guestfs-tools pykickstart
+``` 
+echo "%include ../ingredients/extra-luanti.cfg # Sandbox video game engine" >> recipes/virtual-desktop-luanti.cfg
 ```
 
-**Install the prerequisites on Ubuntu 20.4 or Debian 11**
+#### Flatten
 
-```To be done```
-
-### Hack around
-
-Clone this repository:
+- Prepare the dish by following the recipe, a process called 'flattening'
 
 ```
-git clone https://github.com/PhyllomeOS/PhyllomeOS.git
+ksflatten -c recipes/virtual-desktop-luanti.cfg -o dishes/virtual-desktop-luanti.cfg
 ```
 
-Modify some files, typically inside the `blocks` directory.
+> If any errors are detected, go back and fix them.
 
-When you are done, move to the `flat` directory:
+It is time to test the new dish!
+
+#### Kickstart
+
+- Make the `deploy-vm.sh` script executable
 
 ```
-cd ./PhyllomeOS/flat/
+chmod +x deploy-vm.sh
 ```
 
-Then, merge the kickstart basic building blocks into a single file, a process called 'flattening'.
+- Execute the script
 
 ```
-ksflatten -c ../blocks/dhi.cfg -o flat-dhi.cfg
+./deploy-vm.sh
 ```
-If any errors are detected, go back and fix them.
 
-### Fire it up!
-
-For testing purposes, Phyllome OS can be deployed inside a virtual machine, as a guest hypervisor.
-
-The following command will automatically deploy the alpha version of Phyllome OS, tuned for Intel CPUs and Intel graphics cards.
-
-It uses a Q35 virtual motherboard, a UEFI-based firmware, virtio-devices accross the board, 2 vCPUs, 4 GB of RAM and a disk of 5 GB.
-
-> Adjust it according to your needs. 
-
-When ready, copy and paste it to your terminal.
+- Select the new dish, *virtual-desktop-luanti*
 
 ```
-virt-install \
-    --connect qemu:///system \
-    --virt-type kvm \
-    --arch x86_64 \
-    --machine q35 \
-    --name phyllome-alpha \
-    --boot uefi \
-    --cpu host-model,topology.sockets=1,topology.cores=2,topology.threads=1 \
-    --vcpus 2 \
-    --memory 4096 \
-    --video virtio \
-    --channel spicevmc \
-    --autoconsole none \
-    --sound none \
-    --controller type=virtio-serial \
-    --controller type=usb,model=none \
-    --controller type=scsi,model=virtio-scsi \
-    --network network=default,model=virtio \
-    --input type=keyboard,bus=virtio \
-    --input type=tablet,bus=virtio \
-    --rng /dev/urandom,model=virtio \
-    --disk path=/var/lib/libvirt/images/flat-dhi.img,format=raw,bus=virtio,cache=writeback,size=5 \
-    --location=https://download.fedoraproject.org/pub/fedora/linux/releases/35/Everything/x86_64/os/ \
-    --initrd-inject flat-dhi.cfg --extra-args "inst.ks=file:flat-dhi.cfg"
+[...]
+Available files:
+1. desktop-hypervisor-amdcpu
+[...]
+14. virtual-desktop-luanti
 ```
-You should see the following message: 
+
+- When the installation is done, the machine will shut down
+
+- Start it again, and ensure that Luanti has correctly been installed
+
+That's it !
+
+### Example 2: Create a new recipe from the existing list of ingredients
+
+The file `recipes/_list-of-ingredients.cfg` can be copied and edited to create your own remix of Phyllome OS, which itself is a remix of Fedora.
+
 ```
-Starting install...
-Retrieving file vmlinuz...                                  |  10 MB  00:00     
-Retrieving file initrd.img...                               |  79 MB  00:02     
-Allocating 'virtinst-inlu7cmw-vmlinuz'                      |  10 MB  00:00     
-Transferring virtinst-inlu7cmw-vmlinuz                      |  10 MB  00:00     
-Allocating 'virtinst-2dd8ghse-initrd.img'                   |  79 MB  00:00     
-Transferring virtinst-2dd8ghse-initrd.img                   |  79 MB  00:01     
-Allocating 'flat-dhi.img'                                 | 5.0 GB  00:00     
-
-Domain is still running. Installation may be in progress.
-You can reconnect to the console to complete the installation process.
+cp recipes/_list-of-ingredients.cfg recipes/my-new-distro.cfg
 ```
-The installation process will be launched behind the scenes. You can open `virt-manager` and connect to the virtual machine console to follow the process. Eventually, you will be greeted with this screen:
 
-![greetings](./img/greetings.png)
+Then edit the said file to include your favorite ingredient
 
-After you are done setting up your user account, `virt-manager` will automatically start:
+```
+nano recipes/my-new-distro.cfg
+```
 
-![greetings](./img/desktop.png)
+```
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
 
-If the installation is successful and your feature is working as intended, you are welcome to create a pull request. Thank you!
+# The list of ingredients for composing Phyllome OS
+# Uncomment lines with "%include" to enable ingredient
 
-## Phyllome OS 
+# Installation method
+# Exactly one option has to be picked
+# %include ../ingredients/core.cfg # Text mode
+# %include ../ingredients/live-core.cfg # For live systems only
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#graphical-or-text-or-cmdline
 
-Phyllome OS goal is to maximize ease-of-use and compatibility. As such, it intends to become the easiest way to use modern operating systems locally, in a virtual machine, by integrating pertinent open-source software such as `libvirt`, `qemu-kvm` (and eventually `Cloud Hypervisor`), as well as `virt-manager`.
+# Storage configuration 
+# Exactly one option has to be picked
+# WARNING !!! Will erase local disks!
+# %include ../ingredients/core-storage.cfg # Basic ext4 partition layout for UEFI-based systems
+# %include ../ingredients/live-core-storage.cfg # For live systems only
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#part-or-partition
+[...]
+```
 
-Users should not have to manage Phyllome OS: they should be able to pick their favorite operating system and Phyllome OS should run it, no questions asked.
+- Once you are done, you can [flatten](#flatten) the file and [kickstart](#kickstart) it as explained in the previous section.
 
-> Note : with the exception of open-source [Darwin derivatives](https://en.wikipedia.org/wiki/Darwin_(operating_system)#Derived_projects), Phyllome OS **strongly** discourages users from running proprietary, darwin-based derivatives on non-Apple hardware.
+## FAQ
 
-### The Phyllome OS Project
+If multiple dishes are affected by your ingredient, you can flatten them all
 
-The Phyllome OS Project relies on multiple tools, including the following public-facing tools: 
+- Navigate to the recipes' directory
 
-* **Wiki**: Take a look at the [wiki repository](https://github.com/PhyllomeOS/wiki) for more information on how you can contribute to improving the documentation.
-* **Issues tracker**: a public, read-only issue tracking is [available online](https://kanboard.phyllo.me/b/CH7qd98J2v7egmodk/development). From now on, GitHub issue tracking will be used to track development-only issues.  
-* **Code repository**: GitHub is used to host the code, with a mirror pointing to git.phyllo.me
+```
+cd recipes
+```
 
-## License
+- Then use the following
 
-* [MIT](./LICENSE.md) for the most part, with some [GPL](./blocks-live/LICENSE.md) code.
+```
+for filename in *.cfg; do ksflatten -c "$filename" -o "../dishes/$filename"; done
+```
+
+The following message can safetly be ignored:
+
+```
+/usr/lib/python3.13/site-packages/pykickstart/commands/partition.py:461: KickstartParseWarning: A partition with the mountpoint / has already been defined.
+```
 
 ## Acknowledgement
 
 Thanks to the main contributors of the official Fedora kickstart files repository, and related tools:
 
-> Adam Miller, Bastien Nocera, Bruno Wolff III, Bryan Kearney, Chitlesh Goorah, Christoph Wickert, 
-Colin Walters, Fabian Affolter, Igor Pires Soares, Jens Petersen, Jeremy Katz, Jeroen van Meeuwen
-Jesse Keating, Luya Tshimbalanga, Matthias Clasen, Pedro Silva, Rahul Sundaram, Sebastian Dziallas
-Sebastian Vahl, wart. More information here : https://pagure.io/fedora-kickstarts
+> Adam Miller, Bastien Nocera, Bruno Wolff III, Bryan Kearney, Chitlesh Goorah, Christoph Wickert, Colin Walters, Fabian Affolter, Igor Pires Soares, Jens Petersen, Jeremy Katz, Jeroen van Meeuwen Jesse Keating, Luya Tshimbalanga, Matthias Clasen, Pedro Silva, Rahul Sundaram, Sebastian Dziallas Sebastian Vahl, wart. More information here : https://pagure.io/fedora-kickstarts

blocks-live/LICENSE.md

@@ -1,629 +0,0 @@
-> This licence applies to chunks of code as found especially in the `bl.cfg` and `ld.cfg` files, as those files contain codes from the following GNU-licensed project: https://pagure.io/fedora-kickstarts. Standalone kickstart files that are based on the said code, such as `flat-ld.cfg`, are  also released under this license.
-
-> All new contributions are made under the parent MIT license.
-
-GNU GENERAL PUBLIC LICENSE
-
-Version 3, 29 June 2007
-
-Copyright © 2007 Free Software Foundation, Inc. <https://fsf.org/>
-
-Everyone is permitted to copy and distribute verbatim copies of this license
-document, but changing it is not allowed.
-
-Preamble
-
-The GNU General Public License is a free, copyleft license for software and
-other kinds of works.
-
-The licenses for most software and other practical works are designed to take
-away your freedom to share and change the works. By contrast, the GNU General
-Public License is intended to guarantee your freedom to share and change all
-versions of a program--to make sure it remains free software for all its users.
-We, the Free Software Foundation, use the GNU General Public License for most
-of our software; it applies also to any other work released this way by its
-authors. You can apply it to your programs, too.
-
-When we speak of free software, we are referring to freedom, not price. Our
-General Public Licenses are designed to make sure that you have the freedom
-to distribute copies of free software (and charge for them if you wish), that
-you receive source code or can get it if you want it, that you can change
-the software or use pieces of it in new free programs, and that you know you
-can do these things.
-
-To protect your rights, we need to prevent others from denying you these rights
-or asking you to surrender the rights. Therefore, you have certain responsibilities
-if you distribute copies of the software, or if you modify it: responsibilities
-to respect the freedom of others.
-
-For example, if you distribute copies of such a program, whether gratis or
-for a fee, you must pass on to the recipients the same freedoms that you received.
-You must make sure that they, too, receive or can get the source code. And
-you must show them these terms so they know their rights.
-
-Developers that use the GNU GPL protect your rights with two steps: (1) assert
-copyright on the software, and (2) offer you this License giving you legal
-permission to copy, distribute and/or modify it.
-
-For the developers' and authors' protection, the GPL clearly explains that
-there is no warranty for this free software. For both users' and authors'
-sake, the GPL requires that modified versions be marked as changed, so that
-their problems will not be attributed erroneously to authors of previous versions.
-
-Some devices are designed to deny users access to install or run modified
-versions of the software inside them, although the manufacturer can do so.
-This is fundamentally incompatible with the aim of protecting users' freedom
-to change the software. The systematic pattern of such abuse occurs in the
-area of products for individuals to use, which is precisely where it is most
-unacceptable. Therefore, we have designed this version of the GPL to prohibit
-the practice for those products. If such problems arise substantially in other
-domains, we stand ready to extend this provision to those domains in future
-versions of the GPL, as needed to protect the freedom of users.
-
-Finally, every program is threatened constantly by software patents. States
-should not allow patents to restrict development and use of software on general-purpose
-computers, but in those that do, we wish to avoid the special danger that
-patents applied to a free program could make it effectively proprietary. To
-prevent this, the GPL assures that patents cannot be used to render the program
-non-free.
-
-The precise terms and conditions for copying, distribution and modification
-follow.
-
-TERMS AND CONDITIONS
-
-   0. Definitions.
-
-   "This License" refers to version 3 of the GNU General Public License.
-
-"Copyright" also means copyright-like laws that apply to other kinds of works,
-such as semiconductor masks.
-
-"The Program" refers to any copyrightable work licensed under this License.
-Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals
-or organizations.
-
-To "modify" a work means to copy from or adapt all or part of the work in
-a fashion requiring copyright permission, other than the making of an exact
-copy. The resulting work is called a "modified version" of the earlier work
-or a work "based on" the earlier work.
-
-A "covered work" means either the unmodified Program or a work based on the
-Program.
-
-To "propagate" a work means to do anything with it that, without permission,
-would make you directly or secondarily liable for infringement under applicable
-copyright law, except executing it on a computer or modifying a private copy.
-Propagation includes copying, distribution (with or without modification),
-making available to the public, and in some countries other activities as
-well.
-
-To "convey" a work means any kind of propagation that enables other parties
-to make or receive copies. Mere interaction with a user through a computer
-network, with no transfer of a copy, is not conveying.
-
-An interactive user interface displays "Appropriate Legal Notices" to the
-extent that it includes a convenient and prominently visible feature that
-(1) displays an appropriate copyright notice, and (2) tells the user that
-there is no warranty for the work (except to the extent that warranties are
-provided), that licensees may convey the work under this License, and how
-to view a copy of this License. If the interface presents a list of user commands
-or options, such as a menu, a prominent item in the list meets this criterion.
-
-   1. Source Code.
-
-The "source code" for a work means the preferred form of the work for making
-modifications to it. "Object code" means any non-source form of a work.
-
-A "Standard Interface" means an interface that either is an official standard
-defined by a recognized standards body, or, in the case of interfaces specified
-for a particular programming language, one that is widely used among developers
-working in that language.
-
-The "System Libraries" of an executable work include anything, other than
-the work as a whole, that (a) is included in the normal form of packaging
-a Major Component, but which is not part of that Major Component, and (b)
-serves only to enable use of the work with that Major Component, or to implement
-a Standard Interface for which an implementation is available to the public
-in source code form. A "Major Component", in this context, means a major essential
-component (kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to produce
-the work, or an object code interpreter used to run it.
-
-The "Corresponding Source" for a work in object code form means all the source
-code needed to generate, install, and (for an executable work) run the object
-code and to modify the work, including scripts to control those activities.
-However, it does not include the work's System Libraries, or general-purpose
-tools or generally available free programs which are used unmodified in performing
-those activities but which are not part of the work. For example, Corresponding
-Source includes interface definition files associated with source files for
-the work, and the source code for shared libraries and dynamically linked
-subprograms that the work is specifically designed to require, such as by
-intimate data communication or control flow between those subprograms and
-other parts of the work.
-
-The Corresponding Source need not include anything that users can regenerate
-automatically from other parts of the Corresponding Source.
-
-   The Corresponding Source for a work in source code form is that same work.
-
-   2. Basic Permissions.
-
-All rights granted under this License are granted for the term of copyright
-on the Program, and are irrevocable provided the stated conditions are met.
-This License explicitly affirms your unlimited permission to run the unmodified
-Program. The output from running a covered work is covered by this License
-only if the output, given its content, constitutes a covered work. This License
-acknowledges your rights of fair use or other equivalent, as provided by copyright
-law.
-
-You may make, run and propagate covered works that you do not convey, without
-conditions so long as your license otherwise remains in force. You may convey
-covered works to others for the sole purpose of having them make modifications
-exclusively for you, or provide you with facilities for running those works,
-provided that you comply with the terms of this License in conveying all material
-for which you do not control copyright. Those thus making or running the covered
-works for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of your copyrighted
-material outside their relationship with you.
-
-Conveying under any other circumstances is permitted solely under the conditions
-stated below. Sublicensing is not allowed; section 10 makes it unnecessary.
-
-   3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
-No covered work shall be deemed part of an effective technological measure
-under any applicable law fulfilling obligations under article 11 of the WIPO
-copyright treaty adopted on 20 December 1996, or similar laws prohibiting
-or restricting circumvention of such measures.
-
-When you convey a covered work, you waive any legal power to forbid circumvention
-of technological measures to the extent such circumvention is effected by
-exercising rights under this License with respect to the covered work, and
-you disclaim any intention to limit operation or modification of the work
-as a means of enforcing, against the work's users, your or third parties'
-legal rights to forbid circumvention of technological measures.
-
-   4. Conveying Verbatim Copies.
-
-You may convey verbatim copies of the Program's source code as you receive
-it, in any medium, provided that you conspicuously and appropriately publish
-on each copy an appropriate copyright notice; keep intact all notices stating
-that this License and any non-permissive terms added in accord with section
-7 apply to the code; keep intact all notices of the absence of any warranty;
-and give all recipients a copy of this License along with the Program.
-
-You may charge any price or no price for each copy that you convey, and you
-may offer support or warranty protection for a fee.
-
-   5. Conveying Modified Source Versions.
-
-You may convey a work based on the Program, or the modifications to produce
-it from the Program, in the form of source code under the terms of section
-4, provided that you also meet all of these conditions:
-
-a) The work must carry prominent notices stating that you modified it, and
-giving a relevant date.
-
-b) The work must carry prominent notices stating that it is released under
-this License and any conditions added under section 7. This requirement modifies
-the requirement in section 4 to "keep intact all notices".
-
-c) You must license the entire work, as a whole, under this License to anyone
-who comes into possession of a copy. This License will therefore apply, along
-with any applicable section 7 additional terms, to the whole of the work,
-and all its parts, regardless of how they are packaged. This License gives
-no permission to license the work in any other way, but it does not invalidate
-such permission if you have separately received it.
-
-d) If the work has interactive user interfaces, each must display Appropriate
-Legal Notices; however, if the Program has interactive interfaces that do
-not display Appropriate Legal Notices, your work need not make them do so.
-
-A compilation of a covered work with other separate and independent works,
-which are not by their nature extensions of the covered work, and which are
-not combined with it such as to form a larger program, in or on a volume of
-a storage or distribution medium, is called an "aggregate" if the compilation
-and its resulting copyright are not used to limit the access or legal rights
-of the compilation's users beyond what the individual works permit. Inclusion
-of a covered work in an aggregate does not cause this License to apply to
-the other parts of the aggregate.
-
-   6. Conveying Non-Source Forms.
-
-You may convey a covered work in object code form under the terms of sections
-4 and 5, provided that you also convey the machine-readable Corresponding
-Source under the terms of this License, in one of these ways:
-
-a) Convey the object code in, or embodied in, a physical product (including
-a physical distribution medium), accompanied by the Corresponding Source fixed
-on a durable physical medium customarily used for software interchange.
-
-b) Convey the object code in, or embodied in, a physical product (including
-a physical distribution medium), accompanied by a written offer, valid for
-at least three years and valid for as long as you offer spare parts or customer
-support for that product model, to give anyone who possesses the object code
-either (1) a copy of the Corresponding Source for all the software in the
-product that is covered by this License, on a durable physical medium customarily
-used for software interchange, for a price no more than your reasonable cost
-of physically performing this conveying of source, or (2) access to copy the
-Corresponding Source from a network server at no charge.
-
-c) Convey individual copies of the object code with a copy of the written
-offer to provide the Corresponding Source. This alternative is allowed only
-occasionally and noncommercially, and only if you received the object code
-with such an offer, in accord with subsection 6b.
-
-d) Convey the object code by offering access from a designated place (gratis
-or for a charge), and offer equivalent access to the Corresponding Source
-in the same way through the same place at no further charge. You need not
-require recipients to copy the Corresponding Source along with the object
-code. If the place to copy the object code is a network server, the Corresponding
-Source may be on a different server (operated by you or a third party) that
-supports equivalent copying facilities, provided you maintain clear directions
-next to the object code saying where to find the Corresponding Source. Regardless
-of what server hosts the Corresponding Source, you remain obligated to ensure
-that it is available for as long as needed to satisfy these requirements.
-
-e) Convey the object code using peer-to-peer transmission, provided you inform
-other peers where the object code and Corresponding Source of the work are
-being offered to the general public at no charge under subsection 6d.
-
-A separable portion of the object code, whose source code is excluded from
-the Corresponding Source as a System Library, need not be included in conveying
-the object code work.
-
-A "User Product" is either (1) a "consumer product", which means any tangible
-personal property which is normally used for personal, family, or household
-purposes, or (2) anything designed or sold for incorporation into a dwelling.
-In determining whether a product is a consumer product, doubtful cases shall
-be resolved in favor of coverage. For a particular product received by a particular
-user, "normally used" refers to a typical or common use of that class of product,
-regardless of the status of the particular user or of the way in which the
-particular user actually uses, or expects or is expected to use, the product.
-A product is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent the
-only significant mode of use of the product.
-
-"Installation Information" for a User Product means any methods, procedures,
-authorization keys, or other information required to install and execute modified
-versions of a covered work in that User Product from a modified version of
-its Corresponding Source. The information must suffice to ensure that the
-continued functioning of the modified object code is in no case prevented
-or interfered with solely because modification has been made.
-
-If you convey an object code work under this section in, or with, or specifically
-for use in, a User Product, and the conveying occurs as part of a transaction
-in which the right of possession and use of the User Product is transferred
-to the recipient in perpetuity or for a fixed term (regardless of how the
-transaction is characterized), the Corresponding Source conveyed under this
-section must be accompanied by the Installation Information. But this requirement
-does not apply if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has been installed
-in ROM).
-
-The requirement to provide Installation Information does not include a requirement
-to continue to provide support service, warranty, or updates for a work that
-has been modified or installed by the recipient, or for the User Product in
-which it has been modified or installed. Access to a network may be denied
-when the modification itself materially and adversely affects the operation
-of the network or violates the rules and protocols for communication across
-the network.
-
-Corresponding Source conveyed, and Installation Information provided, in accord
-with this section must be in a format that is publicly documented (and with
-an implementation available to the public in source code form), and must require
-no special password or key for unpacking, reading or copying.
-
-   7. Additional Terms.
-
-"Additional permissions" are terms that supplement the terms of this License
-by making exceptions from one or more of its conditions. Additional permissions
-that are applicable to the entire Program shall be treated as though they
-were included in this License, to the extent that they are valid under applicable
-law. If additional permissions apply only to part of the Program, that part
-may be used separately under those permissions, but the entire Program remains
-governed by this License without regard to the additional permissions.
-
-When you convey a copy of a covered work, you may at your option remove any
-additional permissions from that copy, or from any part of it. (Additional
-permissions may be written to require their own removal in certain cases when
-you modify the work.) You may place additional permissions on material, added
-by you to a covered work, for which you have or can give appropriate copyright
-permission.
-
-Notwithstanding any other provision of this License, for material you add
-to a covered work, you may (if authorized by the copyright holders of that
-material) supplement the terms of this License with terms:
-
-a) Disclaiming warranty or limiting liability differently from the terms of
-sections 15 and 16 of this License; or
-
-b) Requiring preservation of specified reasonable legal notices or author
-attributions in that material or in the Appropriate Legal Notices displayed
-by works containing it; or
-
-c) Prohibiting misrepresentation of the origin of that material, or requiring
-that modified versions of such material be marked in reasonable ways as different
-from the original version; or
-
-d) Limiting the use for publicity purposes of names of licensors or authors
-of the material; or
-
-e) Declining to grant rights under trademark law for use of some trade names,
-trademarks, or service marks; or
-
-f) Requiring indemnification of licensors and authors of that material by
-anyone who conveys the material (or modified versions of it) with contractual
-assumptions of liability to the recipient, for any liability that these contractual
-assumptions directly impose on those licensors and authors.
-
-All other non-permissive additional terms are considered "further restrictions"
-within the meaning of section 10. If the Program as you received it, or any
-part of it, contains a notice stating that it is governed by this License
-along with a term that is a further restriction, you may remove that term.
-If a license document contains a further restriction but permits relicensing
-or conveying under this License, you may add to a covered work material governed
-by the terms of that license document, provided that the further restriction
-does not survive such relicensing or conveying.
-
-If you add terms to a covered work in accord with this section, you must place,
-in the relevant source files, a statement of the additional terms that apply
-to those files, or a notice indicating where to find the applicable terms.
-
-Additional terms, permissive or non-permissive, may be stated in the form
-of a separately written license, or stated as exceptions; the above requirements
-apply either way.
-
-   8. Termination.
-
-You may not propagate or modify a covered work except as expressly provided
-under this License. Any attempt otherwise to propagate or modify it is void,
-and will automatically terminate your rights under this License (including
-any patent licenses granted under the third paragraph of section 11).
-
-However, if you cease all violation of this License, then your license from
-a particular copyright holder is reinstated (a) provisionally, unless and
-until the copyright holder explicitly and finally terminates your license,
-and (b) permanently, if the copyright holder fails to notify you of the violation
-by some reasonable means prior to 60 days after the cessation.
-
-Moreover, your license from a particular copyright holder is reinstated permanently
-if the copyright holder notifies you of the violation by some reasonable means,
-this is the first time you have received notice of violation of this License
-(for any work) from that copyright holder, and you cure the violation prior
-to 30 days after your receipt of the notice.
-
-Termination of your rights under this section does not terminate the licenses
-of parties who have received copies or rights from you under this License.
-If your rights have been terminated and not permanently reinstated, you do
-not qualify to receive new licenses for the same material under section 10.
-
-   9. Acceptance Not Required for Having Copies.
-
-You are not required to accept this License in order to receive or run a copy
-of the Program. Ancillary propagation of a covered work occurring solely as
-a consequence of using peer-to-peer transmission to receive a copy likewise
-does not require acceptance. However, nothing other than this License grants
-you permission to propagate or modify any covered work. These actions infringe
-copyright if you do not accept this License. Therefore, by modifying or propagating
-a covered work, you indicate your acceptance of this License to do so.
-
-   10. Automatic Licensing of Downstream Recipients.
-
-Each time you convey a covered work, the recipient automatically receives
-a license from the original licensors, to run, modify and propagate that work,
-subject to this License. You are not responsible for enforcing compliance
-by third parties with this License.
-
-An "entity transaction" is a transaction transferring control of an organization,
-or substantially all assets of one, or subdividing an organization, or merging
-organizations. If propagation of a covered work results from an entity transaction,
-each party to that transaction who receives a copy of the work also receives
-whatever licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the Corresponding
-Source of the work from the predecessor in interest, if the predecessor has
-it or can get it with reasonable efforts.
-
-You may not impose any further restrictions on the exercise of the rights
-granted or affirmed under this License. For example, you may not impose a
-license fee, royalty, or other charge for exercise of rights granted under
-this License, and you may not initiate litigation (including a cross-claim
-or counterclaim in a lawsuit) alleging that any patent claim is infringed
-by making, using, selling, offering for sale, or importing the Program or
-any portion of it.
-
-   11. Patents.
-
-A "contributor" is a copyright holder who authorizes use under this License
-of the Program or a work on which the Program is based. The work thus licensed
-is called the contributor's "contributor version".
-
-A contributor's "essential patent claims" are all patent claims owned or controlled
-by the contributor, whether already acquired or hereafter acquired, that would
-be infringed by some manner, permitted by this License, of making, using,
-or selling its contributor version, but do not include claims that would be
-infringed only as a consequence of further modification of the contributor
-version. For purposes of this definition, "control" includes the right to
-grant patent sublicenses in a manner consistent with the requirements of this
-License.
-
-Each contributor grants you a non-exclusive, worldwide, royalty-free patent
-license under the contributor's essential patent claims, to make, use, sell,
-offer for sale, import and otherwise run, modify and propagate the contents
-of its contributor version.
-
-In the following three paragraphs, a "patent license" is any express agreement
-or commitment, however denominated, not to enforce a patent (such as an express
-permission to practice a patent or covenant not to sue for patent infringement).
-To "grant" such a patent license to a party means to make such an agreement
-or commitment not to enforce a patent against the party.
-
-If you convey a covered work, knowingly relying on a patent license, and the
-Corresponding Source of the work is not available for anyone to copy, free
-of charge and under the terms of this License, through a publicly available
-network server or other readily accessible means, then you must either (1)
-cause the Corresponding Source to be so available, or (2) arrange to deprive
-yourself of the benefit of the patent license for this particular work, or
-(3) arrange, in a manner consistent with the requirements of this License,
-to extend the patent license to downstream recipients. "Knowingly relying"
-means you have actual knowledge that, but for the patent license, your conveying
-the covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that country
-that you have reason to believe are valid.
-
-If, pursuant to or in connection with a single transaction or arrangement,
-you convey, or propagate by procuring conveyance of, a covered work, and grant
-a patent license to some of the parties receiving the covered work authorizing
-them to use, propagate, modify or convey a specific copy of the covered work,
-then the patent license you grant is automatically extended to all recipients
-of the covered work and works based on it.
-
-A patent license is "discriminatory" if it does not include within the scope
-of its coverage, prohibits the exercise of, or is conditioned on the non-exercise
-of one or more of the rights that are specifically granted under this License.
-You may not convey a covered work if you are a party to an arrangement with
-a third party that is in the business of distributing software, under which
-you make payment to the third party based on the extent of your activity of
-conveying the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory patent
-license (a) in connection with copies of the covered work conveyed by you
-(or copies made from those copies), or (b) primarily for and in connection
-with specific products or compilations that contain the covered work, unless
-you entered into that arrangement, or that patent license was granted, prior
-to 28 March 2007.
-
-Nothing in this License shall be construed as excluding or limiting any implied
-license or other defenses to infringement that may otherwise be available
-to you under applicable patent law.
-
-   12. No Surrender of Others' Freedom.
-
-If conditions are imposed on you (whether by court order, agreement or otherwise)
-that contradict the conditions of this License, they do not excuse you from
-the conditions of this License. If you cannot convey a covered work so as
-to satisfy simultaneously your obligations under this License and any other
-pertinent obligations, then as a consequence you may not convey it at all.
-For example, if you agree to terms that obligate you to collect a royalty
-for further conveying from those to whom you convey the Program, the only
-way you could satisfy both those terms and this License would be to refrain
-entirely from conveying the Program.
-
-   13. Use with the GNU Affero General Public License.
-
-Notwithstanding any other provision of this License, you have permission to
-link or combine any covered work with a work licensed under version 3 of the
-GNU Affero General Public License into a single combined work, and to convey
-the resulting work. The terms of this License will continue to apply to the
-part which is the covered work, but the special requirements of the GNU Affero
-General Public License, section 13, concerning interaction through a network
-will apply to the combination as such.
-
-   14. Revised Versions of this License.
-
-The Free Software Foundation may publish revised and/or new versions of the
-GNU General Public License from time to time. Such new versions will be similar
-in spirit to the present version, but may differ in detail to address new
-problems or concerns.
-
-Each version is given a distinguishing version number. If the Program specifies
-that a certain numbered version of the GNU General Public License "or any
-later version" applies to it, you have the option of following the terms and
-conditions either of that numbered version or of any later version published
-by the Free Software Foundation. If the Program does not specify a version
-number of the GNU General Public License, you may choose any version ever
-published by the Free Software Foundation.
-
-If the Program specifies that a proxy can decide which future versions of
-the GNU General Public License can be used, that proxy's public statement
-of acceptance of a version permanently authorizes you to choose that version
-for the Program.
-
-Later license versions may give you additional or different permissions. However,
-no additional obligations are imposed on any author or copyright holder as
-a result of your choosing to follow a later version.
-
-   15. Disclaimer of Warranty.
-
-THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE
-LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
-OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER
-EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
-OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
-TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM
-PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR
-CORRECTION.
-
-   16. Limitation of Liability.
-
-IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL
-ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM
-AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL,
-INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO
-USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED
-INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE
-PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER
-PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
-
-   17. Interpretation of Sections 15 and 16.
-
-If the disclaimer of warranty and limitation of liability provided above cannot
-be given local legal effect according to their terms, reviewing courts shall
-apply local law that most closely approximates an absolute waiver of all civil
-liability in connection with the Program, unless a warranty or assumption
-of liability accompanies a copy of the Program in return for a fee. END OF
-TERMS AND CONDITIONS
-
-How to Apply These Terms to Your New Programs
-
-If you develop a new program, and you want it to be of the greatest possible
-use to the public, the best way to achieve this is to make it free software
-which everyone can redistribute and change under these terms.
-
-To do so, attach the following notices to the program. It is safest to attach
-them to the start of each source file to most effectively state the exclusion
-of warranty; and each file should have at least the "copyright" line and a
-pointer to where the full notice is found.
-
-<one line to give the program's name and a brief idea of what it does.>
-
-Copyright (C) <year> <name of author>
-
-This program is free software: you can redistribute it and/or modify it under
-the terms of the GNU General Public License as published by the Free Software
-Foundation, either version 3 of the License, or (at your option) any later
-version.
-
-This program is distributed in the hope that it will be useful, but WITHOUT
-ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
-FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
-
-You should have received a copy of the GNU General Public License along with
-this program. If not, see <https://www.gnu.org/licenses/>.
-
-Also add information on how to contact you by electronic and paper mail.
-
-If the program does terminal interaction, make it output a short notice like
-this when it starts in an interactive mode:
-
-<program> Copyright (C) <year> <name of author>
-
-This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
-
-This is free software, and you are welcome to redistribute it under certain
-conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License. Of course, your program's commands might
-be different; for a GUI interface, you would use an "about box".
-
-You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary. For
-more information on this, and how to apply and follow the GNU GPL, see <https://www.gnu.org/licenses/>.
-
-The GNU General Public License does not permit incorporating your program
-into proprietary programs. If your program is a subroutine library, you may
-consider it more useful to permit linking proprietary applications with the
-library. If this is what you want to do, use the GNU Lesser General Public
-License instead of this License. But first, please read <https://www.gnu.org/
-licenses /why-not-lgpl.html>.

blocks-live/bhl.cfg

@@ -1,70 +0,0 @@
-
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file provides a basic, generic building block to build a virtualization host. 
-# 'b' for basic building block, 'h' for hypervisor'
-
-# This is NOT a standalone kickstart file
-
-%packages --exclude-weakdeps # Beginning of the packages section. Does not include weak dependencies.
-
-qemu-kvm
-libvirt
-libvirt-daemon-config-network
-libvirt-daemon-kvm
-virt-install
-virt-top
-libguestfs-tools
-python3-libguestfs
-guestfs-tools # Complementary tools useful for interacting with vith guest systems
-
-%end # End of the packages section
-
-%post --log=/root/bhl.log # Beginning of %post section. Those commands are executed inside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-mkdir /var/lib/libvirt/iso # Create a directory to store iso images
-
-wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /var/lib/libvirt/iso/ # fetch netboot.xyz iso
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/configure-vmm-and-desktop.sh -P /usr/sbin/
-chmod +x /usr/sbin/configure-vmm-and-desktop.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/create-live-vm.sh -P /usr/sbin/
-chmod +x /usr/sbin/create-live-vm.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/virtualization-tweaks-root-needed.sh -P /usr/sbin/
-chmod +x /usr/sbin/virtualization-tweaks-root-needed.sh
-
-# # Create new file /etc/systemd/system/postinstall.service using cat:
-# cat > /etc/systemd/system/post-install.service<< EOF
-# [Unit]
-# Description=Post-installation configuration for Phyllome OS
-# After=gdm.service
-# Requires=gdm.service
-# 
-# [Service]
-# Type=oneshot
-# ExecStart=/bin/bash /usr/sbin/post-install.sh
-# RemainAfterExit=yes
-# 
-# [Install]
-# WantedBy=multi-user.target
-# EOF
-# 
-# systemctl enable /etc/systemd/system/post-install.service # Enable systemd unit
-
-# Add a network bridge. Still need to declare it to libvirt/virt-manager
-# nmcli con add ifname br0 type bridge con-name br0 
-# nmcli con add type bridge-slave ifname enp1s0 master br0 # to-do : generalize this command so that it could regardless of the name of the ethernet device
-# nmcli con up br0
-
-%end # End of the %post section
-

blocks-live/bhla.cfg

@@ -1,36 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file configures an hypervisor for AMD (tm) CPUs
-# 'b' for basic building block, 'h' for hypervisor', 'a' for amd
-
-# This is NOT a standalone kickstart file
-
-%post --log=/root/bhla.log # Beginning of %post section. Those commands are executed inside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-sed -i 's/\(quiet\)/\1 amd_iommu=on amd_iommu=pt rd.driver.pre=vfio-pci/i' /etc/default/grub # Load kernel modules in GRUB. 
-
-# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
-echo "vfio" > /etc/modules-load.d/vfio.conf
-echo "vfio-pci" > /etc/modules-load.d/vfio-pci.conf
-echo "vfio_iommu_type1" > /etc/modules-load.d/vfio_iommu_type1.conf
-echo "vfio_virqfd" > /etc/modules-load.d/vfio_virqfd.conf
-
-echo "options kvm_amd nested=1" >> /etc/modprobe.d/kvm.conf # Add support for nested-virtualization
-
-# The following part seems useless
-# dracut --add-drivers " vfio vfio-pci vfio_iommu_type1 vfio_virqfd " --force # Instruct dracut to load the vfio drivers
-# dracut --force # Regenerate initramfs
-# Doesn't seem to work
-# dracut: Cannot find /usr/lib/dracut/dracut-init.sh.
-# dracut: Are you running from a git checkout?
-# dracut: Try passing -l as an argument to /usr/bin/dracut
-
-# The following part seems useless too. No need to regenerate grub
-# grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub. Does it fail ? /usr/sbin/grub2-probe: error: failed to get canonical path of `LiveOS_rootfs'.
-
-%end # End of the %post section

blocks-live/bhli.cfg

@@ -1,38 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file configures an hypervisor for Intel(tm) CPUs and Intel(tm) graphic cards
-# 'b' for basic building block, 'h' for hypervisor', 'i' for intel
-
-# This is NOT a standalone kickstart file
-
-%post --log=/root/blhi.log # Beginning of %post section. Those commands are executed inside the chroot environment. Logging is enabled to help with post-installtion troubleshooting
-
-sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci i915.enable_gvt=1/i' /etc/default/grub # Load kernel modules in grub.
-
-# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
-echo "vfio" > /etc/modules-load.d/vfio.conf
-echo "vfio-pci" > /etc/modules-load.d/vfio-pci.conf
-echo "vfio_iommu_type1" > /etc/modules-load.d/vfio_iommu_type1.conf
-echo "vfio_virqfd" > /etc/modules-load.d/vfio_virqfd.conf
-echo "kvmgt" > /etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-echo "vfio-mdev" > /etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-
-echo "options kvm_intel nested=1" >> /etc/modprobe.d/kvm.conf # Add support for nested-virtualization
-
-# The following part seems useless
-# dracut --add-drivers " vfio vfio-pci vfio_iommu_type1 vfio_virqfd vfio-mdev kvmgt " --force # Instruct dracut to load the vfio drivers
-# dracut --force # Regenerate initramfs
-# Doesn't seem to work
-# dracut: Cannot find /usr/lib/dracut/dracut-init.sh.
-# dracut: Are you running from a git checkout?
-# dracut: Try passing -l as an argument to /usr/bin/dracut
-
-# The following part seems useless too. No need to regenerate grub
-# grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub. Does it fail ? /usr/sbin/grub2-probe: error: failed to get canonical path of `LiveOS_rootfs'.
-
-%end # End of the %post sectionsud

blocks-live/bl.cfg

@@ -1,437 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file provides a basic block to build a minimal, live system
-# 'b' for basic building block, 'l' for live
-
-# This is NOT a standalone kickstart file
-
-# text # Perform installation in text mode
-
-repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora mirror
-repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch # Official Fedora updates mirror
-# #repo --name=updates-testing --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f$releasever&arch=$basearch
-url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora updates mirror
-
-keyboard --xlayouts='ch (fr)' # set keyboard layouts for Romandie # Unnecessary if using inital-setup 
-lang en_US.UTF-8 # Set system language to American English # Unnecessary if using inital-setup 
-timezone Europe/Paris --utc # Set System timezone to Paris # Unnecessary if using inital-setup 
-# lang en_US.UTF-8
-# keyboard us
-# timezone US/Eastern
-
-selinux --enforcing # Make sure SELinux is in enforced mode  
-firewall --enabled --service=mdns
-# selinux --enforcing
-# firewall --enabled --service=mdns 
-
-# xconfig --startxonboot
-
-zerombr
-clearpart --all
-part / --size 5120
-# bootloader --timeout=2
- 
-# services --enabled=NetworkManager --disabled=sshd
-# network --bootproto=dhcp --device=link --activate --hostname=phyllome
-# 
-# rootpw --lock --iscrypted locked
-# 
-# # shutdown
-
-# zerombr
-# clearpart --all
-# part / --size 5120 --fstype ext4
-# services --enabled=NetworkManager,ModemManager --disabled=sshd
-network --bootproto=dhcp --device=link --activate
-rootpw --lock --iscrypted locked
-shutdown
-
-# 
-# %packages # Beginning of the packages section.
-# 
-# # Explicitly specified here:
-# # <notting> walters: because otherwise dependency loops cause yum issues.
-# kernel
-# kernel-modules
-# kernel-modules-extra
-# 
-# # This was added a while ago, I think it falls into the category of
-# # "Diagnosis/recovery tool useful from a Live OS image".  Leaving this untouched
-# # for now.
-# #memtest86+
-# #@x86-baremetal-tools # memtest86+ is included
-# 
-# # The point of a live image is to install
-# # anaconda
-# # anaconda-install-env-deps
-# # anaconda-live
-# # @anaconda-tools
-# # Anaconda has a weak dep on this and we don't want it on livecds, see
-# # https://fedoraproject.org/wiki/Changes/RemoveDeviceMapperMultipathFromWorkstationLiveCD
-# # -fcoe-utils
-# # -device-mapper-multipath
-# 
-# # Need aajohan-comfortaa-fonts for the SVG rnotes images
-# # aajohan-comfortaa-fonts
-# 
-# # Without this, initramfs generation during live image creation fails: #1242586
-# dracut-live
-# dracut-config-generic # add that as sugested here : https://www.brianlane.com/post/creating-live-isos-with-livemedia-creator/
-# 
-# # For UEFI-boot, see https://github.com/weldr/lorax/blob/master/docs/fedora-livemedia.ks
-# shim
-# shim-ia32
-# grub2
-# grub2-efi
-# grub2-efi-*-cdboot
-# grub2-efi-ia32
-# efibootmgr
-# 
-# # syslinux is in @x86-baremetal-tools
-# 
-# # anaconda needs the locales available to run for different locales
-# glibc-all-langpacks
-# 
-# # no longer in @core since 2018-10, but needed for livesys script
-# initscripts
-# chkconfig
-# 
-# @core # minimal installation
-# pciutils # Pciutils provides lspci commandline tool and is not installed by default
-# # initial-setup # Install the initial setup package. For the GUI version, use initial-setup-gui instead.
-# qemu-guest-agent # "QEMU guest agent"
-# spice-vdagent # "Agent for Spice guests"
-# -fedora-logos # Fedora logos
-# -fedora-release # Fedora release-notes
-# -fedora-release-notes
-# -fedora-release-common # Fedora release files
-# -fedora-release-identity-basic # ???
-# fedora-remix-logos # Install Fedora remix logos
-# generic-release
-# generic-logos
-# generic-release-common # "Generic release files"
-# generic-release-notes # "Release Notes"
-
-# %end # End of the packages section
-
-%packages
-# Explicitly specified here:
-# <notting> walters: because otherwise dependency loops cause yum issues.
-kernel
-kernel-modules
-kernel-modules-extra
-
-# This was added a while ago, I think it falls into the category of
-# "Diagnosis/recovery tool useful from a Live OS image".  Leaving this untouched
-# for now.
-#memtest86+
-@x86-baremetal-tools # memtest86+ is included
-
-# The point of a live image is to install
-anaconda
-anaconda-install-env-deps
-anaconda-live
-@anaconda-tools
-# Anaconda has a weak dep on this and we don't want it on livecds, see
-# https://fedoraproject.org/wiki/Changes/RemoveDeviceMapperMultipathFromWorkstationLiveCD
--fcoe-utils
--device-mapper-multipath
-
-# Need aajohan-comfortaa-fonts for the SVG rnotes images
-aajohan-comfortaa-fonts
-
-# Without this, initramfs generation during live image creation fails: #1242586
-dracut-live
-# syslinux is in @x86-baremetal-tools
-
-# anaconda needs the locales available to run for different locales
-glibc-all-langpacks
-
-# no longer in @core since 2018-10, but needed for livesys script
-initscripts
-chkconfig
-
-%end # End of the packages section
-
-%post --log=/root/bl.log # Beginning of the post-installation section. Add logging.
-
-# FIXME: it'd be better to get this installed from a package
-cat > /etc/rc.d/init.d/livesys << EOF
-#!/bin/bash
-#
-# live: Init script for live image
-#
-# chkconfig: 345 00 99
-# description: Init script for live image.
-### BEGIN INIT INFO
-# X-Start-Before: display-manager chronyd
-### END INIT INFO
-
-. /etc/init.d/functions
-
-if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ]; then
-    exit 0
-fi
-
-if [ -e /.liveimg-configured ] ; then
-    configdone=1
-fi
-
-exists() {
-    which \$1 >/dev/null 2>&1 || return
-    \$*
-}
-
-livedir="LiveOS"
-for arg in \`cat /proc/cmdline\` ; do
-  if [ "\${arg##rd.live.dir=}" != "\${arg}" ]; then
-    livedir=\${arg##rd.live.dir=}
-    continue
-  fi
-  if [ "\${arg##live_dir=}" != "\${arg}" ]; then
-    livedir=\${arg##live_dir=}
-  fi
-done
-
-# enable swapfile if it exists
-if ! strstr "\`cat /proc/cmdline\`" noswap && [ -f /run/initramfs/live/\${livedir}/swap.img ] ; then
-  action "Enabling swap file" swapon /run/initramfs/live/\${livedir}/swap.img
-fi
-
-mountPersistentHome() {
-  # support label/uuid
-  if [ "\${homedev##LABEL=}" != "\${homedev}" -o "\${homedev##UUID=}" != "\${homedev}" ]; then
-    homedev=\`/sbin/blkid -o device -t "\$homedev"\`
-  fi
-
-  # if we're given a file rather than a blockdev, loopback it
-  if [ "\${homedev##mtd}" != "\${homedev}" ]; then
-    # mtd devs don't have a block device but get magic-mounted with -t jffs2
-    mountopts="-t jffs2"
-  elif [ ! -b "\$homedev" ]; then
-    loopdev=\`losetup -f\`
-    if [ "\${homedev##/run/initramfs/live}" != "\${homedev}" ]; then
-      action "Remounting live store r/w" mount -o remount,rw /run/initramfs/live
-    fi
-    losetup \$loopdev \$homedev
-    homedev=\$loopdev
-  fi
-
-  # if it's encrypted, we need to unlock it
-  if [ "\$(/sbin/blkid -s TYPE -o value \$homedev 2>/dev/null)" = "crypto_LUKS" ]; then
-    echo
-    echo "Setting up encrypted /home device"
-    plymouth ask-for-password --command="cryptsetup luksOpen \$homedev EncHome"
-    homedev=/dev/mapper/EncHome
-  fi
-
-  # and finally do the mount
-  mount \$mountopts \$homedev /home
-  # if we have /home under what's passed for persistent home, then
-  # we should make that the real /home.  useful for mtd device on olpc
-  if [ -d /home/home ]; then mount --bind /home/home /home ; fi
-  [ -x /sbin/restorecon ] && /sbin/restorecon /home
-  if [ -d /home/liveuser ]; then USERADDARGS="-M" ; fi
-}
-
-findPersistentHome() {
-  for arg in \`cat /proc/cmdline\` ; do
-    if [ "\${arg##persistenthome=}" != "\${arg}" ]; then
-      homedev=\${arg##persistenthome=}
-    fi
-  done
-}
-
-if strstr "\`cat /proc/cmdline\`" persistenthome= ; then
-  findPersistentHome
-elif [ -e /run/initramfs/live/\${livedir}/home.img ]; then
-  homedev=/run/initramfs/live/\${livedir}/home.img
-fi
-
-# if we have a persistent /home, then we want to go ahead and mount it
-if ! strstr "\`cat /proc/cmdline\`" nopersistenthome && [ -n "\$homedev" ] ; then
-  action "Mounting persistent /home" mountPersistentHome
-fi
-
-if [ -n "\$configdone" ]; then
-  exit 0
-fi
-
-# add liveuser user with no passwd
-action "Adding live user" useradd \$USERADDARGS -c "Live System User" liveuser
-passwd -d liveuser > /dev/null
-usermod -aG wheel liveuser > /dev/null
-
-# Remove root password lock
-passwd -d root > /dev/null
-
-# turn off firstboot for livecd boots
-systemctl --no-reload disable firstboot-text.service 2> /dev/null || :
-systemctl --no-reload disable firstboot-graphical.service 2> /dev/null || :
-systemctl stop firstboot-text.service 2> /dev/null || :
-systemctl stop firstboot-graphical.service 2> /dev/null || :
-
-# don't use prelink on a running live image
-sed -i 's/PRELINKING=yes/PRELINKING=no/' /etc/sysconfig/prelink &>/dev/null || :
-
-# turn off mdmonitor by default
-systemctl --no-reload disable mdmonitor.service 2> /dev/null || :
-systemctl --no-reload disable mdmonitor-takeover.service 2> /dev/null || :
-systemctl stop mdmonitor.service 2> /dev/null || :
-systemctl stop mdmonitor-takeover.service 2> /dev/null || :
-
-# don't start cron/at as they tend to spawn things which are
-# disk intensive that are painful on a live image
-systemctl --no-reload disable crond.service 2> /dev/null || :
-systemctl --no-reload disable atd.service 2> /dev/null || :
-systemctl stop crond.service 2> /dev/null || :
-systemctl stop atd.service 2> /dev/null || :
-
-# turn off abrtd on a live image
-systemctl --no-reload disable abrtd.service 2> /dev/null || :
-systemctl stop abrtd.service 2> /dev/null || :
-
-# Don't sync the system clock when running live (RHBZ #1018162)
-sed -i 's/rtcsync//' /etc/chrony.conf
-
-# Mark things as configured
-touch /.liveimg-configured
-
-# add static hostname to work around xauth bug
-# https://bugzilla.redhat.com/show_bug.cgi?id=679486
-# the hostname must be something else than 'localhost'
-# https://bugzilla.redhat.com/show_bug.cgi?id=1370222
-hostnamectl set-hostname "localhost-live"
-
-EOF
-
-# bah, hal starts way too late
-cat > /etc/rc.d/init.d/livesys-late << EOF
-#!/bin/bash
-#
-# live: Late init script for live image
-#
-# chkconfig: 345 99 01
-# description: Late init script for live image.
-
-. /etc/init.d/functions
-
-if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ] || [ -e /.liveimg-late-configured ] ; then
-    exit 0
-fi
-
-exists() {
-    which \$1 >/dev/null 2>&1 || return
-    \$*
-}
-
-touch /.liveimg-late-configured
-
-# read some variables out of /proc/cmdline
-for o in \`cat /proc/cmdline\` ; do
-    case \$o in
-    ks=*)
-        ks="--kickstart=\${o#ks=}"
-        ;;
-    xdriver=*)
-        xdriver="\${o#xdriver=}"
-        ;;
-    esac
-done
-
-# if liveinst or textinst is given, start anaconda
-if strstr "\`cat /proc/cmdline\`" liveinst ; then
-   plymouth --quit
-   /usr/sbin/liveinst \$ks
-fi
-if strstr "\`cat /proc/cmdline\`" textinst ; then
-   plymouth --quit
-   /usr/sbin/liveinst --text \$ks
-fi
-
-# configure X, allowing user to override xdriver
-if [ -n "\$xdriver" ]; then
-   cat > /etc/X11/xorg.conf.d/00-xdriver.conf <<FOE
-Section "Device"
-	Identifier	"Videocard0"
-	Driver	"\$xdriver"
-EndSection
-FOE
-fi
-
-EOF
-
-chmod 755 /etc/rc.d/init.d/livesys
-/sbin/restorecon /etc/rc.d/init.d/livesys
-/sbin/chkconfig --add livesys
-
-chmod 755 /etc/rc.d/init.d/livesys-late
-/sbin/restorecon /etc/rc.d/init.d/livesys-late
-/sbin/chkconfig --add livesys-late
-
-# enable tmpfs for /tmp
-systemctl enable tmp.mount
-
-# make it so that we don't do writing to the overlay for things which
-# are just tmpdirs/caches
-# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
-cat >> /etc/fstab << EOF
-vartmp   /var/tmp    tmpfs   defaults   0  0
-EOF
-
-# work around for poor key import UI in PackageKit
-rm -f /var/lib/rpm/__db*
-echo "Packages within this LiveCD"
-rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
-# Note that running rpm recreates the rpm db files which aren't needed or wanted
-rm -f /var/lib/rpm/__db*
-
-# go ahead and pre-make the man -k cache (#455968)
-/usr/bin/mandb
-
-# make sure there aren't core files lying around
-rm -f /core*
-
-# remove random seed, the newly installed instance should make it's own
-rm -f /var/lib/systemd/random-seed
-
-# convince readahead not to collect
-# FIXME: for systemd
-
-echo 'File created by kickstart. See systemd-update-done.service(8).' \
-    | tee /etc/.updated >/var/.updated
-
-# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
-# See bug 1317709
-rm -f /boot/*-rescue*
-
-# Disable network service here, as doing it in the services line
-# fails due to RHBZ #1369794
-/sbin/chkconfig network off
-
-# Remove machine-id on pre generated images
-rm -f /etc/machine-id
-touch /etc/machine-id
-
-%end
-
-
-%post --nochroot
-# For livecd-creator builds only (lorax/livemedia-creator handles this directly)
-if [ -n "$LIVE_ROOT" ]; then
-    cp "$INSTALL_ROOT"/usr/share/licenses/*-release-common/* "$LIVE_ROOT/"
-
-    # only installed on x86, x86_64
-    if [ -f /usr/bin/livecd-iso-to-disk ]; then
-        mkdir -p "$LIVE_ROOT/LiveOS"
-        cp /usr/bin/livecd-iso-to-disk "$LIVE_ROOT/LiveOS"
-    fi
-fi
-
-%end
-

blocks-live/ld.cfg

@@ -1,119 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a live desktop machine. 
-# 'l' for live, 'd' for desktop
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c ld.cfg -o ../leaves/flat-ld.cfg
-# IMPORTANT : Weak dependencies to be destroyed in the resulting ks
-
-# Instructions for livecd-creator (about to be deprecated) 
-# An ISO file can be created using the following command as *root*:  
-# livecd-creator -c ../leaves/flat-ld.cfg --fslabel=ld
-# livecd-creator is part of the livecd-tools package
-
-# Instructions for livemedia-creator
-# An ISO file can be created using the following command as *root*:  
-# livemedia-creator --make-iso --ks flat-ld.cfg --no-virt --iso-only --iso-name phyllome-live-d-x86_64.iso --releasever 35
-
-# The resulting ISO can be tested with qemu-kvm, using the following these two commands, as *root*:
-# UEFI test: 
-# qemu-kvm -bios /usr/share/edk2/ovmf/OVMF_CODE.fd -m 2048 -vga qxl phyllome-live-d-x86_64.iso
-# BIOS test: 
-# qemu-kvm -m 2048 -vga qxl phyllome-live-d-x86_64.iso
-
-%include bl.cfg # A base for a minimal live machine
-%include "../blocks/bd.cfg" # A base for a desktop environment
-
-%post --log=/root/ld.log # Beginning of %post section. The following commands are executed inside a chroot environment. Add logging
-
-cat >> /etc/rc.d/init.d/livesys << EOF
-
-# # disable gnome-software automatically downloading updates
-# cat >> /usr/share/glib-2.0/schemas/org.gnome.software.gschema.override << FOE
-# [org.gnome.software]
-# download-updates=false
-# FOE
-# 
-# # don't autostart gnome-software session service
-# rm -f /etc/xdg/autostart/gnome-software-service.desktop
-
-# # disable the gnome-software shell search provider
-# cat >> /usr/share/gnome-shell/search-providers/org.gnome.Software-search-provider.ini << FOE
-# DefaultDisabled=true
-# FOE
-
-# # don't run gnome-initial-setup
-# mkdir ~liveuser/.config
-# touch ~liveuser/.config/gnome-initial-setup-done
-
-# suppress anaconda spokes redundant with gnome-initial-setup
-# cat >> /etc/sysconfig/anaconda << FOE
-# [NetworkSpoke]
-# visited=1
-# 
-# [PasswordSpoke]
-# visited=1
-# 
-# [UserSpoke]
-# visited=1
-# FOE
-
-## make the installer show up
-#if [ -f /usr/share/applications/liveinst.desktop ]; then
-#  # Show harddisk install in shell dash
-#  sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop ""
-#  # need to move it to anaconda.desktop to make shell happy
-#  mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
-#
-#   cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
-# [org.gnome.shell]
-# favorite-apps=['firefox.desktop', 'org.gnome.Calendar.desktop', 'rhythmbox.desktop', 'org.gnome.Photos.desktop', 'org.gnome.Nautilus.desktop', 'anaconda.desktop']
-# FOE
-# 
-#  # Make the welcome screen show up
-#  if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop ]; then
-#    mkdir -p ~liveuser/.config/autostart
-#    cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/
-#    cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/
-#  fi
-# 
-#   # Disable GNOME welcome tour so it doesn't overlap with Fedora welcome screen
-#   cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
-# welcome-dialog-last-shown-version='4294967295'
-# FOE
-# 
-#   # Copy Anaconda branding in place
-#   if [ -d /usr/share/lorax/product/usr/share/anaconda ]; then
-#     cp -a /usr/share/lorax/product/* /
-#   fi
-# fi
-
-# rebuild schema cache with any overrides we installed
-# glib-compile-schemas /usr/share/glib-2.0/schemas
-
-# set up auto-login
-cat > /etc/gdm/custom.conf << FOE
-[daemon]
-AutomaticLoginEnable=True
-AutomaticLogin=liveuser
-FOE
-
-# Turn off PackageKit-command-not-found while uninstalled
-# if [ -f /etc/PackageKit/CommandNotFound.conf ]; then
-#   sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
-# fi
-
-# make sure to set the right permissions and selinux contexts
-chown -R liveuser:liveuser /home/liveuser/
-restorecon -R /home/liveuser/
-
-EOF
-
-%end # End of the %post section

blocks-live/ldh.cfg

@@ -1,54 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a live desktop hypervisor machine.
-# 'l' for live, 'h' for hypervisor, 'd' for desktop
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c ldh.cfg -o ../leaves/flat-ldh.cfg
-# IMPORTANT : Weak dependencies to be destroyed in the resulting ks
-
-# Instructions for livecd-creator (about to be deprecated) 
-# An ISO file can be created using the following command as *root*:  
-# livecd-creator -c ../leaves/flat-ldh.cfg --fslabel=ldh
-# livecd-creator is part of the livecd-tools package
-
-# Instructions for livemedia-creator
-# An ISO file can be created using the following command as *root*:  
-# livemedia-creator --make-iso --ks flat-ldh.cfg --no-virt --iso-only --iso-name phyllome-live-dh-x86_64.iso --releasever 35
-
-# The resulting ISO can be tested with qemu-kvm, using the following these two commands, as *root*:
-# UEFI test: 
-# qemu-kvm -bios /usr/share/edk2/ovmf/OVMF_CODE.fd -m 2048 -vga qxl phyllome-live-dh-x86_64.iso
-# BIOS test: 
-# qemu-kvm -m 2048 -vga qxl phyllome-live-dh-x86_64.iso
-
-%include ld.cfg # A base for a live desktop minimal machine
-%include bhl.cfg # A base hypervisor
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-virt-manager # Install virt-manager, the graphical front-end for QEMU/KVM
-
-%end # End of the packages section
-
-%post --log=/root/ldh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
-
-usermod -a -G libvirt liveuser # Make user "liveuser" part of the existing libvirt group to allow it to interact with the guest-hypervisor.
-chown liveuser:liveuser /var/lib/libvirt/iso # Make the user "liveuser" the owner of this directory
-chown liveuser:liveuser /var/lib/libvirt/images  # Make the user "test" the owner of this directory
-
-# Create a file to autostart virt-manager
-cat > /etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-%end # End of the %post section

blocks-live/ldha.cfg

@@ -1,55 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a live desktop hypervisor configured for AMD (tm) CPUs.
-# 'l' for live, 'd' for desktop, 'h' for hypervisor', 'a' for amd
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c ldha.cfg -o ../leaves/flat-ldha.cfg
-# IMPORTANT : Weak dependencies to be destroyed in the resulting ks
-
-# Instructions for livecd-creator (about to be deprecated) 
-# An ISO file can be created using the following command as *root*:  
-# livecd-creator -c ../leaves/flat-ldha.cfg --fslabel=ldha
-# livecd-creator is part of the livecd-tools package
-
-# Instructions for livemedia-creator
-# An ISO file can be created using the following command as *root*:  
-# livemedia-creator --make-iso --ks flat-ldha.cfg --no-virt --iso-only --iso-name phyllome-live-dha-x86_64.iso --releasever 35
-
-# The resulting ISO can be tested with qemu-kvm, using the following these two commands, as *root*:
-# UEFI test: 
-# qemu-kvm -bios /usr/share/edk2/ovmf/OVMF_CODE.fd -m 2048 -vga qxl phyllome-live-dha-x86_64.iso
-# BIOS test: 
-# qemu-kvm -m 2048 -vga qxl phyllome-live-dha-x86_64.iso
-
-%include ld.cfg # A base for a live desktop minimal machine
-%include bhl.cfg # A base hypervisor
-%include bhla.cfg # Specific virtualization configuration for AMD (tm) CPUs
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-virt-manager # Install virt-manager, the graphical front-end for QEMU/KVM
-
-%end # End of the packages section
-
-%post --log=/root/ldha.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
-
-usermod -a -G libvirt liveuser # Make user "liveuser" part of the existing libvirt group to allow it to interact with the guest-hypervisor.
-chown liveuser:liveuser /var/lib/libvirt/iso # Make the user "liveuser" the owner of this directory
-chown liveuser:liveuser /var/lib/libvirt/images  # Make the user "test" the owner of this directory
-
-# Create a file to autostart virt-manager
-cat > /etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-%end # End of the %post section

blocks-live/ldhi.cfg

@@ -1,55 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a live desktop hypervisor configured for Intel(tm) CPU and Intel(tm) graphic cards.
-# 'l' for live, 'd' for desktop, 'h' for hypervisor, 'i' for intel
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c ldhi.cfg -o ../leaves/flat-ldhi.cfg
-# IMPORTANT : Weak dependencies to be destroyed in the resulting ks
-
-# Instructions for livecd-creator (about to be deprecated) 
-# An ISO file can be created using the following command as *root*:  
-# livecd-creator -c ../leaves/flat-ldhi.cfg --fslabel=ldhi
-# livecd-creator is part of the livecd-tools package
-
-# Instructions for livemedia-creator
-# An ISO file can be created using the following command as *root*:  
-# livemedia-creator --make-iso --ks flat-ldhi.cfg --no-virt --iso-only --iso-name phyllome-live-dhi-x86_64.iso --releasever 35
-
-# The resulting ISO can be tested with qemu-kvm, using the following these two commands, as *root*:
-# UEFI test: 
-# qemu-kvm -bios /usr/share/edk2/ovmf/OVMF_CODE.fd -m 2048 -vga qxl phyllome-live-ldhi-x86_64.iso
-# BIOS test: 
-# qemu-kvm -m 2048 -vga qxl phyllome-live-ldhi-x86_64.iso
-
-%include ld.cfg # A base for a live desktop minimal machine
-%include bhl.cfg # A base hypervisor
-%include bhli.cfg # Specific virtualization configuration for Intel(tm) CPU and Intel(tm) graphic cards
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-virt-manager # Install virt-manager, the graphical front-end for QEMU/KVM
-
-%end # End of the packages section
-
-%post --log=/root/ldhi.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
-
-usermod -a -G libvirt liveuser # Make user "liveuser" part of the existing libvirt group to allow it to interact with the guest-hypervisor.
-chown liveuser:liveuser /var/lib/libvirt/iso # Make the user "liveuser" the owner of this directory
-chown liveuser:liveuser /var/lib/libvirt/images  # Make the user "test" the owner of this directory
-
-# Create a file to autostart virt-manager
-cat > /etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-%end # End of the %post section

blocks-live/ls.cfg

@@ -1,9 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented live system.
-# 'l' for live, 's' for server

blocks-live/lsh.cfg

@@ -1,9 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented live system with a hypervisor
-# 'l' for live, 's' for server, 'h' for hypervisor'

blocks-live/lsha.cfg

@@ -1,9 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented live system with a hypervisor optimized for AMD (tm) CPUs
-# 'l' for live, 's' for server, 'h' for hypervisor', 'a' for amd

blocks-live/lshi.cfg

@@ -1,9 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented live system with a hypervisor optimized for Intel (tm) CPUs
-# 'l' for live, 's' for server, 'h' for hypervisor', 'i' for intel

blocks/b.cfg

@@ -1,67 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-#
-# What ? This kickstart file provides a basic block to build a minimal operating system.
-# 'b' for basic building block
-
-# This is NOT a standalone kickstart file
-
-text # Perform installation in text mode
-
-# Installation method. For cdrom, replace repo and url with cdrom
-repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora mirror
-repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch # Official Fedora updates mirror
-url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora updates mirror
-
-keyboard --xlayouts='ch (fr)' # set keyboard layouts for Romandie
-lang en_US.UTF-8 # Set system language to American English. More languages could be supported: --addsupport=cs_CZ,de_DE,en_UK
-timezone Europe/Paris --utc # Set system timezone to Paris
-
-rootpw --lock --iscrypted locked # Lock the root account
-
-selinux --enforcing # Make sure SELinux is in enforced mode  
-firewall --enabled --service=mdns # Make sure the firewall is enabled
-services --enabled=NetworkManager,libvirtd --disabled=sshd
-network  --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network interfaces and set hostname. "link" selects the first device reaching an up state 
-
-zerombr # WARNING : Dangerous command ! Will clear the Master Boot Record
-clearpart --all --initlabel # Partition clearing information. This setup uses GPT by default.
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi # Will create an efi partitition of 128 MiB (vda1)
-part /boot --fstype="ext4" --size=384 --label=boot # Create a boot partition of 384 MiB using the ext4 filesystem (vda2).
-part / --fstype="ext4" --grow --label=root # The remaining space will be used for root (vda3).
-bootloader --timeout=1 # Set the GNU GRUB bootloader timeout to 1.
-
-%packages --exclude-weakdeps # Beginning of the package section. Does not include weak dependencies.
-
-@core # minimal installation
-@hardware-support # Provides extended hardware support, and especially extra wireless drivers
-pciutils # Pciutils provides lspci commandline tool, which is not installed by default
-wget # "The non-interactive network downloader. " Used to fetch files during installation
-neofetch # a simple tool to show hardware-related informations inside a terminal
-nano # The nano text editor
-qemu-guest-agent # "QEMU guest agent" The qemu-guest agent is unnecessary for a bare-metal system. However, it is included here to cover cases where this kickstart file is used to deploy a virtual machine 
-spice-vdagent # "Agent for Spice guests" The spice agent is unnecessary for a bare-metal system. However, it is included here to cover cases where this kickstart file is used to deploy a virtual machine 
--fedora-logos # Remove Fedora logos to comply with [Fedora Remix legal guidelines](https://fedoraproject.org/wiki/Remix) 
--fedora-release # Remove Fedora release-notes
--fedora-release-notes # Remove Fedora release-notes
--fedora-release-common # Remove Fedora release files
--fedora-release-identity-basic # ???
-fedora-remix-logos # Add Fedora Remix logos
-generic-release # Add Fedora Remix logos
-generic-logos # Add Fedora Remix logos
-generic-release-common # "Generic release files"
-generic-release-notes # "Release Notes"
-
-%end # End of the packages section
-
-%post --log=/root/b.log # Beginning of the post-installation section. Add logging.
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
-
-%end # End of the %post section

blocks/bd.cfg

@@ -1,29 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file provides a basic block to build a minimal, desktop-oriented operating system using GNOME Shell.
-# 'b' for basic building block, 'd' for desktop
-
-# This is NOT a standalone kickstart file 
-
-xconfig --startxonboot --defaultdesktop=GNOME # Start the display session on boot. Although it says --startx, which seems to imply xorg, it is actually generic and thus works also with Wayland.
-
-%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies
-
-gnome-shell # the version 3 of the GNOME desktop environment, without any presintalled applications
-gnome-terminal # install the default terminal for GNOME Shell
--gnome-tour # delete GNOME Tour so it doesn't automatically launch on boot 
-dejavu-sans-mono-fonts # the gnome-shell package doesn't include much fonts by default, resulting in weird spacings in GNOME Terminal. GNOME Terminal unfortunately doesn't automatically pick this font 
-elementary-wallpapers-gnome.noarch # Gorgeous wallpapers from the elementary OS project
-wpa_supplicant # WPA Supplicant for Linux. It is not packaged by default in gnome-shell, but necessary to configure wireless networks using the Network Manager
-nano # The nano text editor
-
-%end
-
-# %post --nochroot --log=/mnt/sysimage/root/bd.log # Beginning of %post section. Those commands are executed outside the chroot environment
-# 
-# %end # End of the %post section

blocks/bh.cfg

@@ -1,73 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file provides a basic, generic building block to build a virtualization host. 
-# 'b' for basic building block, 'h' for hypervisor'
-
-# This is NOT a standalone kickstart file
-
-%packages --exclude-weakdeps # Beginning of the packages section. Does not include weak dependencies.
-
-qemu-kvm
-libvirt
-libvirt-daemon-config-network
-libvirt-daemon-kvm
-virt-install
-virt-top
-libguestfs-tools
-python3-libguestfs
-guestfs-tools # Complementary tools useful for interacting with vith guest systems
-
-%end # End of the packages section
-
-%post --nochroot --log=/mnt/sysimage/root/bh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-# %post --log=/root/bh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-mkdir /mnt/sysimage/var/lib/libvirt/iso # Create a directory to store iso images
-
-wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/iso/ # fetch netboot.xyz iso
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/configure-vmm-and-desktop.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/configure-vmm-and-desktop.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/create-live-vm.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/create-live-vm.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/virtualization-tweaks-root-needed.sh
-
-# # Create new file /etc/systemd/system/postinstall.service using cat:
-# cat > /mnt/sysimage/etc/systemd/system/post-install.service<< EOF
-# [Unit]
-# Description=Post-installation configuration for Phyllome OS
-# After=gdm.service
-# Requires=gdm.service
-# 
-# [Service]
-# Type=oneshot
-# ExecStart=/bin/bash /usr/sbin/post-install.sh
-# RemainAfterExit=yes
-# 
-# [Install]
-# WantedBy=multi-user.target
-# EOF
-# 
-# systemctl enable /mnt/sysimage/etc/systemd/system/post-install.service # Enable systemd unit
-
-# Add a network bridge. Still need to declare it to libvirt/virt-manager
-# nmcli con add ifname br0 type bridge con-name br0 
-# nmcli con add type bridge-slave ifname enp1s0 master br0 # to-do : generalize this command so that it could regardless of the name of the ethernet device
-# nmcli con up br0
-
-%end # End of the %post section
-
-# %post # Beginning of the post-installation section.
-# %end # End of the %post section
-

blocks/bha.cfg

@@ -1,36 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file configures an hypervisor for AMD (tm) CPUs
-# 'b' for basic building block, 'h' for hypervisor', 'a' for amd
-
-# This is NOT a standalone kickstart file
-
-%post --nochroot --log=/mnt/sysimage/root/bha.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-sed -i 's/\(quiet\)/\1 amd_iommu=on amd_iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB. 
-
-# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
-echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
-echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
-echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
-echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
-
-echo "options kvm_amd nested=1" >> /etc/modprobe.d/kvm.conf # Add support for nested-virtualization
-
-# The following part seems useless
-# dracut --add-drivers " vfio vfio-pci vfio_iommu_type1 vfio_virqfd " --force # Instruct dracut to load the vfio drivers
-# dracut --force # Regenerate initramfs
-# Doesn't seem to work
-# dracut: Cannot find /usr/lib/dracut/dracut-init.sh.
-# dracut: Are you running from a git checkout?
-# dracut: Try passing -l as an argument to /mnt/sysimage/usr/bin/dracut
-
-# The following part seems useless too. No need to regenerate grub
-# grub2-mkconfig -o /mnt/sysimage/boot/grub2/grub.cfg # Update grub. Does it fail ? /usr/sbin/grub2-probe: error: failed to get canonical path of `LiveOS_rootfs'.
-
-%end # End of the %post section

blocks/bhi.cfg

@@ -1,38 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file configures an hypervisor for Intel(tm) CPUs and Intel(tm) graphic cards
-# 'b' for basic building block, 'h' for hypervisor', 'i' for intel
-
-# This is NOT a standalone kickstart file
-
-%post --nochroot --log=/mnt/sysimage/root/bhi.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installtion troubleshooting
-
-sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub # Load kernel modules in grub.
-
-# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
-echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
-echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
-echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
-echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
-echo "kvmgt" > /mnt/sysimage/etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-echo "vfio-mdev" > /mnt/sysimage/etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-
-echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested-virtualization
-
-# The following part seems useless
-# dracut --add-drivers " vfio vfio-pci vfio_iommu_type1 vfio_virqfd vfio-mdev kvmgt " --force # Instruct dracut to load the vfio drivers
-# dracut --force # Regenerate initramfs
-# Doesn't seem to work
-# dracut: Cannot find /usr/lib/dracut/dracut-init.sh.
-# dracut: Are you running from a git checkout?
-# dracut: Try passing -l as an argument to /mnt/sysimage/usr/bin/dracut
-
-# The following part seems useless too. No need to regenerate grub
-# grub2-mkconfig -o /mnt/sysimage/boot/grub2/grub.cfg # Update grub. Does it fail ? /usr/sbin/grub2-probe: error: failed to get canonical path of `LiveOS_rootfs'.
-
-%end # End of the %post sectionsud

blocks/bnd.cfg

@@ -1,106 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file itents to provide a basic block small than the minimal operating system.
-# 'b' for basic building block, 'n' for nano, 'd' for development only.
-
-# This is NOT a standalone kickstart file.
-
-# ATTENTION : this kickstart file will automatically DESTROY the main disk and all of its contents. 
-# Bye bye
-
-# NOTE : it currently fails
-
-# cmdline # Perform the full installation in real text mode see here https://wiki.centos.org/TipsAndTricks/KickStart
-text # Perform installation in text mode
-
-# Installation method. For cdrom, replace repo and url with cdrom
-repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora mirror
-repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch # Official Fedora updates mirror
-url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora updates mirror
-
-keyboard --xlayouts='ch (fr)' # set keyboard layouts for Romandie
-lang en_US.UTF-8 # Set system language to American English. More languages could be supported: --addsupport=cs_CZ,de_DE,en_UK
-timezone Europe/Paris --utc # Set system timezone to Paris
-
-rootpw --lock --iscrypted locked # Lock the root account
-
-selinux --enforcing # Make sure SELinux is in enforced mode  
-firewall --enabled --service=mdns # Make sure the firewall is enabled
-services --enabled=NetworkManager,libvirtd --disabled=sshd
-network  --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network interfaces and set hostname. "link" selects the first device reaching an up state 
-
-zerombr # WARNING : Dangerous command ! Will clear the Master Boot Record
-clearpart --all --initlabel # Partition clearing information. This setup uses GPT by default.
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi # Will create an efi partitition of 128 MiB (vda1)
-part /boot --fstype="ext4" --size=384 --label=boot # Create a boot partition of 384 MiB using the ext4 filesystem (vda2).
-part / --fstype="ext4" --grow --label=root # The remaining space will be used for root (vda3).
-bootloader --timeout=1 # Set the GNU GRUB bootloader timeout to 1.
-
-# reboot --kexec # Reboot the system after the installation is successfully completed
-# firstboot --enable --reconfig # Initial Setup will start after the first reboot
-
-%packages --excludedocs --nocore --exclude-weakdeps
-
-kernel # The Linux kernel
-bash # "The GNU Bourne Again shell"
-filesystem # "The basic directory layout for a Linux system"
-rpm # "The RPM package management system"
-dnf # "Package manager"
-util-linux # 
-coreutils # Core GNU utilities
-systemd # System and Service Manager
-glibc-minimal-langpack # "Minimal language packs for glibc"
-grubby # "Command line tool for updating bootloader configs"
-grub2-efi-x64 # "GRUB for EFI systems"
-qemu-guest-agent # "QEMU guest agent"
-spice-vdagent # "Agent for Spice guests"
-pciutils # Pciutils provides lspci commandline tool and is not installed by default
-basesystem
-curl
-dhcp-client
-dnf
-filesystem
-glibc
-grubby
-hostname
-iproute
-iputils
-kbd
-less
-man-db
-ncurses
-passwd
-policycoreutils
-procps-ng
-rootfiles
-rpm
-selinux-policy-targeted
-setup
-shadow-utils
-sudo
-systemd
-util-linux
-vim-minimal
-yum
--fedora-release # Fedora release-notes
--fedora-release-common # Fedora release files
--fedora-release-identity-basic # ???
-fedora-remix-logos # Install Fedora remix logos
-generic-release # "Generic release files"
-generic-release-common # "Generic release files"
-generic-release-notes # "Release Notes"
-
-%end # End of the packages section
-
-%post --log=/root/bnd.log # Beginning of the post-installation section. Add logging.
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
-
-%end # End of the %post section

blocks/d.cfg

@@ -1,36 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a desktop machine. 
-# 'd' for desktop
-
-# ATTENTION : this kickstart file will automatically DESTROY the main disk and all of its contents. 
-# Bye bye!
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c d.cfg -o ../leaves/flat-d.cfg
-
-%include b.cfg # A base system
-%include bd.cfg # A desktop environment
-
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-gnome-initial-setup # Add GNOME initial setup too.
-
-%end # End of the %post section
-
-%post --nochroot --log=/mnt/sysimage/root/d.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-# set new default background (doesn't work. Would have to call a script on first boot or something)
-# gsettings set org.gnome.desktop.background picture-uri file://mnt/sysimage/usr/share/backgrounds/elementary/default
-
-%end # End of the %post section

blocks/dh.cfg

@@ -1,43 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a desktop hypervisor.
-# 'd' for desktop, 'h' for hypervisor
-
-# ATTENTION : this kickstart file will automatically DESTROY the main disk and all of its contents. 
-# Bye bye!
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c dh.cfg -o ../leaves/flat-dh.cfg
-
-%include b.cfg # A minimal machine
-%include bd.cfg # A desktop environment
-%include bh.cfg # A base hypervisor
-
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-virt-manager # Install virt-manager, the graphical front-end for QEMU/KVM
-gnome-initial-setup # Add GNOME initial setup too to let user create local account.
-
-%end # End of the packages section
-
-%post --nochroot --log=/mnt/sysimage/root/dh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-# Create a file to autostart virt-manager
-cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-%end # End of the %post section

blocks/dha.cfg

@@ -1,44 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a desktop hypervisor configured for AMD (tm) CPUs.
-# 'd' for desktop, 'h' for hypervisor', 'a' for amd
-
-# ATTENTION : this kickstart file will automatically DESTROY the main disk and all of its contents. 
-# Bye bye!
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c dha.cfg -o ../leaves/flat-dha.cfg
-
-%include b.cfg # A minimal machine
-%include bd.cfg # A desktop environment
-%include bh.cfg # A base hypervisor
-%include bha.cfg # Specific virtualization configuration for AMD (tm) CPUs
-
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-virt-manager # Install virt-manager, the graphical front-end for QEMU/KVM
-gnome-initial-setup # Add GNOME initial setup too to let user create local account.
-
-%end # End of the packages section
-
-%post --nochroot --log=/mnt/sysimage/root/dha.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-# Create a file to autostart virt-manager
-cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-%end # End of the %post section

blocks/dhi.cfg

@@ -1,52 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file bootstraps a desktop hypervisor configured for Intel(tm) CPU and Intel(tm) graphic cards.
-# 'd' for desktop, 'h' for hypervisor', 'i' for intel
-
-# ATTENTION : this kickstart file will automatically DESTROY the main disk and all of its contents. 
-# Bye bye!
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c dhi.cfg -o ../leaves/flat-dhi.cfg
-
-%include b.cfg # A minimal machine
-%include bd.cfg # A desktop environment
-%include bh.cfg # A base hypervisor
-%include bhi.cfg # Specific virtualization configuration for Intel(tm) CPU and Intel(tm) graphic cards
-
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-virt-manager # Install virt-manager, the graphical front-end for QEMU/KVM
-gnome-initial-setup # Add GNOME initial setup too to let user create local account.
-
-%end # End of the packages section
-
-%post --nochroot --log=/mnt/sysimage/root/dhi.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-# Create a file to autostart virt-manager
-cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-## Append lines to existing vendor.conf file, so that options are skipped upon reboot
-cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
-[pages]
-skip=privacy
-[goa]
-providers=local-first!
-EOF
-
-%end # End of the %post section

blocks/n.cfg

@@ -1,20 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-
-# What ? This kickstart file itents to provide a basic block small than the minimal operating system.
-# 'n' for nano, 'd' for development only.
-
-%include bnd.cfg # A base system
-
-firstboot --enable --reconfig # Initial Setup will start after the first reboot
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-initial-setup # Install the initial setup package.
-
-%end # End of the packages section

blocks/s.cfg

@@ -1,24 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-#
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented system.
-# 's' for server
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c s.cfg -o ../leaves/flat-s.cfg
-
-%include b.cfg # A base system
-
-firstboot --enable --reconfig # Initial Setup will start after the first reboot
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-initial-setup # Install the initial setup package.
-
-%end # End of the packages section

blocks/sh.cfg

@@ -1,25 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-#
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented system with a hypervisor.
-# 's' for server, 'h' for hypervisor
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c sh.cfg -o ../leaves/flat-sh.cfg
-
-%include b.cfg # A base system
-%include bh.cfg # A base hypervisor
-
-firstboot --enable --reconfig # Initial Setup will start after the first reboot
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-initial-setup # Install the initial setup package.
-
-%end # End of the packages section

blocks/sha.cfg

@@ -1,26 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-#
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented system with a hypervisor optimized for AMD (tm) CPUs
-# 's' for server, 'h' for hypervisor', 'a' for amd
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c sha.cfg -o ../leaves/flat-sha.cfg
-
-%include b.cfg # Include a base system
-%include bh.cfg # A base hypervisor
-%include bha.cfg # Specific virtualization tweaks for AMD (tm) CPUs
-
-firstboot --enable --reconfig # Initial Setup will start after the first reboot
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-initial-setup # Install the initial setup package.
-
-%end # End of the packages section

blocks/shi.cfg

@@ -1,26 +0,0 @@
-#            __          ____                        ____  _____
-#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
-#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
-#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
-#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
-# /_/          /____/
-#
-# What ? When flattened, this file will result in a stand-alone kickstart file that can be automatically deploy into a server-oriented system with a hypervisor optimized for Intel (tm) CPUs
-# 's' for server, 'h' for hypervisor', 'i' for intel
-
-# In order to be fed to virt-install or software like livecd-creator, this file needs to be flatten or merged into one.
-# Here is how you can do it with the ksflatten tool provided by the pykickstart package on Fedora :
-# ksflatten -c shi.cfg -o ../leaves/flat-shi.cfg
-
-%include b.cfg # Include a base system
-%include bh.cfg # A base hypervisor
-%include bhi.cfg # Specific virtualization tweaks for Intel(tm) CPU and Intel(tm) graphic cards
-
-firstboot --enable --reconfig # Initial Setup will start after the first reboot
-reboot --kexec # Reboot straight into the system after a successfull installation
-
-%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
-
-initial-setup # Install the initial setup package.
-
-%end # End of the packages section

deploy-vm.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+
+# Function to execute a script
+execute_script() {
+  local script_to_execute="$1"
+  echo "Executing: $script_to_execute"
+  "$script_to_execute" || {
+    echo "Script failed: $script_to_execute"
+    return 1  # Indicate failure
+  }
+  return 0  # Indicate success
+}
+
+# Array of scripts
+scripts=(
+  "./scripts/core-count.sh"
+  "./scripts/system-memory.sh"
+  "./scripts/deploy-distro.sh"
+)
+
+# Iterate through the scripts and execute them
+for script in "${scripts[@]}"; do
+  execute_script "$script"
+done
+
+echo "All scripts executed."

dishes/desktop-hypervisor-amdcpu.cfg

@@ -0,0 +1,331 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log
+
+# Create a file to autostart virt-manager
+cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
+[Desktop Entry]
+Type=Application
+Name=Virtual Machine Manager
+Exec=virt-manager
+EOF
+
+# Modify the default virt-manager behavior for misc. options
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
+
+# Modify the default virt-manager behavior for misc. options
+[org.virt-manager.virt-manager]
+xmleditor-enabled=true
+manager-window-height=600
+manager-window-width=200
+
+# Libvirt URIs listed in the manager window
+[org.virt-manager.virt-manager.connections]
+uris=['qemu:///system', 'qemu:///session']
+autoconnect=['qemu:///session']
+
+# Show usage in the domain list
+[org.virt-manager.virt-manager.vmlist-fields]
+cpu-usage=false
+
+# Settings related to statistics
+[org.virt-manager.virt-manager.stats]
+update-interval=3
+enable-disk-poll=true
+enable-memory-poll=true
+enable-net-poll=true
+
+# Default behavior for the console
+[org.virt-manager.virt-manager.console]
+scaling=2
+resize-guest=1
+autoconnect=false
+
+# Do not show toolbar
+[org.virt-manager.virt-manager.details]
+show-toolbar=false
+
+# Modify default values for new VMs
+[org.virt-manager.virt-manager.new-vm]
+storage-format='raw'
+cpu-default='host-model'
+graphics-type='spice'
+
+# Modify the default virt-manager behavior for confirmation dialogues
+[org.virt-manager.virt-manager.confirm]
+forcepoweroff=false
+removedev=false
+unapplied-dev=false
+
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor-amdcpu.log
+
+sed -i 's/\(quiet\)/\1 iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB. 
+
+echo "options kvm_amd nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested virtualization
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+guestfs-tools
+hostname
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+less
+libertas-firmware
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-kvm
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-manager
+virt-top
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/desktop-hypervisor-intelcpu-intelgpu.cfg

@@ -0,0 +1,341 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log
+
+# Create a file to autostart virt-manager
+cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
+[Desktop Entry]
+Type=Application
+Name=Virtual Machine Manager
+Exec=virt-manager
+EOF
+
+# Modify the default virt-manager behavior for misc. options
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
+
+# Modify the default virt-manager behavior for misc. options
+[org.virt-manager.virt-manager]
+xmleditor-enabled=true
+manager-window-height=600
+manager-window-width=200
+
+# Libvirt URIs listed in the manager window
+[org.virt-manager.virt-manager.connections]
+uris=['qemu:///system', 'qemu:///session']
+autoconnect=['qemu:///session']
+
+# Show usage in the domain list
+[org.virt-manager.virt-manager.vmlist-fields]
+cpu-usage=false
+
+# Settings related to statistics
+[org.virt-manager.virt-manager.stats]
+update-interval=3
+enable-disk-poll=true
+enable-memory-poll=true
+enable-net-poll=true
+
+# Default behavior for the console
+[org.virt-manager.virt-manager.console]
+scaling=2
+resize-guest=1
+autoconnect=false
+
+# Do not show toolbar
+[org.virt-manager.virt-manager.details]
+show-toolbar=false
+
+# Modify default values for new VMs
+[org.virt-manager.virt-manager.new-vm]
+storage-format='raw'
+cpu-default='host-model'
+graphics-type='spice'
+
+# Modify the default virt-manager behavior for confirmation dialogues
+[org.virt-manager.virt-manager.confirm]
+forcepoweroff=false
+removedev=false
+unapplied-dev=false
+
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor-intelcpu.log
+
+sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB.
+
+echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested virtualization on Intel CPUs
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor-intelgpu.log
+
+sed -i 's/\(vfio-pci\)/\1 i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub # Load kernel modules in grub.
+
+# Load extra kernel modules to enable vfio-mdev on selected hardware
+echo "kvmgt" > /mnt/sysimage/etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
+echo "vfio-mdev" > /mnt/sysimage/etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+guestfs-tools
+hostname
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+less
+libertas-firmware
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-kvm
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-manager
+virt-top
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/desktop-hypervisor-intelcpu.cfg

@@ -0,0 +1,331 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log
+
+# Create a file to autostart virt-manager
+cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
+[Desktop Entry]
+Type=Application
+Name=Virtual Machine Manager
+Exec=virt-manager
+EOF
+
+# Modify the default virt-manager behavior for misc. options
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
+
+# Modify the default virt-manager behavior for misc. options
+[org.virt-manager.virt-manager]
+xmleditor-enabled=true
+manager-window-height=600
+manager-window-width=200
+
+# Libvirt URIs listed in the manager window
+[org.virt-manager.virt-manager.connections]
+uris=['qemu:///system', 'qemu:///session']
+autoconnect=['qemu:///session']
+
+# Show usage in the domain list
+[org.virt-manager.virt-manager.vmlist-fields]
+cpu-usage=false
+
+# Settings related to statistics
+[org.virt-manager.virt-manager.stats]
+update-interval=3
+enable-disk-poll=true
+enable-memory-poll=true
+enable-net-poll=true
+
+# Default behavior for the console
+[org.virt-manager.virt-manager.console]
+scaling=2
+resize-guest=1
+autoconnect=false
+
+# Do not show toolbar
+[org.virt-manager.virt-manager.details]
+show-toolbar=false
+
+# Modify default values for new VMs
+[org.virt-manager.virt-manager.new-vm]
+storage-format='raw'
+cpu-default='host-model'
+graphics-type='spice'
+
+# Modify the default virt-manager behavior for confirmation dialogues
+[org.virt-manager.virt-manager.confirm]
+forcepoweroff=false
+removedev=false
+unapplied-dev=false
+
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor-intelcpu.log
+
+sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB.
+
+echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested virtualization on Intel CPUs
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+guestfs-tools
+hostname
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+less
+libertas-firmware
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-kvm
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-manager
+virt-top
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/desktop-hypervisor.cfg

@@ -0,0 +1,323 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log
+
+# Create a file to autostart virt-manager
+cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
+[Desktop Entry]
+Type=Application
+Name=Virtual Machine Manager
+Exec=virt-manager
+EOF
+
+# Modify the default virt-manager behavior for misc. options
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
+
+# Modify the default virt-manager behavior for misc. options
+[org.virt-manager.virt-manager]
+xmleditor-enabled=true
+manager-window-height=600
+manager-window-width=200
+
+# Libvirt URIs listed in the manager window
+[org.virt-manager.virt-manager.connections]
+uris=['qemu:///system', 'qemu:///session']
+autoconnect=['qemu:///session']
+
+# Show usage in the domain list
+[org.virt-manager.virt-manager.vmlist-fields]
+cpu-usage=false
+
+# Settings related to statistics
+[org.virt-manager.virt-manager.stats]
+update-interval=3
+enable-disk-poll=true
+enable-memory-poll=true
+enable-net-poll=true
+
+# Default behavior for the console
+[org.virt-manager.virt-manager.console]
+scaling=2
+resize-guest=1
+autoconnect=false
+
+# Do not show toolbar
+[org.virt-manager.virt-manager.details]
+show-toolbar=false
+
+# Modify default values for new VMs
+[org.virt-manager.virt-manager.new-vm]
+storage-format='raw'
+cpu-default='host-model'
+graphics-type='spice'
+
+# Modify the default virt-manager behavior for confirmation dialogues
+[org.virt-manager.virt-manager.confirm]
+forcepoweroff=false
+removedev=false
+unapplied-dev=false
+
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+guestfs-tools
+hostname
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+less
+libertas-firmware
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-kvm
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-manager
+virt-top
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/desktop.cfg

@@ -0,0 +1,220 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+hostname
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+less
+libertas-firmware
+libusb
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/live-desktop-hypervisor.cfg

@@ -0,0 +1,386 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=none --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part / --fstype="ext4" --size=5120
+part / --size=8576
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-core.log
+
+# Enable livesys services
+systemctl enable livesys.service
+systemctl enable livesys-late.service
+
+# enable tmpfs for /tmp
+systemctl enable tmp.mount
+
+# make it so that we don't do writing to the overlay for things which
+# are just tmpdirs/caches
+# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
+cat >> /etc/fstab << EOF
+vartmp   /var/tmp    tmpfs   defaults   0  0
+EOF
+
+# work around for poor key import UI in PackageKit
+rm -f /var/lib/rpm/__db*
+echo "Packages within this LiveCD"
+rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
+# Note that running rpm recreates the rpm db files which aren't needed or wanted
+rm -f /var/lib/rpm/__db*
+
+# go ahead and pre-make the man -k cache (#455968)
+/usr/bin/mandb
+
+# make sure there aren't core files lying around
+rm -f /core*
+
+# remove random seed, the newly installed instance should make it's own
+rm -f /var/lib/systemd/random-seed
+
+# convince readahead not to collect
+# FIXME: for systemd
+
+echo 'File created by kickstart. See systemd-update-done.service(8).' \
+    | tee /etc/.updated >/var/.updated
+
+# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
+# See bug 1317709
+rm -f /boot/*-rescue*
+
+# Disable network service here, as doing it in the services line
+# fails due to RHBZ #1369794
+systemctl disable network
+
+# Remove machine-id on pre generated images
+rm -f /etc/machine-id
+touch /etc/machine-id
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-session.log
+
+# set livesys session type
+sed -i 's/^livesys_session=.*/livesys_session="gnome"/' /etc/sysconfig/livesys
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log
+
+# Create a file to autostart virt-manager
+cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
+[Desktop Entry]
+Type=Application
+Name=Virtual Machine Manager
+Exec=virt-manager
+EOF
+
+# Modify the default virt-manager behavior for misc. options
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
+
+# Modify the default virt-manager behavior for misc. options
+[org.virt-manager.virt-manager]
+xmleditor-enabled=true
+manager-window-height=600
+manager-window-width=200
+
+# Libvirt URIs listed in the manager window
+[org.virt-manager.virt-manager.connections]
+uris=['qemu:///system', 'qemu:///session']
+autoconnect=['qemu:///session']
+
+# Show usage in the domain list
+[org.virt-manager.virt-manager.vmlist-fields]
+cpu-usage=false
+
+# Settings related to statistics
+[org.virt-manager.virt-manager.stats]
+update-interval=3
+enable-disk-poll=true
+enable-memory-poll=true
+enable-net-poll=true
+
+# Default behavior for the console
+[org.virt-manager.virt-manager.console]
+scaling=2
+resize-guest=1
+autoconnect=false
+
+# Do not show toolbar
+[org.virt-manager.virt-manager.details]
+show-toolbar=false
+
+# Modify default values for new VMs
+[org.virt-manager.virt-manager.new-vm]
+storage-format='raw'
+cpu-default='host-model'
+graphics-type='spice'
+
+# Modify the default virt-manager behavior for confirmation dialogues
+[org.virt-manager.virt-manager.confirm]
+forcepoweroff=false
+removedev=false
+unapplied-dev=false
+
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%packages --exclude-weakdeps
+@anaconda-tools
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+aajohan-comfortaa-fonts
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+dracut-live
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+glibc-all-langpacks
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+guestfs-tools
+hostname
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+kernel-modules
+kernel-modules-extra
+less
+libertas-firmware
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+livesys-scripts
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-kvm
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-manager
+virt-top
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/live-desktop.cfg

@@ -0,0 +1,283 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=none --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part / --fstype="ext4" --size=5120
+part / --size=8576
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-core.log
+
+# Enable livesys services
+systemctl enable livesys.service
+systemctl enable livesys-late.service
+
+# enable tmpfs for /tmp
+systemctl enable tmp.mount
+
+# make it so that we don't do writing to the overlay for things which
+# are just tmpdirs/caches
+# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
+cat >> /etc/fstab << EOF
+vartmp   /var/tmp    tmpfs   defaults   0  0
+EOF
+
+# work around for poor key import UI in PackageKit
+rm -f /var/lib/rpm/__db*
+echo "Packages within this LiveCD"
+rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
+# Note that running rpm recreates the rpm db files which aren't needed or wanted
+rm -f /var/lib/rpm/__db*
+
+# go ahead and pre-make the man -k cache (#455968)
+/usr/bin/mandb
+
+# make sure there aren't core files lying around
+rm -f /core*
+
+# remove random seed, the newly installed instance should make it's own
+rm -f /var/lib/systemd/random-seed
+
+# convince readahead not to collect
+# FIXME: for systemd
+
+echo 'File created by kickstart. See systemd-update-done.service(8).' \
+    | tee /etc/.updated >/var/.updated
+
+# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
+# See bug 1317709
+rm -f /boot/*-rescue*
+
+# Disable network service here, as doing it in the services line
+# fails due to RHBZ #1369794
+systemctl disable network
+
+# Remove machine-id on pre generated images
+rm -f /etc/machine-id
+touch /etc/machine-id
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-session.log
+
+# set livesys session type
+sed -i 's/^livesys_session=.*/livesys_session="gnome"/' /etc/sysconfig/livesys
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+@anaconda-tools
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+aajohan-comfortaa-fonts
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+dracut-live
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+glibc-all-langpacks
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+hostname
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+kernel-modules
+kernel-modules-extra
+less
+libertas-firmware
+libusb
+livesys-scripts
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/live-server-hypervisor.cfg

@@ -0,0 +1,227 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# System bootloader configuration
+bootloader --location=none --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part / --fstype="ext4" --size=5120
+part / --size=8576
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-core.log
+
+# Enable livesys services
+systemctl enable livesys.service
+systemctl enable livesys-late.service
+
+# enable tmpfs for /tmp
+systemctl enable tmp.mount
+
+# make it so that we don't do writing to the overlay for things which
+# are just tmpdirs/caches
+# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
+cat >> /etc/fstab << EOF
+vartmp   /var/tmp    tmpfs   defaults   0  0
+EOF
+
+# work around for poor key import UI in PackageKit
+rm -f /var/lib/rpm/__db*
+echo "Packages within this LiveCD"
+rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
+# Note that running rpm recreates the rpm db files which aren't needed or wanted
+rm -f /var/lib/rpm/__db*
+
+# go ahead and pre-make the man -k cache (#455968)
+/usr/bin/mandb
+
+# make sure there aren't core files lying around
+rm -f /core*
+
+# remove random seed, the newly installed instance should make it's own
+rm -f /var/lib/systemd/random-seed
+
+# convince readahead not to collect
+# FIXME: for systemd
+
+echo 'File created by kickstart. See systemd-update-done.service(8).' \
+    | tee /etc/.updated >/var/.updated
+
+# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
+# See bug 1317709
+rm -f /boot/*-rescue*
+
+# Disable network service here, as doing it in the services line
+# fails due to RHBZ #1369794
+systemctl disable network
+
+# Remove machine-id on pre generated images
+rm -f /etc/machine-id
+touch /etc/machine-id
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-session.log
+
+# set livesys session type
+sed -i 's/^livesys_session=.*/livesys_session="gnome"/' /etc/sysconfig/livesys
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%packages --exclude-weakdeps
+@anaconda-tools
+NetworkManager
+NetworkManager-config-connectivity-fedora
+aajohan-comfortaa-fonts
+alsa-sof-firmware
+amd-gpu-firmware
+atheros-firmware
+audit
+b43-fwcutter
+b43-openfwwf
+basesystem
+bash
+brcmfmac-firmware
+cirrus-audio-firmware
+coreutils
+curl
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+dracut-live
+e2fsprogs
+fedora-remix-logos
+filesystem
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+glibc-all-langpacks
+guestfs-tools
+hostname
+initial-setup
+intel-audio-firmware
+intel-gpu-firmware
+intel-vsc-firmware
+iproute
+iputils
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
+kbd
+kernel
+kernel-modules
+kernel-modules-extra
+less
+libertas-firmware
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+livesys-scripts
+man-db
+mt7xxx-firmware
+nano
+ncurses
+nvidia-gpu-firmware
+nxpwireless-firmware
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-kvm
+realtek-firmware
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+tiwilink-firmware
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-top
+wget
+zram-generator-defaults
+
+%end

dishes/live-server.cfg

@@ -0,0 +1,169 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# System bootloader configuration
+bootloader --location=none --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part / --fstype="ext4" --size=5120
+part / --size=8576
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-core.log
+
+# Enable livesys services
+systemctl enable livesys.service
+systemctl enable livesys-late.service
+
+# enable tmpfs for /tmp
+systemctl enable tmp.mount
+
+# make it so that we don't do writing to the overlay for things which
+# are just tmpdirs/caches
+# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
+cat >> /etc/fstab << EOF
+vartmp   /var/tmp    tmpfs   defaults   0  0
+EOF
+
+# work around for poor key import UI in PackageKit
+rm -f /var/lib/rpm/__db*
+echo "Packages within this LiveCD"
+rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
+# Note that running rpm recreates the rpm db files which aren't needed or wanted
+rm -f /var/lib/rpm/__db*
+
+# go ahead and pre-make the man -k cache (#455968)
+/usr/bin/mandb
+
+# make sure there aren't core files lying around
+rm -f /core*
+
+# remove random seed, the newly installed instance should make it's own
+rm -f /var/lib/systemd/random-seed
+
+# convince readahead not to collect
+# FIXME: for systemd
+
+echo 'File created by kickstart. See systemd-update-done.service(8).' \
+    | tee /etc/.updated >/var/.updated
+
+# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
+# See bug 1317709
+rm -f /boot/*-rescue*
+
+# Disable network service here, as doing it in the services line
+# fails due to RHBZ #1369794
+systemctl disable network
+
+# Remove machine-id on pre generated images
+rm -f /etc/machine-id
+touch /etc/machine-id
+
+%end
+
+%post --logfile=/mnt/sysimage/root/post-live-session.log
+
+# set livesys session type
+sed -i 's/^livesys_session=.*/livesys_session="gnome"/' /etc/sysconfig/livesys
+
+%end
+
+%packages --exclude-weakdeps
+@anaconda-tools
+NetworkManager
+NetworkManager-config-connectivity-fedora
+aajohan-comfortaa-fonts
+audit
+basesystem
+bash
+coreutils
+curl
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+dracut-live
+e2fsprogs
+fedora-remix-logos
+filesystem
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+glibc-all-langpacks
+hostname
+initial-setup
+iproute
+iputils
+kbd
+kernel
+kernel-modules
+kernel-modules-extra
+less
+libusb
+livesys-scripts
+man-db
+nano
+ncurses
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+usbutils
+util-linux
+vim-minimal
+wget
+zram-generator-defaults
+
+%end

dishes/virtual-desktop-hypervisor.cfg

@@ -0,0 +1,306 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log
+
+# Create a file to autostart virt-manager
+cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
+[Desktop Entry]
+Type=Application
+Name=Virtual Machine Manager
+Exec=virt-manager
+EOF
+
+# Modify the default virt-manager behavior for misc. options
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
+
+# Modify the default virt-manager behavior for misc. options
+[org.virt-manager.virt-manager]
+xmleditor-enabled=true
+manager-window-height=600
+manager-window-width=200
+
+# Libvirt URIs listed in the manager window
+[org.virt-manager.virt-manager.connections]
+uris=['qemu:///system', 'qemu:///session']
+autoconnect=['qemu:///session']
+
+# Show usage in the domain list
+[org.virt-manager.virt-manager.vmlist-fields]
+cpu-usage=false
+
+# Settings related to statistics
+[org.virt-manager.virt-manager.stats]
+update-interval=3
+enable-disk-poll=true
+enable-memory-poll=true
+enable-net-poll=true
+
+# Default behavior for the console
+[org.virt-manager.virt-manager.console]
+scaling=2
+resize-guest=1
+autoconnect=false
+
+# Do not show toolbar
+[org.virt-manager.virt-manager.details]
+show-toolbar=false
+
+# Modify default values for new VMs
+[org.virt-manager.virt-manager.new-vm]
+storage-format='raw'
+cpu-default='host-model'
+graphics-type='spice'
+
+# Modify the default virt-manager behavior for confirmation dialogues
+[org.virt-manager.virt-manager.confirm]
+forcepoweroff=false
+removedev=false
+unapplied-dev=false
+
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+audit
+basesystem
+bash
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+guestfs-tools
+hostname
+iproute
+iputils
+kbd
+kernel
+less
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+nano
+ncurses
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-guest-agent
+qemu-kvm
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+spice-vdagent
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-manager
+virt-top
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/virtual-desktop.cfg

@@ -0,0 +1,203 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# X Window System configuration information
+xconfig  --defaultdesktop=GNOME --startxonboot
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-initial-setup-gnome.log
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-desktop-gnome.log
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+NetworkManager-wifi
+audit
+basesystem
+bash
+coreutils
+curl
+dejavu-sans-mono-fonts
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firefox
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+gnome-backgrounds.noarch
+gnome-initial-setup
+gnome-shell
+gnome-terminal
+hostname
+iproute
+iputils
+kbd
+kernel
+less
+libusb
+man-db
+mesa-dri-drivers
+mozilla-ublock-origin.noarch
+nano
+ncurses
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+qemu-guest-agent
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+spice-vdagent
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+usbutils
+util-linux
+vim-minimal
+wget
+wpa_supplicant
+zram-generator-defaults
+-gnome-tour
+
+%end

dishes/virtual-nano.cfg

@@ -1,69 +1,88 @@
-# Generated by pykickstart v3.34
+# Generated by pykickstart v3.62
 #version=DEVEL
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Reboot after installation
-reboot --kexec
 # Use text mode install
 text
-# Network information
-network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
 # Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
-# System timezone
-timezone Europe/Paris --utc
+firewall --disabled
 # Run the Setup Agent on first boot
 firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
 # SELinux configuration
-selinux --enforcing
+selinux --disabled
 # System services
-services --disabled="sshd" --enabled="NetworkManager,libvirtd"
+services --enabled="NetworkManager,systemd-resolved"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
 # System bootloader configuration
-bootloader --location=mbr --timeout=1
+bootloader --location=mbr --timeout=1 --sdboot
 # Clear the Master Boot Record
 zerombr
 # Partition clearing information
 clearpart --all --initlabel
 # Disk partitioning information
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=384 --label=boot
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
 part / --fstype="ext4" --grow --label=root
 
-%post --logfile=/root/b.log
+%post --logfile=/mnt/sysimage/root/post.log
 
 localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
 dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
 
 %end
 
 %packages --exclude-weakdeps
-@core
-@hardware-support
-fedora-remix-logos
-generic-logos
-generic-release
-generic-release-common
-generic-release-notes
+basesystem
+bash
+curl
+dhcp-client
+dnf5
+dracut
+filesystem
+glibc
+hostname
 initial-setup
-nano
-neofetch
-pciutils
+iproute
+iputils
+kbd
+kernel
+ncurses
+parted
+procps-ng
 qemu-guest-agent
+rootfiles
+rpm
+setup
+shadow-utils
 spice-vdagent
-wget
--fedora-logos
--fedora-release
--fedora-release-common
--fedora-release-identity-basic
--fedora-release-notes
+systemd
+util-linux
+-audit
+-coreutils
+-e2fsprogs
+-less
+-man-db
+-openssh-clients
+-openssh-server
+-policycoreutils
+-selinux-policy-targeted
+-sssd-common
+-sssd-kcm
+-sudo
+-vim-minimal
 
 %end

dishes/virtual-server-hypervisor.cfg

@@ -0,0 +1,147 @@
+# Generated by pykickstart v3.62
+#version=DEVEL
+# Use text mode install
+text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
+# Network information
+network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
+# Shutdown after installation
+shutdown
+repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved,libvirtd"
+# System timezone
+timezone Europe/Paris --utc
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# System bootloader configuration
+bootloader --location=mbr --timeout=1
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all --initlabel
+# Disk partitioning information
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
+part / --fstype="ext4" --grow --label=root
+
+%post --logfile=/mnt/sysimage/root/post.log
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end
+
+%post --nochroot --logfile=/mnt/sysimage/root/base-hypervisor.log
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end
+
+%packages --exclude-weakdeps
+NetworkManager
+NetworkManager-config-connectivity-fedora
+audit
+basesystem
+bash
+coreutils
+curl
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
+fedora-remix-logos
+filesystem
+firewalld
+fwupd
+generic-logos
+generic-release
+generic-release-common
+generic-release-notes
+glibc
+guestfs-tools
+hostname
+initial-setup
+iproute
+iputils
+kbd
+kernel
+less
+libguestfs-tools
+libusb
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+man-db
+nano
+ncurses
+openssh-clients
+openssh-server
+parted
+pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
+python3-libguestfs
+qemu-guest-agent
+qemu-kvm
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
+spice-vdagent
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+usbutils
+util-linux
+vim-minimal
+virt-install
+virt-top
+wget
+zram-generator-defaults
+
+%end

dishes/virtual-server.cfg

@@ -1,31 +1,31 @@
-# Generated by pykickstart v3.34
+# Generated by pykickstart v3.62
 #version=DEVEL
-# X Window System configuration information
-xconfig  --defaultdesktop=GNOME --startxonboot
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Reboot after installation
-reboot --kexec
 # Use text mode install
 text
+# Firewall configuration
+firewall --disabled
+# Run the Setup Agent on first boot
+firstboot --reconfig
+# Keyboard layouts
+keyboard --xlayouts='ch (fr)'
+# System language
+lang en_US.UTF-8
 # Network information
 network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
-# Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
+# Shutdown after installation
+shutdown
 repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
 repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+# Root password
+rootpw --iscrypted --lock locked
+# SELinux configuration
+selinux --disabled
+# System services
+services --enabled="NetworkManager,systemd-resolved"
 # System timezone
 timezone Europe/Paris --utc
-# SELinux configuration
-selinux --enforcing
-# System services
-services --disabled="sshd" --enabled="NetworkManager,libvirtd"
+# Use network installation
+url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
 # System bootloader configuration
 bootloader --location=mbr --timeout=1
 # Clear the Master Boot Record
@@ -33,52 +33,76 @@ zerombr
 # Partition clearing information
 clearpart --all --initlabel
 # Disk partitioning information
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=384 --label=boot
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi
+part /boot --fstype="ext4" --size=512 --label=boot
 part / --fstype="ext4" --grow --label=root
 
-%post --logfile=/root/b.log
+%post --logfile=/mnt/sysimage/root/post.log
 
 localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
 dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/d.log
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-# set new default background (doesn't work. Would have to call a script on first boot or something)
-# gsettings set org.gnome.desktop.background picture-uri file://mnt/sysimage/usr/share/backgrounds/elementary/default
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
 
 %end
 
 %packages --exclude-weakdeps
-@core
-@hardware-support
-dejavu-sans-mono-fonts
-elementary-wallpapers-gnome.noarch
+NetworkManager
+NetworkManager-config-connectivity-fedora
+audit
+basesystem
+bash
+coreutils
+curl
+dhcp-client
+dnf5
+dnf5-plugins
+dracut
+dracut-config-rescue
+e2fsprogs
 fedora-remix-logos
+filesystem
+firewalld
+fwupd
 generic-logos
 generic-release
 generic-release-common
 generic-release-notes
-gnome-initial-setup
-gnome-shell
-gnome-terminal
+glibc
+hostname
+initial-setup
+iproute
+iputils
+kbd
+kernel
+less
+libusb
+man-db
 nano
-neofetch
+ncurses
+openssh-clients
+openssh-server
+parted
 pciutils
+plymouth
+policycoreutils
+prefixdevname
+procps-ng
 qemu-guest-agent
+rootfiles
+rpm
+selinux-policy-targeted
+setup
+shadow-utils
 spice-vdagent
+sssd-common
+sssd-kcm
+sudo
+systemd
+systemd-resolved
+usbutils
+util-linux
+vim-minimal
 wget
-wpa_supplicant
--fedora-logos
--fedora-release
--fedora-release-common
--fedora-release-identity-basic
--fedora-release-notes
--gnome-tour
+zram-generator-defaults
 
 %end

ingredients/base-desktop-gnome.cfg

@@ -0,0 +1,85 @@
+xconfig --startxonboot --defaultdesktop=GNOME # Start the display session on boot. Although it says --startx, which seems to imply xorg, it is actually generic and thus works also with Wayland.
+
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak dependencies
+
+gnome-shell # the version 3 of the GNOME desktop environment, without any presintalled applications
+gnome-terminal # install the default terminal for GNOME Shell
+-gnome-tour # delete GNOME Tour so it doesn't automatically launch on boot 
+mesa-dri-drivers # add mesa drivers otherwise there is a blank screen when first booting a desktop-based kickstart without virtualization tools 
+dejavu-sans-mono-fonts # the gnome-shell package doesn't include much fonts by default, resulting in weird spacings in GNOME Terminal. GNOME Terminal unfortunately doesn't automatically pick this font 
+gnome-backgrounds.noarch # wallpapers from the GNOME project
+wpa_supplicant # WPA Supplicant for Linux. It is not packaged by default in GNOME Shell, but necessary to configure wireless networks using the Network Manager
+NetworkManager-wifi # Provides the plugin to manage Wireless networking within GNOME Shell
+firefox # Internet browser
+mozilla-ublock-origin.noarch # An efficient ad blocker for Firefox
+
+%end # End of the packagages section
+
+%post --nochroot --log=/mnt/sysimage/root/base-desktop-gnome.log # Beginning of %post section. Those commands are executed outside the chroot environment
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.media-handling.gschema.override<< EOF
+[org.gnome.desktop.media-handling]
+automount-open=false
+autorun-never=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.Terminal.gschema.override<< EOF
+[org.gnome.Terminal.Legacy.Profile]
+font='DejaVu Sans Mono 12'
+use-system-font=false
+audible-bell=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.wm.preferences.gschema.override<< EOF
+[org.gnome.desktop.wm.preferences]
+button-layout=':minimize,maximize,close'
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.a11y.gschema.override<< EOF
+[org.gnome.desktop.a11y]
+always-show-universal-access-status=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.interface.gschema.override<< EOF
+[org.gnome.desktop.interface]
+enable-animations=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.privacy.gschema.override<< EOF
+[org.gnome.desktop.privacy]
+remove-old-temp-files=true
+remember-recent-files=false
+remember-app-usage=false
+disable-camera=true
+disable-microphone=true
+disable-sound-output=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.search-providers.gschema.override<< EOF
+[org.gnome.desktop.search-providers]
+disable-external=true
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.notifications.gschema.override<< EOF
+[org.gnome.desktop.notifications.application]
+enable-sound-alerts=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.sound.gschema.override<< EOF
+[org.gnome.desktop.sound]
+event-sounds=false
+EOF
+
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.thumbnailers.gschema.override<< EOF
+[org.gnome.desktop.thumbnailers]
+disable-all=true
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end # End of the %post section

ingredients/base-desktop-virtual-machine-manager.cfg

@@ -0,0 +1,68 @@
+%packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies
+
+virt-manager # Install virt-manager, a graphical front-end for QEMU/KVM
+
+%end
+
+%post --nochroot --log=/mnt/sysimage/root/base-desktop-gnome-virtual-machine-manager.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
+
+# Create a file to autostart virt-manager
+cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
+[Desktop Entry]
+Type=Application
+Name=Virtual Machine Manager
+Exec=virt-manager
+EOF
+
+# Modify the default virt-manager behavior for misc. options
+cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.virt-manager.virt-manager.gschema.override<< EOF
+
+# Modify the default virt-manager behavior for misc. options
+[org.virt-manager.virt-manager]
+xmleditor-enabled=true
+manager-window-height=600
+manager-window-width=200
+
+# Libvirt URIs listed in the manager window
+[org.virt-manager.virt-manager.connections]
+uris=['qemu:///system', 'qemu:///session']
+autoconnect=['qemu:///session']
+
+# Show usage in the domain list
+[org.virt-manager.virt-manager.vmlist-fields]
+cpu-usage=false
+
+# Settings related to statistics
+[org.virt-manager.virt-manager.stats]
+update-interval=3
+enable-disk-poll=true
+enable-memory-poll=true
+enable-net-poll=true
+
+# Default behavior for the console
+[org.virt-manager.virt-manager.console]
+scaling=2
+resize-guest=1
+autoconnect=false
+
+# Do not show toolbar
+[org.virt-manager.virt-manager.details]
+show-toolbar=false
+
+# Modify default values for new VMs
+[org.virt-manager.virt-manager.new-vm]
+storage-format='raw'
+cpu-default='host-model'
+graphics-type='spice'
+
+# Modify the default virt-manager behavior for confirmation dialogues
+[org.virt-manager.virt-manager.confirm]
+forcepoweroff=false
+removedev=false
+unapplied-dev=false
+
+EOF
+
+glib-compile-schemas /mnt/sysimage/usr/share/glib-2.0/schemas/
+
+%end # End of the %post section

ingredients/base-guest-agents.cfg

@@ -0,0 +1,6 @@
+%packages --exclude-weakdeps # Beginning of the packages section. Does not include weak dependencies.
+
+qemu-guest-agent # "QEMU guest agent" The qemu-guest agent is unnecessary for a bare-metal system. However, it is included here to cover cases where this kickstart file is used to deploy a virtual machine 
+spice-vdagent # "Agent for Spice guests" The spice agent is unnecessary for a bare-metal system. However, it is included here to cover cases where this kickstart file is used to deploy a virtual machine 
+
+%end # End of the packages section

ingredients/base-hypervisor-amdcpu.cfg

@@ -0,0 +1,7 @@
+%post --nochroot --log=/mnt/sysimage/root/base-hypervisor-amdcpu.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
+
+sed -i 's/\(quiet\)/\1 iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB. 
+
+echo "options kvm_amd nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested virtualization
+
+%end # End of the %post section

ingredients/base-hypervisor-intelcpu.cfg

@@ -0,0 +1,7 @@
+%post --nochroot --log=/mnt/sysimage/root/base-hypervisor-intelcpu.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
+
+sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci/i' /mnt/sysimage/etc/default/grub # Load kernel modules in GRUB.
+
+echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested virtualization on Intel CPUs
+
+%end # End of the %post section

ingredients/base-hypervisor-intelgpu.cfg

@@ -0,0 +1,9 @@
+%post --nochroot --log=/mnt/sysimage/root/base-hypervisor-intelgpu.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installtion troubleshooting
+
+sed -i 's/\(vfio-pci\)/\1 i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub # Load kernel modules in grub.
+
+# Load extra kernel modules to enable vfio-mdev on selected hardware
+echo "kvmgt" > /mnt/sysimage/etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
+echo "vfio-mdev" > /mnt/sysimage/etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
+
+%end # End of the %post section

ingredients/base-hypervisor.cfg

@@ -0,0 +1,46 @@
+services --enabled="NetworkManager,systemd-resolved,libvirtd" # Without libvirtd here, it appears the service won't automatically start
+
+%packages --exclude-weakdeps # Beginning of the packages section. Does not include weak dependencies.
+
+qemu-kvm
+libvirt
+libvirt-daemon-config-network
+libvirt-daemon-kvm
+# libvirt-daemon-driver-lxc
+virt-install
+virt-top
+libguestfs-tools # Complementary tools useful for interacting with vith guest systems. Could probablby be removed
+python3-libguestfs # Complementary tools useful for interacting with vith guest systems. Could probablby be removed
+guestfs-tools # Complementary tools useful for interacting with vith guest systems. Could probablby be removed
+
+%end # End of the packages section
+
+%post --nochroot --log=/mnt/sysimage/root/base-hypervisor.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
+
+# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
+echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
+echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
+echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
+echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
+
+mkdir /mnt/sysimage/var/lib/libvirt/isos # Create a directory to store iso images. SELinux is already taking this one into account. 
+
+# wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/isos/ # fetch netboot.xyz iso and store it to the newly created iso directory
+
+# # virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
+# virsh pool-define-as isos dir - - - - /mnt/sysimage/var/lib/libvirt/isos/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
+# virsh pool-build isos # Build the pool
+# virsh pool-start isos # Start it
+# virsh pool-autostart isos # Set-it to autostart
+
+# fetch custom script and make it executable
+# wget https://raw.githubusercontent.com/PhyllomeOS/phyllomeos/main/post-first-startup-scripts/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/local/bin/
+# chmod +x /mnt/sysimage/usr/local/bin/virtualization-tweaks-root-needed.sh
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/linux.xml
+# virsh define linux.xml
+
+# wget https://raw.githubusercontent.com/PhyllomeOS/xml-definition-for-domains/main/xml/system/windows.xml
+# virsh define windows.xml
+
+%end # End of the %post section

ingredients/core-bootloader-grub.cfg

@@ -0,0 +1 @@
+bootloader --timeout=1 # Set the GNU GRUB bootloader timeout to 1

ingredients/core-bootloader-systemd-boot.cfg

@@ -0,0 +1 @@
+bootloader --sdboot --timeout=1 # Use systemd-boot and set a timeout to 1

ingredients/core-fedora-repo-rawhide.cfg

@@ -0,0 +1,2 @@
+repo --name=rawhide --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch
+url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch

ingredients/core-fedora-repo.cfg

@@ -0,0 +1,3 @@
+repo --name=fedora --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora mirror
+repo --name=updates --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch # Official Fedora updates mirror
+url --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch # Official Fedora updates mirror

ingredients/core-initial-setup-desktop.cfg

@@ -0,0 +1,21 @@
+firstboot --reconfig # Initial Setup will start after the first reboot
+
+%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies.
+
+gnome-initial-setup # Add GNOME initial setup too to let user create local account.
+
+%end # End of the packages section
+
+%post --nochroot --log=/mnt/sysimage/root/base-initial-setup-gnome.log # Beginning of %post section. Those commands are executed outside the chroot environment. Add logging.
+
+truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
+
+## Append lines to existing vendor.conf file, so that options are skipped upon reboot
+cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
+[pages]
+skip=privacy
+[goa]
+providers=local-first!
+EOF
+
+%end # End of the %post section

ingredients/core-initial-setup-server.cfg

@@ -0,0 +1,7 @@
+firstboot --reconfig # Enable the Setup Agent to start at boot time in reconfiguration mode. This mode enables the language, mouse, keyboard, root password, security level, time zone, and networking configuration options in addition to the default ones
+
+%packages --exclude-weakdeps # Beginning of the packages section. Do not include weak dependencies
+
+initial-setup # Initial setup package
+
+%end # End of the packages section

ingredients/core-locale.cfg

@@ -0,0 +1,3 @@
+keyboard --xlayouts='ch (fr)' # Set keyboard layouts for Romandy
+lang en_US.UTF-8 # Set system language to American English. More languages could be supported: --addsupport=cs_CZ,de_DE,en_UK
+timezone Europe/Paris --utc # Set system timezone to Paris

ingredients/core-network.cfg

@@ -0,0 +1 @@
+network  --onboot=yes --bootproto=dhcp --device=link --activate --hostname=phyllome-alpha # Configure network devices, enable them at boot time device and sets a particular hostname. "link" selects the first device reaching an up state

ingredients/core-packages-default.cfg

@@ -0,0 +1,23 @@
+%packages --exclude-weakdeps # Beginning of the package section. Does not include weak dependencies. Description courtesy of the Fedora project
+
+# Default but not necessary packages that are part of the core DNF group
+
+NetworkManager # Network connection manager and user applications
+NetworkManager-config-connectivity-fedora # NetworkManager config file for connectivity checking via Fedora servers
+dnf5-plugins # Plugins for dnf5
+dracut-config-rescue # dracut configuration to turn on rescue image generation
+firewalld # A firewall daemon with D-Bus interface providing a dynamic firewall
+fwupd # Firmware update daemon
+plymouth # Graphical Boot Animation and Logger
+prefixdevname # Udev helper utility that provides network interface naming using user defined prefix
+systemd-resolved # Network Name Resolution manager
+zram-generator-defaults # Default configuration for zram-generator
+
+# Hand-picked packages
+pciutils # PCI bus related utilities
+libusb # Library for accessing USB devices
+usbutils # Linux USB utilities
+wget # An advanced file and recursive website downloader
+nano # A small text editor
+
+%end # End of the packages section

ingredients/core-packages-hardware-support.cfg

@@ -0,0 +1,33 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+#
+# Provides extended hardware support
+
+%packages --exclude-weakdeps # Beginning of the package section. Does not include weak dependencies
+
+# hardware-support group. Mandatory packages # Provides extended hardware support, and especially extra wireless drivers
+alsa-sof-firmware # Audio drivers and firmware for ALSA. Essential for audio functionality.
+amd-gpu-firmware # Firmware for AMD GPUs.  Required for proper GPU operation.
+atheros-firmware # Firmware for Atheros wireless network adapters.  Critical for wireless connectivity.
+b43-fwcutter # Utility for cutting firmware files for B43 drivers.  Needed for driver compatibility.
+b43-openfwwf # Driver and firmware for B43 network cards.  Essential for network card operation.
+brcmfmac-firmware # Firmware for Broadcom MAC controllers.  Required for wireless and wired network performance.
+cirrus-audio-firmware # Firmware for Cirrus Logic audio chips.  Necessary for audio hardware support.
+intel-audio-firmware # Firmware for Intel audio processors.  Required for integrated audio functionality.
+intel-gpu-firmware # Firmware for Intel GPUs. Essential for GPU operation.
+intel-vsc-firmware # Firmware for Intel Video Scheduling Controller. Required for GPU performance.
+iwlegacy-firmware # Legacy firmware for older Intel wireless cards.  Needed for compatibility.
+iwlwifi-dvm-firmware # Firmware for Intel Wireless Link 5100/5200 series. Crucial for wireless connectivity.
+iwlwifi-mvm-firmware # Firmware for Intel Wireless Link 5300/5400 series. Required for wireless performance.
+libertas-firmware # Firmware for Broadcom wireless network cards.  Essential for wireless connectivity.
+mt7xxx-firmware # Firmware for MediaTek wireless network adapters.  Required for wireless connectivity.
+nvidia-gpu-firmware # Firmware for NVIDIA GPUs. Essential for GPU operation.
+nxpwireless-firmware # Firmware for NXP wireless network adapters. Required for wireless connectivity.
+realtek-firmware # Firmware for Realtek network adapters and audio devices.  Essential for various device support.
+tiwilink-firmware # Firmware for TI WiLink wireless network adapters. Required for wireless connectivity.
+
+%end # End of the packages section

ingredients/core-packages-mandatory-trimming-attempt.cfg

@@ -0,0 +1,48 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+#
+# Provides the mandatory packages that are part of the core DNF group
+
+%packages --exclude-weakdeps # Beginning of the package section. Does not include weak dependencies. Description courtesy of the Fedora project
+
+-audit # User space tools for kernel auditing
+basesystem # The skeleton package which defines a simple Fedora system
+bash # The Bourne Again SHell, a command-line interpreter.
+-coreutils # A set of basic GNU tools commonly used in shell scripts
+curl # A utility for getting files from remote servers (FTP, HTTP, and others)
+dhcp-client # Provides the ISC DHCP client daemon and dhclient-script
+dnf5 # Command-line package manager
+dracut # Initramfs generator using udev
+-e2fsprogs # Utilities for managing ext2, ext3, and ext4 file systems
+filesystem # The basic directory layout for a Linux system
+glibc # The GNU libc libraries
+hostname # Utility to set/show the host name or domain name
+iproute # Advanced IP routing and network device configuration tools
+iputils # Network monitoring tools including ping
+kbd # Tools for configuring the console (keyboard, virtual terminals, etc.)
+kernel # The Linux kernel
+-less # A text file browser similar to more, but better. Can be excluded
+-man-db # Tools for searching and reading man pages. Can be excluded
+ncurses # Ncurses support utilities
+-openssh-clients # An open source SSH client applications. Can be excluded
+-openssh-server # An open source SSH server daemon. Can be excluded
+parted # The GNU disk partition manipulation program
+-policycoreutils # SELinux policy core utilities. Can be excluded
+procps-ng # System and process monitoring utilities
+rootfiles # The basic required files for the root user's directory
+rpm # The RPM package management system
+-selinux-policy-targeted # SELinux targeted policy. Can be excluded
+setup # A set of system configuration and setup files
+shadow-utils # Utilities for managing accounts and shadow password files
+-sssd-common # Common files for the SSSD. Can be excluded
+-sssd-kcm # An implementation of a Kerberos KCM server. Can be excluded
+-sudo # Allows restricted root access for specified users
+systemd # System and Service Manager
+util-linux # Collection of basic system utilities
+-vim-minimal # A minimal version of the VIM editor
+
+%end # End of the packages section

ingredients/core-packages-mandatory.cfg

@@ -0,0 +1,57 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+#
+# Provides the mandatory packages that are part of the core DNF group
+# More information: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#id240
+
+%packages --ignoremissing --nocore --exclude-weakdeps # Beginning of the package section. Does not include weak dependencies. Description courtesy of the Fedora project
+
+audit # User space tools for kernel auditing
+basesystem # The skeleton package which defines a simple Fedora system
+bash # The Bourne Again SHell, a command-line interpreter.
+coreutils # A set of basic GNU tools commonly used in shell scripts
+curl # A utility for getting files from remote servers (FTP, HTTP, and others)
+dhcp-client # Provides the ISC DHCP client daemon and dhclient-script
+dnf5 # Command-line package manager
+dracut # Initramfs generator using udev
+e2fsprogs # Utilities for managing ext2, ext3, and ext4 file systems
+filesystem # The basic directory layout for a Linux system
+glibc # The GNU libc libraries
+hostname # Utility to set/show the host name or domain name
+iproute # Advanced IP routing and network device configuration tools
+iputils # Network monitoring tools including ping
+kbd # Tools for configuring the console (keyboard, virtual terminals, etc.)
+kernel # The Linux kernel
+less # A text file browser similar to more, but better. Can be excluded
+man-db # Tools for searching and reading man pages. Can be excluded
+ncurses # Ncurses support utilities
+openssh-clients # An open source SSH client applications. Can be excluded
+openssh-server # An open source SSH server daemon. Can be excluded
+parted # The GNU disk partition manipulation program
+policycoreutils # SELinux policy core utilities. Can be excluded
+procps-ng # System and process monitoring utilities
+rootfiles # The basic required files for the root user's directory
+rpm # The RPM package management system
+selinux-policy-targeted # SELinux targeted policy. Can be excluded
+setup # A set of system configuration and setup files
+shadow-utils # Utilities for managing accounts and shadow password files
+sssd-common # Common files for the SSSD. Can be excluded
+sssd-kcm # An implementation of a Kerberos KCM server. Can be excluded
+sudo # Allows restricted root access for specified users
+systemd # System and Service Manager
+util-linux # Collection of basic system utilities
+vim-minimal # A minimal version of the VIM editor
+
+# Packages to make Phyllome OS a generic distro
+# Adds packages to comply with Fedora Remix legal guidelines: https://fedoraproject.org/wiki/Remix 
+fedora-remix-logos # Fedora Remix logos
+generic-release # Generic release files
+generic-logos # Icons and pictures
+generic-release-common # Generic release files
+generic-release-notes # Release Notes
+
+%end # End of the packages section

ingredients/core-post-nochroot.cfg

@@ -0,0 +1,3 @@
+%post --nochroot --log=/mnt/sysimage/root/post-nochroot.log # Beginning of the post-installation section. Log all messages to a given file
+
+%end # End of the %post section

ingredients/core-post.cfg

@@ -0,0 +1,7 @@
+%post --log=/mnt/sysimage/root/post.log # Beginning of the post-installation section. Log all messages to a given file
+
+localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
+dnf update -y # Update the system 
+grub2-mkconfig -o /boot/grub2/grub.cfg # Unsure it is actually useful
+
+%end # End of the %post section

ingredients/core-pre-install.cfg

@@ -0,0 +1,3 @@
+%pre --log=/mnt/sysimage/root/pre-install.log Beginning of the pre-installation section. Log all messages to a given file
+
+%end # End of the %post section

ingredients/core-pre.cfg

@@ -0,0 +1,3 @@
+%pre --log=/mnt/sysimage/root/pre.log Beginning of the pre section. Log all messages to a given file
+
+%end # End of the %post section

ingredients/core-security-off.cfg

@@ -0,0 +1,3 @@
+rootpw --lock --iscrypted locked # Lock the root account. Can still be undone by end-user during initial setup
+selinux --disabled # Disable SELinux ; other option: --enable
+firewall --disabled # Disable firewall

ingredients/core-security-on.cfg

@@ -0,0 +1,3 @@
+rootpw --lock --iscrypted locked # Lock the root account. Can still be undone by end-user during initial setup
+selinux --enabled # Enable SELinux ; other option: --disabled
+firewall --enabled # Enable firewall

ingredients/core-services.cfg

@@ -0,0 +1 @@
+services --enabled=NetworkManager,systemd-resolved # List of comma-separated systemd services that can be explicitly enabled

ingredients/core-storage.cfg

@@ -0,0 +1,6 @@
+zerombr # Destroy all the contents of disks with invalid partition tables or other formatting unrecognizable to the installer
+clearpart --all --initlabel # Erase all partitions and Initializes the disk label to the default for the target architecture
+
+part /boot/efi --fstype="efi" --size=1024 --fsoptions="umask=0077,shortname=winnt" --label=efi # Creates an 1 GB EFI system partition
+part /boot --fstype="ext4" --size=512 --label=boot # Creates a 512 MiB ext4 boot partition
+part / --fstype="ext4" --grow --label=root # Create a single root partition with the remaining space

ingredients/core.cfg

@@ -0,0 +1,2 @@
+text # Kickstart installation in text mode
+poweroff # Shut down the system after a successful installation

ingredients/extra-fedora-repos-nonfree.cfg

@@ -0,0 +1,19 @@
+# RPM fusion repositories
+# For the current release tree
+repo --name=rpmfusion-nonfree --mirrorlist=https://mirrors.rpmfusion.org/mirrorlist?repo=nonfree-fedora-$releasever&arch=$basearch --includepkgs=rpmfusion-nonfree-release
+# Updates for the current release tree
+repo --name=rpmfusion-nonfree-updates --mirrorlist=https://mirrors.rpmfusion.org/mirrorlist?repo=nonfree-fedora-updates-released-$releasever&arch=$basearch --includepkgs=rpmfusion-nonfree-release
+
+%post
+
+# Import RPM Fusion PGP Key. Courtesy of https://github.com/rpmfusion/rpmfusion-nonfree-remix-kickstarts/blob/master/rpmfusion-nonfree-live-base.ks
+echo "== RPM Fusion Nonfree: Base section =="
+echo "Importing RPM Fusion keys"
+rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-nonfree-fedora-*-primary
+echo "List of packages from RPM Fusion Nonfree:"
+rpm -qa --qf '%{NAME} %{SIGGPG:pgpsig} %{SIGPGP:pgpsig} \n' | grep -e 3DE8C682E38EE9BC0FDFEA47FCAE2EA87F858107 | awk ' { print $1 } ' | sort
+echo "List of incuded RPM Fusion packages with their size:"
+rpm -q --qf '%{SIZE} %{NAME}\n' $(rpm -qa --qf '%{NAME} %{SIGGPG:pgpsig} %{SIGPGP:pgpsig} \n' | grep -e 3DE8C682E38EE9BC0FDFEA47FCAE2EA87F858107 | awk ' { print $1 } ') | sort -n
+echo
+
+%end

ingredients/live-core-bootloader-grub.cfg

@@ -0,0 +1 @@
+bootloader --location=none --timeout=1 # Set the GNU GRUB bootloader timeout to 1 and to location to none

ingredients/live-core-mandatory-packages.cfg

@@ -0,0 +1,23 @@
+%packages # Beginning of the package section. Include weak dependencies. Description courtesy of the Fedora project
+
+@anaconda-tools
+
+# Explicitly specified here:
+# <notting> walters: because otherwise dependency loops cause yum issues.
+kernel
+kernel-modules
+kernel-modules-extra
+
+# Need aajohan-comfortaa-fonts for the SVG rnotes images
+aajohan-comfortaa-fonts
+
+# Without this, initramfs generation during live image creation fails: #1242586
+dracut-live
+
+# anaconda needs the locales available to run for different locales
+glibc-all-langpacks
+
+# provide the livesys scripts
+livesys-scripts
+
+%end

ingredients/live-core-post-live-session.cfg

@@ -0,0 +1,6 @@
+%post --log=/mnt/sysimage/root/post-live-session.log # Beginning of the post-installation section. Add logging.
+
+# set livesys session type
+sed -i 's/^livesys_session=.*/livesys_session="gnome"/' /etc/sysconfig/livesys
+
+%end

ingredients/live-core-post.cfg

@@ -0,0 +1,51 @@
+%post --log=/mnt/sysimage/root/post-live-core.log # Beginning of the post-installation section. Add logging.
+
+# Enable livesys services
+systemctl enable livesys.service
+systemctl enable livesys-late.service
+
+# enable tmpfs for /tmp
+systemctl enable tmp.mount
+
+# make it so that we don't do writing to the overlay for things which
+# are just tmpdirs/caches
+# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
+cat >> /etc/fstab << EOF
+vartmp   /var/tmp    tmpfs   defaults   0  0
+EOF
+
+# work around for poor key import UI in PackageKit
+rm -f /var/lib/rpm/__db*
+echo "Packages within this LiveCD"
+rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
+# Note that running rpm recreates the rpm db files which aren't needed or wanted
+rm -f /var/lib/rpm/__db*
+
+# go ahead and pre-make the man -k cache (#455968)
+/usr/bin/mandb
+
+# make sure there aren't core files lying around
+rm -f /core*
+
+# remove random seed, the newly installed instance should make it's own
+rm -f /var/lib/systemd/random-seed
+
+# convince readahead not to collect
+# FIXME: for systemd
+
+echo 'File created by kickstart. See systemd-update-done.service(8).' \
+    | tee /etc/.updated >/var/.updated
+
+# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
+# See bug 1317709
+rm -f /boot/*-rescue*
+
+# Disable network service here, as doing it in the services line
+# fails due to RHBZ #1369794
+systemctl disable network
+
+# Remove machine-id on pre generated images
+rm -f /etc/machine-id
+touch /etc/machine-id
+
+%end

ingredients/live-core-storage.cfg

@@ -0,0 +1,5 @@
+zerombr # WARNING : Dangerous command ! Will clear the Master Boot Record
+clearpart --all --initlabel # Partition clearing information. This setup uses GPT by default.
+
+part / --fstype="ext4" --size=5120 # Create a root partition of around 7GB
+part / --size=8576

ingredients/live-core.cfg

@@ -0,0 +1 @@
+poweroff # Shut down the system after a successful installation

ingredients/template.cfg

@@ -0,0 +1,25 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# What ? This partial kickstart file provides a template one can use to further extend an installation
+
+# %packages --exclude-weakdeps # Beginning of the packages section. Excludes weak package dependencies
+# Any software in the official Fedora repository can be added [here](https://packages.fedoraproject.org/).
+
+# gnome-shell # the version 3 of the GNOME desktop environment, without any presintalled applications
+
+# %end
+
+# %post --nochroot --log=/mnt/sysimage/opt/base-desktop-gnome.log # Beginning of %post section. Those commands are executed outside the chroot environment. 
+# Use this section to further extend the system
+
+# cat >> /mnt/sysimage/usr/share/glib-2.0/schemas/org.gnome.desktop.background.gschema.override<< EOF
+# [org.gnome.desktop.background]
+# picture-uri='file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
+# EOF
+
+# %end # End of the %post section

leaves/flat-dh.cfg

@@ -1,143 +0,0 @@
-# Generated by pykickstart v3.34
-#version=DEVEL
-# X Window System configuration information
-xconfig  --defaultdesktop=GNOME --startxonboot
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Reboot after installation
-reboot --kexec
-# Use text mode install
-text
-# Network information
-network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
-# Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
-# System timezone
-timezone Europe/Paris --utc
-# SELinux configuration
-selinux --enforcing
-# System services
-services --disabled="sshd" --enabled="NetworkManager,libvirtd"
-# System bootloader configuration
-bootloader --location=mbr --timeout=1
-# Clear the Master Boot Record
-zerombr
-# Partition clearing information
-clearpart --all --initlabel
-# Disk partitioning information
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=384 --label=boot
-part / --fstype="ext4" --grow --label=root
-
-%post --logfile=/root/b.log
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/bh.log
-# %post --log=/root/bh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-mkdir /mnt/sysimage/var/lib/libvirt/iso # Create a directory to store iso images
-
-wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/iso/ # fetch netboot.xyz iso
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/configure-vmm-and-desktop.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/configure-vmm-and-desktop.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/create-live-vm.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/create-live-vm.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/virtualization-tweaks-root-needed.sh
-
-# # Create new file /etc/systemd/system/postinstall.service using cat:
-# cat > /mnt/sysimage/etc/systemd/system/post-install.service<< EOF
-# [Unit]
-# Description=Post-installation configuration for Phyllome OS
-# After=gdm.service
-# Requires=gdm.service
-# 
-# [Service]
-# Type=oneshot
-# ExecStart=/bin/bash /usr/sbin/post-install.sh
-# RemainAfterExit=yes
-# 
-# [Install]
-# WantedBy=multi-user.target
-# EOF
-# 
-# systemctl enable /mnt/sysimage/etc/systemd/system/post-install.service # Enable systemd unit
-
-# Add a network bridge. Still need to declare it to libvirt/virt-manager
-# nmcli con add ifname br0 type bridge con-name br0 
-# nmcli con add type bridge-slave ifname enp1s0 master br0 # to-do : generalize this command so that it could regardless of the name of the ethernet device
-# nmcli con up br0
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/dh.log
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-# Create a file to autostart virt-manager
-cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-%end
-
-%packages --exclude-weakdeps
-@core
-@hardware-support
-dejavu-sans-mono-fonts
-elementary-wallpapers-gnome.noarch
-fedora-remix-logos
-generic-logos
-generic-release
-generic-release-common
-generic-release-notes
-gnome-initial-setup
-gnome-shell
-gnome-terminal
-guestfs-tools
-libguestfs-tools
-libvirt
-libvirt-daemon-config-network
-libvirt-daemon-kvm
-nano
-neofetch
-pciutils
-python3-libguestfs
-qemu-guest-agent
-qemu-kvm
-spice-vdagent
-virt-install
-virt-manager
-virt-top
-wget
-wpa_supplicant
--fedora-logos
--fedora-release
--fedora-release-common
--fedora-release-identity-basic
--fedora-release-notes
--gnome-tour
-
-%end

leaves/flat-dhi.cfg

@@ -1,178 +0,0 @@
-# Generated by pykickstart v3.34
-#version=DEVEL
-# X Window System configuration information
-xconfig  --defaultdesktop=GNOME --startxonboot
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Reboot after installation
-reboot --kexec
-# Use text mode install
-text
-# Network information
-network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
-# Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
-# System timezone
-timezone Europe/Paris --utc
-# SELinux configuration
-selinux --enforcing
-# System services
-services --disabled="sshd" --enabled="NetworkManager,libvirtd"
-# System bootloader configuration
-bootloader --location=mbr --timeout=1
-# Clear the Master Boot Record
-zerombr
-# Partition clearing information
-clearpart --all --initlabel
-# Disk partitioning information
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=384 --label=boot
-part / --fstype="ext4" --grow --label=root
-
-%post --logfile=/root/b.log
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/bh.log
-# %post --log=/root/bh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-mkdir /mnt/sysimage/var/lib/libvirt/iso # Create a directory to store iso images
-
-wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/iso/ # fetch netboot.xyz iso
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/configure-vmm-and-desktop.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/configure-vmm-and-desktop.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/create-live-vm.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/create-live-vm.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/virtualization-tweaks-root-needed.sh
-
-# # Create new file /etc/systemd/system/postinstall.service using cat:
-# cat > /mnt/sysimage/etc/systemd/system/post-install.service<< EOF
-# [Unit]
-# Description=Post-installation configuration for Phyllome OS
-# After=gdm.service
-# Requires=gdm.service
-# 
-# [Service]
-# Type=oneshot
-# ExecStart=/bin/bash /usr/sbin/post-install.sh
-# RemainAfterExit=yes
-# 
-# [Install]
-# WantedBy=multi-user.target
-# EOF
-# 
-# systemctl enable /mnt/sysimage/etc/systemd/system/post-install.service # Enable systemd unit
-
-# Add a network bridge. Still need to declare it to libvirt/virt-manager
-# nmcli con add ifname br0 type bridge con-name br0 
-# nmcli con add type bridge-slave ifname enp1s0 master br0 # to-do : generalize this command so that it could regardless of the name of the ethernet device
-# nmcli con up br0
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/bhi.log
-
-sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub # Load kernel modules in grub.
-
-# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
-echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
-echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
-echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
-echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
-echo "kvmgt" > /mnt/sysimage/etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-echo "vfio-mdev" > /mnt/sysimage/etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-
-echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested-virtualization
-
-# The following part seems useless
-# dracut --add-drivers " vfio vfio-pci vfio_iommu_type1 vfio_virqfd vfio-mdev kvmgt " --force # Instruct dracut to load the vfio drivers
-# dracut --force # Regenerate initramfs
-# Doesn't seem to work
-# dracut: Cannot find /usr/lib/dracut/dracut-init.sh.
-# dracut: Are you running from a git checkout?
-# dracut: Try passing -l as an argument to /mnt/sysimage/usr/bin/dracut
-
-# The following part seems useless too. No need to regenerate grub
-# grub2-mkconfig -o /mnt/sysimage/boot/grub2/grub.cfg # Update grub. Does it fail ? /usr/sbin/grub2-probe: error: failed to get canonical path of `LiveOS_rootfs'.
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/dhi.log
-
-truncate -s 0 /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf # remove content of vendor.conf so that all options are made available
-
-# Create a file to autostart virt-manager
-cat > /mnt/sysimage/etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-## Append lines to existing vendor.conf file, so that options are skipped upon reboot
-cat >> /mnt/sysimage/usr/share/gnome-initial-setup/vendor.conf<< EOF
-[pages]
-skip=privacy
-[goa]
-providers=local-first!
-EOF
-
-%end
-
-%packages --exclude-weakdeps
-@core
-@hardware-support
-dejavu-sans-mono-fonts
-elementary-wallpapers-gnome.noarch
-fedora-remix-logos
-generic-logos
-generic-release
-generic-release-common
-generic-release-notes
-gnome-initial-setup
-gnome-shell
-gnome-terminal
-guestfs-tools
-libguestfs-tools
-libvirt
-libvirt-daemon-config-network
-libvirt-daemon-kvm
-nano
-neofetch
-pciutils
-python3-libguestfs
-qemu-guest-agent
-qemu-kvm
-spice-vdagent
-virt-install
-virt-manager
-virt-top
-wget
-wpa_supplicant
--fedora-logos
--fedora-release
--fedora-release-common
--fedora-release-identity-basic
--fedora-release-notes
--gnome-tour
-
-%end

leaves/flat-ld.cfg

@@ -1,421 +0,0 @@
-# Generated by pykickstart v3.34
-#version=DEVEL
-# X Window System configuration information
-xconfig  --defaultdesktop=GNOME --startxonboot
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Shutdown after installation
-shutdown
-# Network information
-network  --bootproto=dhcp --device=link --activate
-# Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
-# System timezone
-timezone Europe/Paris --utc
-# SELinux configuration
-selinux --enforcing
-# System bootloader configuration
-bootloader --location=none
-# Clear the Master Boot Record
-zerombr
-# Partition clearing information
-clearpart --all
-# Disk partitioning information
-part / --size=5120
-
-%post --logfile=/root/bl.log
-
-# FIXME: it'd be better to get this installed from a package
-cat > /etc/rc.d/init.d/livesys << EOF
-#!/bin/bash
-#
-# live: Init script for live image
-#
-# chkconfig: 345 00 99
-# description: Init script for live image.
-### BEGIN INIT INFO
-# X-Start-Before: display-manager chronyd
-### END INIT INFO
-
-. /etc/init.d/functions
-
-if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ]; then
-    exit 0
-fi
-
-if [ -e /.liveimg-configured ] ; then
-    configdone=1
-fi
-
-exists() {
-    which \$1 >/dev/null 2>&1 || return
-    \$*
-}
-
-livedir="LiveOS"
-for arg in \`cat /proc/cmdline\` ; do
-  if [ "\${arg##rd.live.dir=}" != "\${arg}" ]; then
-    livedir=\${arg##rd.live.dir=}
-    continue
-  fi
-  if [ "\${arg##live_dir=}" != "\${arg}" ]; then
-    livedir=\${arg##live_dir=}
-  fi
-done
-
-# enable swapfile if it exists
-if ! strstr "\`cat /proc/cmdline\`" noswap && [ -f /run/initramfs/live/\${livedir}/swap.img ] ; then
-  action "Enabling swap file" swapon /run/initramfs/live/\${livedir}/swap.img
-fi
-
-mountPersistentHome() {
-  # support label/uuid
-  if [ "\${homedev##LABEL=}" != "\${homedev}" -o "\${homedev##UUID=}" != "\${homedev}" ]; then
-    homedev=\`/sbin/blkid -o device -t "\$homedev"\`
-  fi
-
-  # if we're given a file rather than a blockdev, loopback it
-  if [ "\${homedev##mtd}" != "\${homedev}" ]; then
-    # mtd devs don't have a block device but get magic-mounted with -t jffs2
-    mountopts="-t jffs2"
-  elif [ ! -b "\$homedev" ]; then
-    loopdev=\`losetup -f\`
-    if [ "\${homedev##/run/initramfs/live}" != "\${homedev}" ]; then
-      action "Remounting live store r/w" mount -o remount,rw /run/initramfs/live
-    fi
-    losetup \$loopdev \$homedev
-    homedev=\$loopdev
-  fi
-
-  # if it's encrypted, we need to unlock it
-  if [ "\$(/sbin/blkid -s TYPE -o value \$homedev 2>/dev/null)" = "crypto_LUKS" ]; then
-    echo
-    echo "Setting up encrypted /home device"
-    plymouth ask-for-password --command="cryptsetup luksOpen \$homedev EncHome"
-    homedev=/dev/mapper/EncHome
-  fi
-
-  # and finally do the mount
-  mount \$mountopts \$homedev /home
-  # if we have /home under what's passed for persistent home, then
-  # we should make that the real /home.  useful for mtd device on olpc
-  if [ -d /home/home ]; then mount --bind /home/home /home ; fi
-  [ -x /sbin/restorecon ] && /sbin/restorecon /home
-  if [ -d /home/liveuser ]; then USERADDARGS="-M" ; fi
-}
-
-findPersistentHome() {
-  for arg in \`cat /proc/cmdline\` ; do
-    if [ "\${arg##persistenthome=}" != "\${arg}" ]; then
-      homedev=\${arg##persistenthome=}
-    fi
-  done
-}
-
-if strstr "\`cat /proc/cmdline\`" persistenthome= ; then
-  findPersistentHome
-elif [ -e /run/initramfs/live/\${livedir}/home.img ]; then
-  homedev=/run/initramfs/live/\${livedir}/home.img
-fi
-
-# if we have a persistent /home, then we want to go ahead and mount it
-if ! strstr "\`cat /proc/cmdline\`" nopersistenthome && [ -n "\$homedev" ] ; then
-  action "Mounting persistent /home" mountPersistentHome
-fi
-
-if [ -n "\$configdone" ]; then
-  exit 0
-fi
-
-# add liveuser user with no passwd
-action "Adding live user" useradd \$USERADDARGS -c "Live System User" liveuser
-passwd -d liveuser > /dev/null
-usermod -aG wheel liveuser > /dev/null
-
-# Remove root password lock
-passwd -d root > /dev/null
-
-# turn off firstboot for livecd boots
-systemctl --no-reload disable firstboot-text.service 2> /dev/null || :
-systemctl --no-reload disable firstboot-graphical.service 2> /dev/null || :
-systemctl stop firstboot-text.service 2> /dev/null || :
-systemctl stop firstboot-graphical.service 2> /dev/null || :
-
-# don't use prelink on a running live image
-sed -i 's/PRELINKING=yes/PRELINKING=no/' /etc/sysconfig/prelink &>/dev/null || :
-
-# turn off mdmonitor by default
-systemctl --no-reload disable mdmonitor.service 2> /dev/null || :
-systemctl --no-reload disable mdmonitor-takeover.service 2> /dev/null || :
-systemctl stop mdmonitor.service 2> /dev/null || :
-systemctl stop mdmonitor-takeover.service 2> /dev/null || :
-
-# don't start cron/at as they tend to spawn things which are
-# disk intensive that are painful on a live image
-systemctl --no-reload disable crond.service 2> /dev/null || :
-systemctl --no-reload disable atd.service 2> /dev/null || :
-systemctl stop crond.service 2> /dev/null || :
-systemctl stop atd.service 2> /dev/null || :
-
-# turn off abrtd on a live image
-systemctl --no-reload disable abrtd.service 2> /dev/null || :
-systemctl stop abrtd.service 2> /dev/null || :
-
-# Don't sync the system clock when running live (RHBZ #1018162)
-sed -i 's/rtcsync//' /etc/chrony.conf
-
-# Mark things as configured
-touch /.liveimg-configured
-
-# add static hostname to work around xauth bug
-# https://bugzilla.redhat.com/show_bug.cgi?id=679486
-# the hostname must be something else than 'localhost'
-# https://bugzilla.redhat.com/show_bug.cgi?id=1370222
-hostnamectl set-hostname "localhost-live"
-
-EOF
-
-# bah, hal starts way too late
-cat > /etc/rc.d/init.d/livesys-late << EOF
-#!/bin/bash
-#
-# live: Late init script for live image
-#
-# chkconfig: 345 99 01
-# description: Late init script for live image.
-
-. /etc/init.d/functions
-
-if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ] || [ -e /.liveimg-late-configured ] ; then
-    exit 0
-fi
-
-exists() {
-    which \$1 >/dev/null 2>&1 || return
-    \$*
-}
-
-touch /.liveimg-late-configured
-
-# read some variables out of /proc/cmdline
-for o in \`cat /proc/cmdline\` ; do
-    case \$o in
-    ks=*)
-        ks="--kickstart=\${o#ks=}"
-        ;;
-    xdriver=*)
-        xdriver="\${o#xdriver=}"
-        ;;
-    esac
-done
-
-# if liveinst or textinst is given, start anaconda
-if strstr "\`cat /proc/cmdline\`" liveinst ; then
-   plymouth --quit
-   /usr/sbin/liveinst \$ks
-fi
-if strstr "\`cat /proc/cmdline\`" textinst ; then
-   plymouth --quit
-   /usr/sbin/liveinst --text \$ks
-fi
-
-# configure X, allowing user to override xdriver
-if [ -n "\$xdriver" ]; then
-   cat > /etc/X11/xorg.conf.d/00-xdriver.conf <<FOE
-Section "Device"
-	Identifier	"Videocard0"
-	Driver	"\$xdriver"
-EndSection
-FOE
-fi
-
-EOF
-
-chmod 755 /etc/rc.d/init.d/livesys
-/sbin/restorecon /etc/rc.d/init.d/livesys
-/sbin/chkconfig --add livesys
-
-chmod 755 /etc/rc.d/init.d/livesys-late
-/sbin/restorecon /etc/rc.d/init.d/livesys-late
-/sbin/chkconfig --add livesys-late
-
-# enable tmpfs for /tmp
-systemctl enable tmp.mount
-
-# make it so that we don't do writing to the overlay for things which
-# are just tmpdirs/caches
-# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
-cat >> /etc/fstab << EOF
-vartmp   /var/tmp    tmpfs   defaults   0  0
-EOF
-
-# work around for poor key import UI in PackageKit
-rm -f /var/lib/rpm/__db*
-echo "Packages within this LiveCD"
-rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
-# Note that running rpm recreates the rpm db files which aren't needed or wanted
-rm -f /var/lib/rpm/__db*
-
-# go ahead and pre-make the man -k cache (#455968)
-/usr/bin/mandb
-
-# make sure there aren't core files lying around
-rm -f /core*
-
-# remove random seed, the newly installed instance should make it's own
-rm -f /var/lib/systemd/random-seed
-
-# convince readahead not to collect
-# FIXME: for systemd
-
-echo 'File created by kickstart. See systemd-update-done.service(8).' \
-    | tee /etc/.updated >/var/.updated
-
-# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
-# See bug 1317709
-rm -f /boot/*-rescue*
-
-# Disable network service here, as doing it in the services line
-# fails due to RHBZ #1369794
-/sbin/chkconfig network off
-
-# Remove machine-id on pre generated images
-rm -f /etc/machine-id
-touch /etc/machine-id
-
-%end
-
-%post --nochroot
-# For livecd-creator builds only (lorax/livemedia-creator handles this directly)
-if [ -n "$LIVE_ROOT" ]; then
-    cp "$INSTALL_ROOT"/usr/share/licenses/*-release-common/* "$LIVE_ROOT/"
-
-    # only installed on x86, x86_64
-    if [ -f /usr/bin/livecd-iso-to-disk ]; then
-        mkdir -p "$LIVE_ROOT/LiveOS"
-        cp /usr/bin/livecd-iso-to-disk "$LIVE_ROOT/LiveOS"
-    fi
-fi
-
-%end
-
-%post --logfile=/root/ld.log
-
-cat >> /etc/rc.d/init.d/livesys << EOF
-
-# # disable gnome-software automatically downloading updates
-# cat >> /usr/share/glib-2.0/schemas/org.gnome.software.gschema.override << FOE
-# [org.gnome.software]
-# download-updates=false
-# FOE
-# 
-# # don't autostart gnome-software session service
-# rm -f /etc/xdg/autostart/gnome-software-service.desktop
-
-# # disable the gnome-software shell search provider
-# cat >> /usr/share/gnome-shell/search-providers/org.gnome.Software-search-provider.ini << FOE
-# DefaultDisabled=true
-# FOE
-
-# # don't run gnome-initial-setup
-# mkdir ~liveuser/.config
-# touch ~liveuser/.config/gnome-initial-setup-done
-
-# suppress anaconda spokes redundant with gnome-initial-setup
-# cat >> /etc/sysconfig/anaconda << FOE
-# [NetworkSpoke]
-# visited=1
-# 
-# [PasswordSpoke]
-# visited=1
-# 
-# [UserSpoke]
-# visited=1
-# FOE
-
-## make the installer show up
-#if [ -f /usr/share/applications/liveinst.desktop ]; then
-#  # Show harddisk install in shell dash
-#  sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop ""
-#  # need to move it to anaconda.desktop to make shell happy
-#  mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
-#
-#   cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
-# [org.gnome.shell]
-# favorite-apps=['firefox.desktop', 'org.gnome.Calendar.desktop', 'rhythmbox.desktop', 'org.gnome.Photos.desktop', 'org.gnome.Nautilus.desktop', 'anaconda.desktop']
-# FOE
-# 
-#  # Make the welcome screen show up
-#  if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop ]; then
-#    mkdir -p ~liveuser/.config/autostart
-#    cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/
-#    cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/
-#  fi
-# 
-#   # Disable GNOME welcome tour so it doesn't overlap with Fedora welcome screen
-#   cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
-# welcome-dialog-last-shown-version='4294967295'
-# FOE
-# 
-#   # Copy Anaconda branding in place
-#   if [ -d /usr/share/lorax/product/usr/share/anaconda ]; then
-#     cp -a /usr/share/lorax/product/* /
-#   fi
-# fi
-
-# rebuild schema cache with any overrides we installed
-# glib-compile-schemas /usr/share/glib-2.0/schemas
-
-# set up auto-login
-cat > /etc/gdm/custom.conf << FOE
-[daemon]
-AutomaticLoginEnable=True
-AutomaticLogin=liveuser
-FOE
-
-# Turn off PackageKit-command-not-found while uninstalled
-# if [ -f /etc/PackageKit/CommandNotFound.conf ]; then
-#   sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
-# fi
-
-# make sure to set the right permissions and selinux contexts
-chown -R liveuser:liveuser /home/liveuser/
-restorecon -R /home/liveuser/
-
-EOF
-
-%end
-
-%packages --exclude-weakdeps
-@anaconda-tools
-@x86-baremetal-tools
-aajohan-comfortaa-fonts
-anaconda
-anaconda-install-env-deps
-anaconda-live
-chkconfig
-dejavu-sans-mono-fonts
-dracut-live
-elementary-wallpapers-gnome.noarch
-glibc-all-langpacks
-gnome-shell
-gnome-terminal
-initscripts
-kernel
-kernel-modules
-kernel-modules-extra
-nano
-wpa_supplicant
--device-mapper-multipath
--fcoe-utils
--gnome-tour
-
-%end

leaves/flat-ldhi.cfg

@@ -1,517 +0,0 @@
-# Generated by pykickstart v3.34
-#version=DEVEL
-# X Window System configuration information
-xconfig  --defaultdesktop=GNOME --startxonboot
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Shutdown after installation
-shutdown
-# Network information
-network  --bootproto=dhcp --device=link --activate
-# Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
-# System timezone
-timezone Europe/Paris --utc
-# SELinux configuration
-selinux --enforcing
-# System bootloader configuration
-bootloader --location=none
-# Clear the Master Boot Record
-zerombr
-# Partition clearing information
-clearpart --all
-# Disk partitioning information
-part / --size=5120
-
-%post --logfile=/root/bl.log
-
-# FIXME: it'd be better to get this installed from a package
-cat > /etc/rc.d/init.d/livesys << EOF
-#!/bin/bash
-#
-# live: Init script for live image
-#
-# chkconfig: 345 00 99
-# description: Init script for live image.
-### BEGIN INIT INFO
-# X-Start-Before: display-manager chronyd
-### END INIT INFO
-
-. /etc/init.d/functions
-
-if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ]; then
-    exit 0
-fi
-
-if [ -e /.liveimg-configured ] ; then
-    configdone=1
-fi
-
-exists() {
-    which \$1 >/dev/null 2>&1 || return
-    \$*
-}
-
-livedir="LiveOS"
-for arg in \`cat /proc/cmdline\` ; do
-  if [ "\${arg##rd.live.dir=}" != "\${arg}" ]; then
-    livedir=\${arg##rd.live.dir=}
-    continue
-  fi
-  if [ "\${arg##live_dir=}" != "\${arg}" ]; then
-    livedir=\${arg##live_dir=}
-  fi
-done
-
-# enable swapfile if it exists
-if ! strstr "\`cat /proc/cmdline\`" noswap && [ -f /run/initramfs/live/\${livedir}/swap.img ] ; then
-  action "Enabling swap file" swapon /run/initramfs/live/\${livedir}/swap.img
-fi
-
-mountPersistentHome() {
-  # support label/uuid
-  if [ "\${homedev##LABEL=}" != "\${homedev}" -o "\${homedev##UUID=}" != "\${homedev}" ]; then
-    homedev=\`/sbin/blkid -o device -t "\$homedev"\`
-  fi
-
-  # if we're given a file rather than a blockdev, loopback it
-  if [ "\${homedev##mtd}" != "\${homedev}" ]; then
-    # mtd devs don't have a block device but get magic-mounted with -t jffs2
-    mountopts="-t jffs2"
-  elif [ ! -b "\$homedev" ]; then
-    loopdev=\`losetup -f\`
-    if [ "\${homedev##/run/initramfs/live}" != "\${homedev}" ]; then
-      action "Remounting live store r/w" mount -o remount,rw /run/initramfs/live
-    fi
-    losetup \$loopdev \$homedev
-    homedev=\$loopdev
-  fi
-
-  # if it's encrypted, we need to unlock it
-  if [ "\$(/sbin/blkid -s TYPE -o value \$homedev 2>/dev/null)" = "crypto_LUKS" ]; then
-    echo
-    echo "Setting up encrypted /home device"
-    plymouth ask-for-password --command="cryptsetup luksOpen \$homedev EncHome"
-    homedev=/dev/mapper/EncHome
-  fi
-
-  # and finally do the mount
-  mount \$mountopts \$homedev /home
-  # if we have /home under what's passed for persistent home, then
-  # we should make that the real /home.  useful for mtd device on olpc
-  if [ -d /home/home ]; then mount --bind /home/home /home ; fi
-  [ -x /sbin/restorecon ] && /sbin/restorecon /home
-  if [ -d /home/liveuser ]; then USERADDARGS="-M" ; fi
-}
-
-findPersistentHome() {
-  for arg in \`cat /proc/cmdline\` ; do
-    if [ "\${arg##persistenthome=}" != "\${arg}" ]; then
-      homedev=\${arg##persistenthome=}
-    fi
-  done
-}
-
-if strstr "\`cat /proc/cmdline\`" persistenthome= ; then
-  findPersistentHome
-elif [ -e /run/initramfs/live/\${livedir}/home.img ]; then
-  homedev=/run/initramfs/live/\${livedir}/home.img
-fi
-
-# if we have a persistent /home, then we want to go ahead and mount it
-if ! strstr "\`cat /proc/cmdline\`" nopersistenthome && [ -n "\$homedev" ] ; then
-  action "Mounting persistent /home" mountPersistentHome
-fi
-
-if [ -n "\$configdone" ]; then
-  exit 0
-fi
-
-# add liveuser user with no passwd
-action "Adding live user" useradd \$USERADDARGS -c "Live System User" liveuser
-passwd -d liveuser > /dev/null
-usermod -aG wheel liveuser > /dev/null
-
-# Remove root password lock
-passwd -d root > /dev/null
-
-# turn off firstboot for livecd boots
-systemctl --no-reload disable firstboot-text.service 2> /dev/null || :
-systemctl --no-reload disable firstboot-graphical.service 2> /dev/null || :
-systemctl stop firstboot-text.service 2> /dev/null || :
-systemctl stop firstboot-graphical.service 2> /dev/null || :
-
-# don't use prelink on a running live image
-sed -i 's/PRELINKING=yes/PRELINKING=no/' /etc/sysconfig/prelink &>/dev/null || :
-
-# turn off mdmonitor by default
-systemctl --no-reload disable mdmonitor.service 2> /dev/null || :
-systemctl --no-reload disable mdmonitor-takeover.service 2> /dev/null || :
-systemctl stop mdmonitor.service 2> /dev/null || :
-systemctl stop mdmonitor-takeover.service 2> /dev/null || :
-
-# don't start cron/at as they tend to spawn things which are
-# disk intensive that are painful on a live image
-systemctl --no-reload disable crond.service 2> /dev/null || :
-systemctl --no-reload disable atd.service 2> /dev/null || :
-systemctl stop crond.service 2> /dev/null || :
-systemctl stop atd.service 2> /dev/null || :
-
-# turn off abrtd on a live image
-systemctl --no-reload disable abrtd.service 2> /dev/null || :
-systemctl stop abrtd.service 2> /dev/null || :
-
-# Don't sync the system clock when running live (RHBZ #1018162)
-sed -i 's/rtcsync//' /etc/chrony.conf
-
-# Mark things as configured
-touch /.liveimg-configured
-
-# add static hostname to work around xauth bug
-# https://bugzilla.redhat.com/show_bug.cgi?id=679486
-# the hostname must be something else than 'localhost'
-# https://bugzilla.redhat.com/show_bug.cgi?id=1370222
-hostnamectl set-hostname "localhost-live"
-
-EOF
-
-# bah, hal starts way too late
-cat > /etc/rc.d/init.d/livesys-late << EOF
-#!/bin/bash
-#
-# live: Late init script for live image
-#
-# chkconfig: 345 99 01
-# description: Late init script for live image.
-
-. /etc/init.d/functions
-
-if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ] || [ -e /.liveimg-late-configured ] ; then
-    exit 0
-fi
-
-exists() {
-    which \$1 >/dev/null 2>&1 || return
-    \$*
-}
-
-touch /.liveimg-late-configured
-
-# read some variables out of /proc/cmdline
-for o in \`cat /proc/cmdline\` ; do
-    case \$o in
-    ks=*)
-        ks="--kickstart=\${o#ks=}"
-        ;;
-    xdriver=*)
-        xdriver="\${o#xdriver=}"
-        ;;
-    esac
-done
-
-# if liveinst or textinst is given, start anaconda
-if strstr "\`cat /proc/cmdline\`" liveinst ; then
-   plymouth --quit
-   /usr/sbin/liveinst \$ks
-fi
-if strstr "\`cat /proc/cmdline\`" textinst ; then
-   plymouth --quit
-   /usr/sbin/liveinst --text \$ks
-fi
-
-# configure X, allowing user to override xdriver
-if [ -n "\$xdriver" ]; then
-   cat > /etc/X11/xorg.conf.d/00-xdriver.conf <<FOE
-Section "Device"
-	Identifier	"Videocard0"
-	Driver	"\$xdriver"
-EndSection
-FOE
-fi
-
-EOF
-
-chmod 755 /etc/rc.d/init.d/livesys
-/sbin/restorecon /etc/rc.d/init.d/livesys
-/sbin/chkconfig --add livesys
-
-chmod 755 /etc/rc.d/init.d/livesys-late
-/sbin/restorecon /etc/rc.d/init.d/livesys-late
-/sbin/chkconfig --add livesys-late
-
-# enable tmpfs for /tmp
-systemctl enable tmp.mount
-
-# make it so that we don't do writing to the overlay for things which
-# are just tmpdirs/caches
-# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
-cat >> /etc/fstab << EOF
-vartmp   /var/tmp    tmpfs   defaults   0  0
-EOF
-
-# work around for poor key import UI in PackageKit
-rm -f /var/lib/rpm/__db*
-echo "Packages within this LiveCD"
-rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
-# Note that running rpm recreates the rpm db files which aren't needed or wanted
-rm -f /var/lib/rpm/__db*
-
-# go ahead and pre-make the man -k cache (#455968)
-/usr/bin/mandb
-
-# make sure there aren't core files lying around
-rm -f /core*
-
-# remove random seed, the newly installed instance should make it's own
-rm -f /var/lib/systemd/random-seed
-
-# convince readahead not to collect
-# FIXME: for systemd
-
-echo 'File created by kickstart. See systemd-update-done.service(8).' \
-    | tee /etc/.updated >/var/.updated
-
-# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
-# See bug 1317709
-rm -f /boot/*-rescue*
-
-# Disable network service here, as doing it in the services line
-# fails due to RHBZ #1369794
-/sbin/chkconfig network off
-
-# Remove machine-id on pre generated images
-rm -f /etc/machine-id
-touch /etc/machine-id
-
-%end
-
-%post --nochroot
-# For livecd-creator builds only (lorax/livemedia-creator handles this directly)
-if [ -n "$LIVE_ROOT" ]; then
-    cp "$INSTALL_ROOT"/usr/share/licenses/*-release-common/* "$LIVE_ROOT/"
-
-    # only installed on x86, x86_64
-    if [ -f /usr/bin/livecd-iso-to-disk ]; then
-        mkdir -p "$LIVE_ROOT/LiveOS"
-        cp /usr/bin/livecd-iso-to-disk "$LIVE_ROOT/LiveOS"
-    fi
-fi
-
-%end
-
-%post --logfile=/root/ld.log
-
-cat >> /etc/rc.d/init.d/livesys << EOF
-
-# # disable gnome-software automatically downloading updates
-# cat >> /usr/share/glib-2.0/schemas/org.gnome.software.gschema.override << FOE
-# [org.gnome.software]
-# download-updates=false
-# FOE
-# 
-# # don't autostart gnome-software session service
-# rm -f /etc/xdg/autostart/gnome-software-service.desktop
-
-# # disable the gnome-software shell search provider
-# cat >> /usr/share/gnome-shell/search-providers/org.gnome.Software-search-provider.ini << FOE
-# DefaultDisabled=true
-# FOE
-
-# # don't run gnome-initial-setup
-# mkdir ~liveuser/.config
-# touch ~liveuser/.config/gnome-initial-setup-done
-
-# suppress anaconda spokes redundant with gnome-initial-setup
-# cat >> /etc/sysconfig/anaconda << FOE
-# [NetworkSpoke]
-# visited=1
-# 
-# [PasswordSpoke]
-# visited=1
-# 
-# [UserSpoke]
-# visited=1
-# FOE
-
-## make the installer show up
-#if [ -f /usr/share/applications/liveinst.desktop ]; then
-#  # Show harddisk install in shell dash
-#  sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop ""
-#  # need to move it to anaconda.desktop to make shell happy
-#  mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
-#
-#   cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
-# [org.gnome.shell]
-# favorite-apps=['firefox.desktop', 'org.gnome.Calendar.desktop', 'rhythmbox.desktop', 'org.gnome.Photos.desktop', 'org.gnome.Nautilus.desktop', 'anaconda.desktop']
-# FOE
-# 
-#  # Make the welcome screen show up
-#  if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop ]; then
-#    mkdir -p ~liveuser/.config/autostart
-#    cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/
-#    cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/
-#  fi
-# 
-#   # Disable GNOME welcome tour so it doesn't overlap with Fedora welcome screen
-#   cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
-# welcome-dialog-last-shown-version='4294967295'
-# FOE
-# 
-#   # Copy Anaconda branding in place
-#   if [ -d /usr/share/lorax/product/usr/share/anaconda ]; then
-#     cp -a /usr/share/lorax/product/* /
-#   fi
-# fi
-
-# rebuild schema cache with any overrides we installed
-# glib-compile-schemas /usr/share/glib-2.0/schemas
-
-# set up auto-login
-cat > /etc/gdm/custom.conf << FOE
-[daemon]
-AutomaticLoginEnable=True
-AutomaticLogin=liveuser
-FOE
-
-# Turn off PackageKit-command-not-found while uninstalled
-# if [ -f /etc/PackageKit/CommandNotFound.conf ]; then
-#   sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
-# fi
-
-# make sure to set the right permissions and selinux contexts
-chown -R liveuser:liveuser /home/liveuser/
-restorecon -R /home/liveuser/
-
-EOF
-
-%end
-
-%post --logfile=/root/bhl.log
-
-mkdir /var/lib/libvirt/iso # Create a directory to store iso images
-
-wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /var/lib/libvirt/iso/ # fetch netboot.xyz iso
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/configure-vmm-and-desktop.sh -P /usr/sbin/
-chmod +x /usr/sbin/configure-vmm-and-desktop.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/create-live-vm.sh -P /usr/sbin/
-chmod +x /usr/sbin/create-live-vm.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/virtualization-tweaks-root-needed.sh -P /usr/sbin/
-chmod +x /usr/sbin/virtualization-tweaks-root-needed.sh
-
-# # Create new file /etc/systemd/system/postinstall.service using cat:
-# cat > /etc/systemd/system/post-install.service<< EOF
-# [Unit]
-# Description=Post-installation configuration for Phyllome OS
-# After=gdm.service
-# Requires=gdm.service
-# 
-# [Service]
-# Type=oneshot
-# ExecStart=/bin/bash /usr/sbin/post-install.sh
-# RemainAfterExit=yes
-# 
-# [Install]
-# WantedBy=multi-user.target
-# EOF
-# 
-# systemctl enable /etc/systemd/system/post-install.service # Enable systemd unit
-
-# Add a network bridge. Still need to declare it to libvirt/virt-manager
-# nmcli con add ifname br0 type bridge con-name br0 
-# nmcli con add type bridge-slave ifname enp1s0 master br0 # to-do : generalize this command so that it could regardless of the name of the ethernet device
-# nmcli con up br0
-
-%end
-
-%post --logfile=/root/blhi.log
-
-sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci i915.enable_gvt=1/i' /etc/default/grub # Load kernel modules in grub.
-
-# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
-echo "vfio" > /etc/modules-load.d/vfio.conf
-echo "vfio-pci" > /etc/modules-load.d/vfio-pci.conf
-echo "vfio_iommu_type1" > /etc/modules-load.d/vfio_iommu_type1.conf
-echo "vfio_virqfd" > /etc/modules-load.d/vfio_virqfd.conf
-echo "kvmgt" > /etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-echo "vfio-mdev" > /etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-
-echo "options kvm_intel nested=1" >> /etc/modprobe.d/kvm.conf # Add support for nested-virtualization
-
-# The following part seems useless
-# dracut --add-drivers " vfio vfio-pci vfio_iommu_type1 vfio_virqfd vfio-mdev kvmgt " --force # Instruct dracut to load the vfio drivers
-# dracut --force # Regenerate initramfs
-# Doesn't seem to work
-# dracut: Cannot find /usr/lib/dracut/dracut-init.sh.
-# dracut: Are you running from a git checkout?
-# dracut: Try passing -l as an argument to /usr/bin/dracut
-
-# The following part seems useless too. No need to regenerate grub
-# grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub. Does it fail ? /usr/sbin/grub2-probe: error: failed to get canonical path of `LiveOS_rootfs'.
-
-%end
-
-%post --logfile=/root/ldhi.log
-
-usermod -a -G libvirt liveuser # Make user "liveuser" part of the existing libvirt group to allow it to interact with the guest-hypervisor.
-chown liveuser:liveuser /var/lib/libvirt/iso # Make the user "liveuser" the owner of this directory
-chown liveuser:liveuser /var/lib/libvirt/images  # Make the user "test" the owner of this directory
-
-# Create a file to autostart virt-manager
-cat > /etc/xdg/autostart/virt-manager.desktop << EOF
-[Desktop Entry]
-Type=Application
-Name=Virtual Machine Manager
-Exec=virt-manager
-EOF
-
-%end
-
-%packages --exclude-weakdeps
-@anaconda-tools
-@x86-baremetal-tools
-aajohan-comfortaa-fonts
-anaconda
-anaconda-install-env-deps
-anaconda-live
-chkconfig
-dejavu-sans-mono-fonts
-dracut-live
-elementary-wallpapers-gnome.noarch
-glibc-all-langpacks
-gnome-shell
-gnome-terminal
-guestfs-tools
-initscripts
-kernel
-kernel-modules
-kernel-modules-extra
-libguestfs-tools
-libvirt
-libvirt-daemon-config-network
-libvirt-daemon-kvm
-nano
-python3-libguestfs
-qemu-kvm
-virt-install
-virt-manager
-virt-top
-wpa_supplicant
--device-mapper-multipath
--fcoe-utils
--gnome-tour
-
-%end

leaves/flat-sh.cfg

@@ -1,122 +0,0 @@
-# Generated by pykickstart v3.34
-#version=DEVEL
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Reboot after installation
-reboot --kexec
-# Use text mode install
-text
-# Network information
-network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
-# Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
-# System timezone
-timezone Europe/Paris --utc
-# Run the Setup Agent on first boot
-firstboot --reconfig
-# SELinux configuration
-selinux --enforcing
-# System services
-services --disabled="sshd" --enabled="NetworkManager,libvirtd"
-# System bootloader configuration
-bootloader --location=mbr --timeout=1
-# Clear the Master Boot Record
-zerombr
-# Partition clearing information
-clearpart --all --initlabel
-# Disk partitioning information
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=384 --label=boot
-part / --fstype="ext4" --grow --label=root
-
-%post --logfile=/root/b.log
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/bh.log
-# %post --log=/root/bh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-mkdir /mnt/sysimage/var/lib/libvirt/iso # Create a directory to store iso images
-
-wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/iso/ # fetch netboot.xyz iso
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/configure-vmm-and-desktop.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/configure-vmm-and-desktop.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/create-live-vm.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/create-live-vm.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/virtualization-tweaks-root-needed.sh
-
-# # Create new file /etc/systemd/system/postinstall.service using cat:
-# cat > /mnt/sysimage/etc/systemd/system/post-install.service<< EOF
-# [Unit]
-# Description=Post-installation configuration for Phyllome OS
-# After=gdm.service
-# Requires=gdm.service
-# 
-# [Service]
-# Type=oneshot
-# ExecStart=/bin/bash /usr/sbin/post-install.sh
-# RemainAfterExit=yes
-# 
-# [Install]
-# WantedBy=multi-user.target
-# EOF
-# 
-# systemctl enable /mnt/sysimage/etc/systemd/system/post-install.service # Enable systemd unit
-
-# Add a network bridge. Still need to declare it to libvirt/virt-manager
-# nmcli con add ifname br0 type bridge con-name br0 
-# nmcli con add type bridge-slave ifname enp1s0 master br0 # to-do : generalize this command so that it could regardless of the name of the ethernet device
-# nmcli con up br0
-
-%end
-
-%packages --exclude-weakdeps
-@core
-@hardware-support
-fedora-remix-logos
-generic-logos
-generic-release
-generic-release-common
-generic-release-notes
-guestfs-tools
-initial-setup
-libguestfs-tools
-libvirt
-libvirt-daemon-config-network
-libvirt-daemon-kvm
-nano
-neofetch
-pciutils
-python3-libguestfs
-qemu-guest-agent
-qemu-kvm
-spice-vdagent
-virt-install
-virt-top
-wget
--fedora-logos
--fedora-release
--fedora-release-common
--fedora-release-identity-basic
--fedora-release-notes
-
-%end

leaves/flat-shi.cfg

@@ -1,149 +0,0 @@
-# Generated by pykickstart v3.34
-#version=DEVEL
-# Keyboard layouts
-keyboard --xlayouts='ch (fr)'
-# Root password
-rootpw --iscrypted --lock locked
-# System language
-lang en_US.UTF-8
-# Reboot after installation
-reboot --kexec
-# Use text mode install
-text
-# Network information
-network  --bootproto=dhcp --device=link --hostname=phyllome-alpha --activate
-# Firewall configuration
-firewall --enabled --service=mdns
-# Use network installation
-url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch"
-repo --name="fedora" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-repo --name="updates" --mirrorlist=https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
-# System timezone
-timezone Europe/Paris --utc
-# Run the Setup Agent on first boot
-firstboot --reconfig
-# SELinux configuration
-selinux --enforcing
-# System services
-services --disabled="sshd" --enabled="NetworkManager,libvirtd"
-# System bootloader configuration
-bootloader --location=mbr --timeout=1
-# Clear the Master Boot Record
-zerombr
-# Partition clearing information
-clearpart --all --initlabel
-# Disk partitioning information
-part /boot/efi --fstype="efi" --size=128 --fsoptions="umask=0077,shortname=winnt" --label=efi
-part /boot --fstype="ext4" --size=384 --label=boot
-part / --fstype="ext4" --grow --label=root
-
-%post --logfile=/root/b.log
-
-localectl set-keymap ch-fr # Set keymap to `ch-fr`. Alternatively, `us` can be picked.
-dnf update -y # Update the system 
-grub2-mkconfig -o /boot/grub2/grub.cfg # Update grub otherwise the system won't boot properly
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/bh.log
-# %post --log=/root/bh.log # Beginning of %post section. Those commands are executed outside the chroot environment. Logging is enabled to help with post-installation troubleshooting
-
-mkdir /mnt/sysimage/var/lib/libvirt/iso # Create a directory to store iso images
-
-wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -P /mnt/sysimage/var/lib/libvirt/iso/ # fetch netboot.xyz iso
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/configure-vmm-and-desktop.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/configure-vmm-and-desktop.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/create-live-vm.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/create-live-vm.sh
-
-# fetch custom script and make it executable
-wget https://git.phyllo.me/home/PhyllomeOS/raw/branch/main/post/virtualization-tweaks-root-needed.sh -P /mnt/sysimage/usr/sbin/
-chmod +x /mnt/sysimage/usr/sbin/virtualization-tweaks-root-needed.sh
-
-# # Create new file /etc/systemd/system/postinstall.service using cat:
-# cat > /mnt/sysimage/etc/systemd/system/post-install.service<< EOF
-# [Unit]
-# Description=Post-installation configuration for Phyllome OS
-# After=gdm.service
-# Requires=gdm.service
-# 
-# [Service]
-# Type=oneshot
-# ExecStart=/bin/bash /usr/sbin/post-install.sh
-# RemainAfterExit=yes
-# 
-# [Install]
-# WantedBy=multi-user.target
-# EOF
-# 
-# systemctl enable /mnt/sysimage/etc/systemd/system/post-install.service # Enable systemd unit
-
-# Add a network bridge. Still need to declare it to libvirt/virt-manager
-# nmcli con add ifname br0 type bridge con-name br0 
-# nmcli con add type bridge-slave ifname enp1s0 master br0 # to-do : generalize this command so that it could regardless of the name of the ethernet device
-# nmcli con up br0
-
-%end
-
-%post --nochroot --logfile=/mnt/sysimage/root/bhi.log
-
-sed -i 's/\(quiet\)/\1 intel_iommu=on iommu=pt rd.driver.pre=vfio-pci i915.enable_gvt=1/i' /mnt/sysimage/etc/default/grub # Load kernel modules in grub.
-
-# Load kernel modules by adding vfio, vfio_pci, vfio_iommu_type1, vfio_virqfd
-echo "vfio" > /mnt/sysimage/etc/modules-load.d/vfio.conf
-echo "vfio-pci" > /mnt/sysimage/etc/modules-load.d/vfio-pci.conf
-echo "vfio_iommu_type1" > /mnt/sysimage/etc/modules-load.d/vfio_iommu_type1.conf
-echo "vfio_virqfd" > /mnt/sysimage/etc/modules-load.d/vfio_virqfd.conf
-echo "kvmgt" > /mnt/sysimage/etc/modules-load.d/kvmgt.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-echo "vfio-mdev" > /mnt/sysimage/etc/modules-load.d/vfio-mdev.conf # Load specific kernel modules kvmgt and vfio-mdev, for Intel (tm) GVT-g and Nvidia (tm)
-
-echo "options kvm_intel nested=1" >> /mnt/sysimage/etc/modprobe.d/kvm.conf # Add support for nested-virtualization
-
-# The following part seems useless
-# dracut --add-drivers " vfio vfio-pci vfio_iommu_type1 vfio_virqfd vfio-mdev kvmgt " --force # Instruct dracut to load the vfio drivers
-# dracut --force # Regenerate initramfs
-# Doesn't seem to work
-# dracut: Cannot find /usr/lib/dracut/dracut-init.sh.
-# dracut: Are you running from a git checkout?
-# dracut: Try passing -l as an argument to /mnt/sysimage/usr/bin/dracut
-
-# The following part seems useless too. No need to regenerate grub
-# grub2-mkconfig -o /mnt/sysimage/boot/grub2/grub.cfg # Update grub. Does it fail ? /usr/sbin/grub2-probe: error: failed to get canonical path of `LiveOS_rootfs'.
-
-%end
-
-%packages --exclude-weakdeps
-@core
-@hardware-support
-fedora-remix-logos
-generic-logos
-generic-release
-generic-release-common
-generic-release-notes
-guestfs-tools
-initial-setup
-libguestfs-tools
-libvirt
-libvirt-daemon-config-network
-libvirt-daemon-kvm
-nano
-neofetch
-pciutils
-python3-libguestfs
-qemu-guest-agent
-qemu-kvm
-spice-vdagent
-virt-install
-virt-top
-wget
--fedora-logos
--fedora-release
--fedora-release-common
--fedora-release-identity-basic
--fedora-release-notes
-
-%end

post/configure-vmm-and-desktop.sh

@@ -1,61 +0,0 @@
-#!/bin/bash
-
-# This script is fetched during the kickstarted installation of machines shipping with a hypervisor.
-# Ideally, this would happened during the installation process. 
-# Eventually, the elements within this script will be moved to a kickstart file   
-# It is then executed once upon first-boot as a systemd-unit
-
-# Set the default wallpaper for Phyllome
-gsettings set org.gnome.desktop.background picture-uri 'file:///usr/share/backgrounds/elementary/Morskie Oko.jpg'
-
-# Virtual Machine Manager opionated configuration
-# Options that aren't modified in comparaison to the default are commented out
-# Modify the default virt-manager behavior for the console
-gsettings set org.virt-manager.virt-manager.console resize-guest 1
-gsettings set org.virt-manager.virt-manager.console scaling 2
-gsettings set org.virt-manager.virt-manager.console autoconnect false
-# gsettings set org.virt-manager.virt-manager.console grab-keys ''
-# gsettings set org.virt-manager.virt-manager.console auto-redirect true
-
-# Modify the default virt-manager behavior for confirmation dialogues
-gsettings set org.virt-manager.virt-manager.confirm forcepoweroff false
-# gsettings set org.virt-manager.virt-manager.confirm delete-storage true
-gsettings set org.virt-manager.virt-manager.confirm removedev false
-# gsettings set org.virt-manager.virt-manager.confirm pause false
-# gsettings set org.virt-manager.virt-manager.confirm poweroff false
-
-# Modify default values for new VMs
-gsettings set org.virt-manager.virt-manager.new-vm storage-format 'raw'
-gsettings set org.virt-manager.virt-manager.new-vm cpu-default 'host-model'
-gsettings set org.virt-manager.virt-manager.new-vm graphics-type 'spice'
-
-# Settings related to usage and statistics
-# gsettings set org.virt-manager.virt-manager.vmlist-fields host-cpu-usage false
-# gsettings set org.virt-manager.virt-manager.vmlist-fields memory-usage false
-gsettings set org.virt-manager.virt-manager.vmlist-fields cpu-usage false
-# gsettings set org.virt-manager.virt-manager.vmlist-fields disk-usage false
-# gsettings set org.virt-manager.virt-manager.vmlist-fields network-traffic false
-gsettings set org.virt-manager.virt-manager.stats enable-net-poll true
-gsettings set org.virt-manager.virt-manager.stats update-interval 3
-gsettings set org.virt-manager.virt-manager.stats enable-memory-poll true
-gsettings set org.virt-manager.virt-manager.stats enable-disk-poll true
-# gsettings set org.virt-manager.virt-manager.stats enable-cpu-poll true
-
-# Modify the default virt-manager behavior for misc. options
-gsettings set org.virt-manager.virt-manager manager-window-width 200
-gsettings set org.virt-manager.virt-manager manager-window-height 500
-# gsettings set org.virt-manager.virt-manager.details show-toolbar true
-gsettings set org.virt-manager.virt-manager xmleditor-enabled true # enable xml edition
-# gsettings set org.virt-manager.virt-manager.urls kickstarts @as []
-# gsettings set org.virt-manager.virt-manager.urls containers @as []
-# gsettings set org.virt-manager.virt-manager.urls isos @as []
-# gsettings set org.virt-manager.virt-manager.urls urls @as []
-# gsettings set org.virt-manager.virt-manager enable-libguestfs-vm-inspection true
-gsettings set org.virt-manager.virt-manager.connections uris "['qemu:///system', 'qemu:///session']"
-gsettings set org.virt-manager.virt-manager.connections autoconnect "['qemu:///system', 'qemu:///session']"
-gsettings set org.virt-manager.virt-manager.confirm unapplied-dev false
-# gsettings set org.virt-manager.virt-manager.paths screenshot-default ''
-# gsettings set org.virt-manager.virt-manager.paths perms-fix-ignore @as []
-# gsettings set org.virt-manager.virt-manager.paths media-default ''
-# gsettings set org.virt-manager.virt-manager.paths image-default ''
-

post/create-live-vm.sh

@@ -1,27 +0,0 @@
-#!/bin/bash
-
-# Create and start a new diskless VM using virt-install, but do not launch any installation
-virt-install \
-    --connect qemu:///system \
-    --virt-type kvm \
-    --arch x86_64 \
-    --machine q35 \
-    --name my-first-live-vm \
-    --boot uefi \
-    --cpu host-model,topology.sockets=1,topology.cores=1,topology.threads=1 \
-    --vcpus 1 \
-    --memory 2048 \
-    --video virtio \
-    --channel spicevmc \
-    --autoconsole none \
-    --sound none \
-    --controller type=virtio-serial \
-    --controller type=usb,model=none \
-    --controller type=scsi,model=virtio-scsi \
-    --network network=default,model=virtio \
-    --input type=keyboard,bus=virtio \
-    --input type=tablet,bus=virtio \
-    --rng /dev/urandom,model=virtio \
-    --disk none \
-    --cdrom=/var/lib/libvirt/iso/netboot.xyz.iso \
-    --install no_install=yes

post/virtualization-tweaks-root-needed.sh

@@ -1,9 +0,0 @@
-#!/bin/bash
-
-# usermod -a -G libvirt $(whoami) # add current user to the libvirt group
-
-# virsh commands fail in a kickstart environment (chroot or not it seems). would need to fetch a script and execute post-launch with a delay, for example using a systemd unit 
-virsh pool-define-as iso dir - - - - /var/lib/libvirt/iso/ # Make libvirt aware of this new directory by creating a so-called 'pool'.
-virsh pool-build iso # Build the pool
-virsh pool-start iso # Start it
-virsh pool-autostart iso # Set-it to autostart

recipes/_list-of-ingredients.cfg

@@ -0,0 +1,100 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# The list of ingredients for composing Phyllome OS
+# Uncomment lines with "%include" to enable ingredient
+
+# Installation method
+# Exactly one option has to be picked
+# %include ../ingredients/core.cfg # Text mode
+# %include ../ingredients/live-core.cfg # For live systems only
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#graphical-or-text-or-cmdline
+
+# Storage configuration 
+# Exactly one option has to be picked
+# WARNING !!! Will erase local disks!
+# %include ../ingredients/core-storage.cfg # Basic ext4 partition layout for UEFI-based systems
+# %include ../ingredients/live-core-storage.cfg # For live systems only
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#part-or-partition
+
+# Booloader configuration
+# Exactly one option has to be picked
+# %include ../ingredients/core-bootloader-grub.cfg # GNU GRUB bootloader
+# %include ../ingredients/core-bootloader-systemd-boot.cfg # systemd-boot, an EFI-only bootloader 
+# %include ../ingredients/live-core-bootloader-grub.cfg # GNU GRUB for live systems
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#bootloader
+
+# System locale configuration
+# Exactly one option has to be picked
+# %include ../ingredients/core-locale.cfg # System locale sets to Swiss French as keyboard layout and English as language. Timezone is also set. Can be changed during by end-user during first boot
+
+# Security mode 
+# Exactly one option has to be picked
+# %include ../ingredients/core-security-off.cfg # Sets security to low
+# %include ../ingredients/core-security-on.cfg # Sets security to medium
+
+# System services 
+# Optional
+# %include ../ingredients/core-services.cfg # List of systemd services that are explicitly enabled
+
+# Network configuration
+# %include ../ingredients/core-network.cfg # Network configuration
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#id123
+
+# Repositories 
+# Exactly one option has to be picked
+# %include ../ingredients/core-fedora-repo.cfg # Official repositories for Fedora
+# %include ../ingredients/core-fedora-repo-rawhide.cfg # Official repositories for Fedora Rawhide
+
+# Packages 
+# Exactly one option has to be picked
+# %include ../ingredients/core-packages-mandatory.cfg # Mandatory packages
+# %include ../ingredients/core-packages-mandatory-trimming-attempt.cfg # Trimming attempt for the mandatory packages
+# Mandatory packages for live editions
+# %include ../ingredients/live-core-mandatory-packages.cfg # For live systems
+# Other optional packages
+# Recommended but not strictly required
+# %include ../ingredients/core-packages-default.cfg # Recommended extra packages
+# %include ../ingredients/core-packages-hardware-support.cfg # Extended hardware support. Recommended for non-virtual systems
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#chapter-9-package-selection
+
+# Pre- and post-installation sections
+# Optional
+# All options can be picked
+# %include ../ingredients/pre.cfg # Triggered just after the kickstart file has been parsed
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#chapter-4-pre-installation-script
+# %include ../ingredients/pre-install.cfg # Script triggered just after the system storage has been set up
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#chapter-5-pre-install-script
+# %include ../ingredients/core-post-nochroot.cfg # Triggered after the installation no chroot
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#chapter-6-post-installation-script
+# %include ../ingredients/core-post.cfg # Triggered after the installation
+# Documentation: https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#chapter-6-post-installation-script
+# Two options have to be picked, for live systems only
+# %include ../ingredients/live-core-post.cfg # Post configuration script for a live system only
+# %include ../ingredients/live-core-post-live-session.cfg # Live session script
+
+# OEM setup
+# Exactly one option has to be picked
+# %include ../ingredients/core-desktop-initial-setup.cfg # Ensures that GNOME initial setup will launch on the first system start-up
+# %include ../ingredients/core-server-initial-setup.cfg # For headless systems
+
+# A GNOME Shell-based desktop environment
+# Optional
+# %include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
+# Documentation: https://fedoraproject.org/wiki/InitialSetup
+
+# Virtualization-related packages
+# Optional
+# %include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager
+# %include ../ingredients/base-hypervisor.cfg # Generic building block to build a virtualization host
+
+# Virtualization-related options
+# Optional
+# %include ../ingredients/base-hypervisor-amdcpu.cfg # Virtualization configuration for AMD (tm) CPUs
+# %include ../ingredients/base-hypervisor-intelcpu.cfg # Virtualization configuration for Intel (tm) CPUs
+# %include ../ingredients/base-hypervisor-intelgpu.cfg # Virtualization configuration for Intel (tm) GPUs from 4th to the 9th generation (compatible with vfio-mdev)
+# %include ../ingredients/base-guest-agents.cfg # Guest agents

recipes/desktop-hypervisor-amdcpu.cfg

@@ -0,0 +1,26 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# A recipe for an AMD (tm) CPU-based desktop hypervisor
+
+%include ../ingredients/core.cfg # Text mode for automated installation
+%include ../ingredients/core-storage.cfg # Storage configuration
+%include ../ingredients/core-bootloader-grub.cfg # Set bootloader to GNU GRUB
+%include ../ingredients/core-locale.cfg # System locale
+%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux
+%include ../ingredients/core-services.cfg # Required systemd services
+%include ../ingredients/core-network.cfg # Network configuration
+%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages 
+%include ../ingredients/core-packages-default.cfg # Default but not necessary packages
+%include ../ingredients/core-packages-hardware-support.cfg # Provides extended hardware support 
+%include ../ingredients/core-fedora-repo.cfg # Offical repositories for Fedora
+%include ../ingredients/core-post.cfg # Post configuration script
+%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
+%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
+%include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager
+%include ../ingredients/base-hypervisor.cfg # Base hypervisor
+%include ../ingredients/base-hypervisor-amdcpu.cfg # Virtualization configuration for AMD (tm) CPUs

recipes/desktop-hypervisor-intelcpu-intelgpu.cfg

@@ -0,0 +1,28 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# A recipe for an Intel(tm) CPU- and Intel(tm) GPUs-based desktop hypervisor 
+# vfio-mdev compatible GPUs required. For Intel, it means 5th to 10th generation only
+
+%include ../ingredients/core.cfg # Text mode
+%include ../ingredients/core-storage.cfg # ext4-based storage configuration
+%include ../ingredients/core-bootloader-grub.cfg # GNU GRUB
+%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
+%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux
+%include ../ingredients/core-services.cfg # Required systemd services
+%include ../ingredients/core-network.cfg # Network configuration
+%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages 
+%include ../ingredients/core-packages-default.cfg # Default but not necessary packages
+%include ../ingredients/core-packages-hardware-support.cfg # Extended hardware support 
+%include ../ingredients/core-fedora-repo.cfg # Offical repositories for Fedora
+%include ../ingredients/core-post.cfg # Triggered after the installation
+%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
+%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
+%include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager
+%include ../ingredients/base-hypervisor.cfg # Base hypervisor
+%include ../ingredients/base-hypervisor-intelcpu.cfg # Virtualization configuration for Intel (tm) CPUs
+%include ../ingredients/base-hypervisor-intelgpu.cfg # Virtualization configuration for Intel (tm) GPUs from 4th to the 9th generation (compatible with vfio-mdev)

recipes/desktop-hypervisor-intelcpu.cfg

@@ -0,0 +1,26 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# A recipe for an Intel(tm)-based desktop hypervisor
+
+%include ../ingredients/core.cfg # Text mode
+%include ../ingredients/core-storage.cfg # ext4-based storage configuration
+%include ../ingredients/core-bootloader-grub.cfg # GNU GRUB
+%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
+%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux
+%include ../ingredients/core-services.cfg # Required systemd services
+%include ../ingredients/core-network.cfg # Network configuration
+%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages 
+%include ../ingredients/core-packages-default.cfg # Default but not necessary packages
+%include ../ingredients/core-packages-hardware-support.cfg # Extended hardware support 
+%include ../ingredients/core-fedora-repo.cfg # Offical repositories for Fedora
+%include ../ingredients/core-post.cfg # Triggered after the installation
+%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
+%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
+%include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager
+%include ../ingredients/base-hypervisor.cfg # Base hypervisor
+%include ../ingredients/base-hypervisor-intelcpu.cfg # Virtualization configuration for Intel (tm) CPUs

recipes/desktop-hypervisor.cfg

@@ -0,0 +1,25 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# A recipe for a generic desktop hypervisor
+
+%include ../ingredients/core.cfg # Text mode
+%include ../ingredients/core-storage.cfg # ext4-based storage configuration
+%include ../ingredients/core-bootloader-grub.cfg # GNU GRUB
+%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
+%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux
+%include ../ingredients/core-services.cfg # Required systemd services
+%include ../ingredients/core-network.cfg # Network configuration
+%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages 
+%include ../ingredients/core-packages-default.cfg # Default but not necessary packages
+%include ../ingredients/core-packages-hardware-support.cfg # Extended hardware support 
+%include ../ingredients/core-fedora-repo.cfg # Offical repositories for Fedora
+%include ../ingredients/core-post.cfg # Triggered after the installation
+%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
+%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
+%include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager
+%include ../ingredients/base-hypervisor.cfg # Base hypervisor

recipes/desktop.cfg

@@ -0,0 +1,23 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# A recipe for a generic desktop hypervisor
+
+%include ../ingredients/core.cfg # Text mode
+%include ../ingredients/core-storage.cfg # ext4-based storage configuration
+%include ../ingredients/core-bootloader-grub.cfg # GNU GRUB
+%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
+%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux
+%include ../ingredients/core-services.cfg # Required systemd services
+%include ../ingredients/core-network.cfg # Network configuration
+%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages 
+%include ../ingredients/core-packages-default.cfg # Default but not necessary packages
+%include ../ingredients/core-packages-hardware-support.cfg # Extended hardware support 
+%include ../ingredients/core-fedora-repo.cfg # Offical repositories for Fedora
+%include ../ingredients/core-post.cfg # Triggered after the installation
+%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
+%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment

recipes/live-desktop-hypervisor.cfg

@@ -0,0 +1,28 @@
+#            __          ____                        ____  _____
+#     ____  / /_  __  __/ / /___  ____ ___  ___     / __ \/ ___/
+#    / __ \/ __ \/ / / / / / __ \/ __ `__ \/ _ \   / / / /\__ \
+#   / /_/ / / / / /_/ / / / /_/ / / / / / /  __/  / /_/ /___/ /
+#  / .___/_/ /_/\__, /_/_/\____/_/ /_/ /_/\___/   \____//____/
+# /_/          /____/
+
+# A recipe for a live desktop hypervisor
+
+%include ../ingredients/live-core.cfg # For live systems only
+%include ../ingredients/live-core-storage.cfg # For live systems only
+%include ../ingredients/live-core-bootloader-grub.cfg # GNU GRUB for live systems
+%include ../ingredients/core-locale.cfg # System locale set to Swiss French as keyboard layout and English as language
+%include ../ingredients/core-security-off.cfg # Lock root account, disable firewall and SELinux
+%include ../ingredients/core-services.cfg # Required systemd services
+%include ../ingredients/core-network.cfg # Network configuration
+%include ../ingredients/core-packages-mandatory.cfg # Mandatory packages 
+%include ../ingredients/live-core-mandatory-packages.cfg # For live systems
+%include ../ingredients/core-packages-default.cfg # Default but not necessary packages
+%include ../ingredients/core-packages-hardware-support.cfg # Extended hardware support 
+%include ../ingredients/core-fedora-repo.cfg # Offical repositories for Fedora
+%include ../ingredients/core-post.cfg # Triggered after the installation
+%include ../ingredients/live-core-post.cfg # Post configuration script for a live system only
+%include ../ingredients/live-core-post-live-session.cfg # Live session script
+%include ../ingredients/core-initial-setup-desktop.cfg # OEM setup for GNOME Shell
+%include ../ingredients/base-desktop-gnome.cfg # A GNOME Shell-based desktop environment
+%include ../ingredients/base-desktop-virtual-machine-manager.cfg # Virtual Machine Manager
+%include ../ingredients/base-hypervisor.cfg # Base hypervisor