Add temporary locale setting for cloud-init

Rocky-9-Azure.ks

@@ -1,54 +1,87 @@
 text
-
-auth --enableshadow --passalgo=sha512
-shutdown
-firewall --enabled --service=ssh
-firstboot --disable
-ignoredisk --only-use=vda
-keyboard us
-# System language
 lang en_US.UTF-8
-# Network information
-network  --bootproto=dhcp --device=link --activate --onboot=on
-network  --hostname=localhost.localdomain
-# Root password
-rootpw --iscrypted thereisnopasswordanditslocked
-selinux --enforcing
-services --disabled="kdump" --enabled="NetworkManager,sshd,rsyslog,chronyd,cloud-init,cloud-init-local,cloud-config,cloud-final,rngd"
+keyboard us
 timezone UTC --utc
 # Disk
-bootloader --append="rootdelay=300 console=ttyS0 earlyprintk=ttyS0  no_timer_check crashkernel=auto net.ifnames=0" --location=mbr --timeout=1 --boot-drive=vda
+bootloader --append="rootdelay=300 console=ttyS0 earlyprintk=ttyS0  no_timer_check crashkernel=auto net.ifnames=0" --location=mbr --timeout=1
+auth --enableshadow --passalgo=sha512
+selinux --enforcing
+firewall --enabled --service=ssh
+firstboot --disable
+# Network information
+network  --bootproto=dhcp --device=link --activate --onboot=on
+# Root password
+services --disabled="kdump" --enabled="NetworkManager,sshd,rsyslog,chronyd,cloud-init,cloud-init-local,cloud-config,cloud-final,rngd,waagent"
+rootpw --iscrypted thereisnopasswordanditslocked
+
+# Partition Stuff
 zerombr
 clearpart --all --initlabel 
-part /boot --fstype xfs --size 1024 --asprimary --ondisk vda
-part /boot/efi --fstype vfat --size 512 --asprimary --ondisk vda
 reqpart
-part / --fstype="xfs" --ondisk=vda --maxsize=3000 --grow
+part / --fstype="xfs" --mkfsoptions "-m bigtime=0,inobtcount=0" --ondisk=vda --size=3000
+shutdown
 
+%packages
+@core
+rocky-release
+kernel
+yum-utils
+-aic94xx-firmware
+-alsa-firmware
+-alsa-lib
+-alsa-tools-firmware
+-ivtv-firmware
+-iwl1000-firmware
+-iwl100-firmware
+-iwl105-firmware
+-iwl135-firmware
+-iwl2000-firmware
+-iwl2030-firmware
+-iwl3160-firmware
+-iwl3945-firmware
+-iwl4965-firmware
+-iwl5000-firmware
+-iwl5150-firmware
+-iwl6000-firmware
+-iwl6000g2a-firmware
+-iwl6000g2b-firmware
+-iwl6050-firmware
+-iwl7260-firmware
+-libertas-sd8686-firmware
+-libertas-sd8787-firmware
+-libertas-usb8388-firmware
+
+cloud-init
+cloud-utils-growpart
+gdisk
+dracut-config-generic
+grub2
+firewalld
+
+# some stuff that's missing from core or explicitly setting
+tar
+rsync
+dhcp-client
+NetworkManager
+rng-tools
+dnf-utils
+chrony
+WALinuxAgent
+hyperv-daemons
+
+-biosdevname
+-plymouth
+-iprutils
+-langpacks-*
+-langpacks-en
+-qemu-guest-agent
+%end
 
 %post --erroronfail
 passwd -d root
 passwd -l root
 
-###
 # Common Cloud Tweaks
-###
-
-# pvgrub support
-echo -n "Creating grub.conf for pvgrub"
-rootuuid=$( awk '$2=="/" { print $1 };'  /etc/fstab )
-mkdir /boot/grub
-echo -e 'default=0\ntimeout=0\n\n' > /boot/grub/grub.conf
-for kv in $( ls -1v /boot/vmlinuz* |grep -v rescue |sed s/.*vmlinuz-//  ); do
-  echo "title Rocky Linux 8 ($kv)" >> /boot/grub/grub.conf
-  echo -e "\troot (hd0)" >> /boot/grub/grub.conf
-  echo -e "\tkernel /boot/vmlinuz-$kv ro root=$rootuuid console=hvc0 LANG=en_US.UTF-8" >> /boot/grub/grub.conf
-  echo -e "\tinitrd /boot/initramfs-$kv.img" >> /boot/grub/grub.conf
-  echo
-done
-ln -sf grub.conf /boot/grub/menu.lst
-ln -sf /boot/grub/grub.conf /etc/grub.conf
-
 # setup systemd to boot to the right runlevel
 rm -f /etc/systemd/system/default.target
 ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target
@@ -66,42 +99,19 @@ NAutoVTs=0' /etc/systemd/logind.conf
 
 echo "virtual-guest" > /etc/tuned/active_profile
 
-###
-# Networking Changes
-###
-
-# For cloud images, 'eth0' _is_ the predictable device name, since
-# we don't want to be tied to specific virtual (!) hardware
-#rm -f /etc/udev/rules.d/70*
-#ln -s /dev/null /etc/udev/rules.d/80-net-name-slot.rules
-
-# simple eth0 config, again not hard-coded to the build hardware
-#cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF
-#DEVICE=eth0
-#ONBOOT=yes
-#BOOTPROTO=dhcp
-#TYPE=Ethernet
-#USERCTL=no
-#PEERDNS=yes
-#IPV6INIT=no
-#NM_CONTROLLED=yes
-#IPV4_DHCP_TIMEOUT=300
-#EOF
-
 cat << EOF | tee -a /etc/NetworkManager/conf.d/dhcp-timeout.conf
 # Configure dhcp timeout to 300s by default
 [connection]
 ipv4.dhcp-timeout=300
 EOF
 
-
 cat > /etc/sysconfig/network << EOF
 NETWORKING=yes
 NOZEROCONF=yes
 EOF
 
 # Remove build-time resolvers to fix #16948
-echo > /etc/resolv.conf
+truncate -s 0 /etc/resolv.conf
 
 # generic localhost names
 cat > /etc/hosts << EOF
@@ -111,26 +121,11 @@ cat > /etc/hosts << EOF
 EOF
 echo .
 
-
-###
-# Services
-###
-
-systemctl mask tmp.mount
-
-###
-# azure
-###
-# Setup WALinux Agent
-dnf -y install WALinuxAgent
-systemctl enable waagent
-
+# azure settings
 # Configure waagent for cloud-init
 sed -i 's/Provisioning.UseCloudInit=n/Provisioning.UseCloudInit=y/g' /etc/waagent.conf
 sed -i 's/Provisioning.Enabled=y/Provisioning.Enabled=n/g' /etc/waagent.conf
 
-
-
 # Azure: handle sr-iov and networkmanaeger
 cat << EOF | tee -a /etc/udev/rules.d/68-azure-sriov-nm-unmanaged.rules
 # Accelerated Networking on Azure exposes a new SRIOV interface to the VM.
@@ -169,10 +164,7 @@ reporting:
     type: hyperv
 EOF
 
-###
 # Kernel and Drivers
-###
-
 # Add drivers when building in VMWare, Vbox, or KVM (KVM)
 cat << EOF | tee -a /etc/dracut.conf.d/80-azure.conf
 add_drivers+=" hv_vmbus hv_netvsc hv_storvsc "
@@ -193,30 +185,25 @@ EOL
 echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot
 
 # rocky cloud user
-echo -e 'rocky\tALL=(ALL)\tNOPASSWD: ALL' >> /etc/sudoers
 sed -i 's/name: cloud-user/name: rocky/g' /etc/cloud/cloud.cfg
+echo -e 'rocky\tALL=(ALL)\tNOPASSWD: ALL' >> /etc/sudoers
+
+# this shouldn't be the case, but we'll do it anyway
+sed -i 's|^enabled=1|enabled=0|' /etc/yum/pluginconf.d/product-id.conf
+sed -i 's|^enabled=1|enabled=0|' /etc/yum/pluginconf.d/subscription-manager.conf
 
 dnf clean all
+truncate -c -s 0 /var/log/dnf.log
 
 # XXX instance type markers - MUST match Rocky Infra expectation
 echo 'azure' > /etc/yum/vars/infra
 
-# change dhcp client retry/timeouts to resolve #6866
-
-
-###
-# Cleanup
-###
-
-###
 # Azure Cleanup
-###
 sudo rm -f /var/log/waagent.log
 sudo cloud-init clean
 waagent -force -deprovision+user
 
-
-# Commont cleanup
+# Common cleanup
 rm -f ~/.bash_history
 export HISTSIZE=0
 
@@ -241,64 +228,4 @@ true
 
 %end
 
-%packages
-@core
-chrony
-dnf
-yum
-cloud-init
-cloud-utils-growpart
-NetworkManager
-dracut-config-generic
-firewalld
-gdisk
-grub2
-kernel
-nfs-utils
-rsync
-tar
-dnf-utils
-yum-utils
--aic94xx-firmware
--alsa-firmware
--alsa-lib
--alsa-tools-firmware
--ivtv-firmware
--iwl100-firmware
--iwl1000-firmware
--iwl105-firmware
--iwl135-firmware
--iwl2000-firmware
--iwl2030-firmware
--iwl3160-firmware
--iwl3945-firmware
--iwl4965-firmware
--iwl5000-firmware
--iwl5150-firmware
--iwl6000-firmware
--iwl6000g2a-firmware
--iwl6000g2b-firmware
--iwl6050-firmware
--iwl7260-firmware
--libertas-sd8686-firmware
--libertas-sd8787-firmware
--libertas-usb8388-firmware
--biosdevname
--iprutils
--plymouth
 
-python3-jsonschema
-qemu-guest-agent
-dhcp-client
-cockpit-ws
-cockpit-system
--langpacks-*
--langpacks-en
-
-rocky-release
-rng-tools
-
-WALinuxAgent
-hyperv-daemons
-
-%end

Rocky-9-GenericCloud.ks

@@ -76,11 +76,13 @@ rng-tools
 cockpit-ws
 cockpit-system
 qemu-guest-agent
+virt-what
 
 -biosdevname
 -plymouth
 -iprutils
--langpacks-*
+# Fixes an s390x issue
+#-langpacks-*
 -langpacks-en
 %end
 
@@ -90,7 +92,7 @@ passwd -l root
 
 # Attempting to force legacy BIOS boot if we boot from UEFI
 if [ "$(arch)" = "x86_64" ]; then
-  dnf install grub2-pc-modules -y
+  dnf install grub2-pc-modules grub-pc -y
   grub2-install --target=i386-pc /dev/vda
 fi
 
@@ -167,6 +169,8 @@ echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot
 if ! grep -q growpart /etc/cloud/cloud.cfg; then
   sed -i 's/ - resizefs/ - growpart\n - resizefs/' /etc/cloud/cloud.cfg
 fi
+# temporary until 22.2
+sed -i 's/^system_info:/locale: C.UTF-8\nsystem_info:/' /etc/cloud/cloud.cfg
 
 # rocky cloud user
 echo -e 'rocky\tALL=(ALL)\tNOPASSWD: ALL' >> /etc/sudoers

Rocky-9-MATE.ks

@@ -0,0 +1,557 @@
+# Generated by pykickstart v3.36
+#version=DEVEL
+# X Window System configuration information
+xconfig  --startxonboot
+# Keyboard layouts
+keyboard 'us'
+# Root password
+rootpw --iscrypted --lock locked
+# System language
+lang en_US.UTF-8
+# Shutdown after installation
+shutdown
+# Network information
+network  --bootproto=dhcp --device=link --activate
+# Firewall configuration
+firewall --enabled --service=mdns
+# Use network installation
+url --url="http://dl.rockylinux.org/pub/rocky/9/BaseOS/$basearch/os/"
+repo --name="BaseOS" --baseurl=http://dl.rockylinux.org/pub/rocky/9/BaseOS/$basearch/os/ --cost=200
+repo --name="AppStream" --baseurl=http://dl.rockylinux.org/pub/rocky/9/AppStream/$basearch/os/ --cost=200
+repo --name="CRB" --baseurl=http://dl.rockylinux.org/pub/rocky/9/CRB/$basearch/os/ --cost=200
+repo --name="extras" --baseurl=http://dl.rockylinux.org/pub/rocky/9/extras/$basearch/os --cost=200
+repo --name="epel" --baseurl=https://dl.fedoraproject.org/pub/epel/9/Everything/$basearch/ --cost=200
+# System timezone
+timezone US/Eastern
+# SELinux configuration
+selinux --enforcing
+# System services
+services --disabled="sshd" --enabled="NetworkManager,ModemManager"
+# System bootloader configuration
+bootloader --location=none
+# Clear the Master Boot Record
+zerombr
+# Partition clearing information
+clearpart --all
+# Disk partitioning information
+part / --fstype="ext4" --size=5120
+part / --size=7168
+
+%post
+# FIXME: it'd be better to get this installed from a package
+cat > /etc/rc.d/init.d/livesys << EOF
+#!/bin/bash
+#
+# live: Init script for live image
+#
+# chkconfig: 345 00 99
+# description: Init script for live image.
+### BEGIN INIT INFO
+# X-Start-Before: display-manager chronyd
+### END INIT INFO
+
+. /etc/init.d/functions
+
+if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ]; then
+    exit 0
+fi
+
+if [ -e /.liveimg-configured ] ; then
+    configdone=1
+fi
+
+exists() {
+    which \$1 >/dev/null 2>&1 || return
+    \$*
+}
+
+livedir="LiveOS"
+for arg in \`cat /proc/cmdline\` ; do
+  if [ "\${arg##rd.live.dir=}" != "\${arg}" ]; then
+    livedir=\${arg##rd.live.dir=}
+    continue
+  fi
+  if [ "\${arg##live_dir=}" != "\${arg}" ]; then
+    livedir=\${arg##live_dir=}
+  fi
+done
+
+# Enable swap unless requested otherwise
+swaps=\`blkid -t TYPE=swap -o device\`
+if ! strstr "\`cat /proc/cmdline\`" noswap && [ -n "\$swaps" ] ; then
+  for s in \$swaps ; do
+    action "Enabling swap partition \$s" swapon \$s
+  done
+fi
+if ! strstr "\`cat /proc/cmdline\`" noswap && [ -f /run/initramfs/live/\${livedir}/swap.img ] ; then
+  action "Enabling swap file" swapon /run/initramfs/live/\${livedir}/swap.img
+fi
+
+# Support for persistent homes
+mountPersistentHome() {
+  # support label/uuid
+  if [ "\${homedev##LABEL=}" != "\${homedev}" -o "\${homedev##UUID=}" != "\${homedev}" ]; then
+    homedev=\`/sbin/blkid -o device -t "\$homedev"\`
+  fi
+
+  # if we're given a file rather than a blockdev, loopback it
+  if [ "\${homedev##mtd}" != "\${homedev}" ]; then
+    # mtd devs don't have a block device but get magic-mounted with -t jffs2
+    mountopts="-t jffs2"
+  elif [ ! -b "\$homedev" ]; then
+    loopdev=\`losetup -f\`
+    if [ "\${homedev##/run/initramfs/live}" != "\${homedev}" ]; then
+      action "Remounting live store r/w" mount -o remount,rw /run/initramfs/live
+    fi
+    losetup \$loopdev \$homedev
+    homedev=\$loopdev
+  fi
+
+  # if it's encrypted, we need to unlock it
+  if [ "\$(/sbin/blkid -s TYPE -o value \$homedev 2>/dev/null)" = "crypto_LUKS" ]; then
+    echo
+    echo "Setting up encrypted /home device"
+    plymouth ask-for-password --command="cryptsetup luksOpen \$homedev EncHome"
+    homedev=/dev/mapper/EncHome
+  fi
+
+  # and finally do the mount
+  mount \$mountopts \$homedev /home
+  # if we have /home under what's passed for persistent home, then
+  # we should make that the real /home.  useful for mtd device on olpc
+  if [ -d /home/home ]; then mount --bind /home/home /home ; fi
+  [ -x /sbin/restorecon ] && /sbin/restorecon /home
+  if [ -d /home/liveuser ]; then USERADDARGS="-M" ; fi
+}
+
+# Help locate persistent homes
+findPersistentHome() {
+  for arg in \`cat /proc/cmdline\` ; do
+    if [ "\${arg##persistenthome=}" != "\${arg}" ]; then
+      homedev=\${arg##persistenthome=}
+    fi
+  done
+}
+
+if strstr "\`cat /proc/cmdline\`" persistenthome= ; then
+  findPersistentHome
+elif [ -e /run/initramfs/live/\${livedir}/home.img ]; then
+  homedev=/run/initramfs/live/\${livedir}/home.img
+fi
+
+# Mount the persistent home if it's available
+if ! strstr "\`cat /proc/cmdline\`" nopersistenthome && [ -n "\$homedev" ] ; then
+  action "Mounting persistent /home" mountPersistentHome
+fi
+
+if [ -n "\$configdone" ]; then
+  exit 0
+fi
+
+# Create the liveuser (no password) so automatic logins and sudo works
+action "Adding live user" useradd \$USERADDARGS -c "Live System User" liveuser
+passwd -d liveuser > /dev/null
+usermod -aG wheel liveuser > /dev/null
+
+# Same for root
+passwd -d root > /dev/null
+
+# Turn off firstboot (similar to a DVD/minimal install, where it asks
+# for the user to accept the EULA before bringing up a TTY)
+systemctl --no-reload disable firstboot-text.service 2> /dev/null || :
+systemctl --no-reload disable firstboot-graphical.service 2> /dev/null || :
+systemctl stop firstboot-text.service 2> /dev/null || :
+systemctl stop firstboot-graphical.service 2> /dev/null || :
+
+# Prelinking damages the images
+sed -i 's/PRELINKING=yes/PRELINKING=no/' /etc/sysconfig/prelink &>/dev/null || :
+
+# Turn off mdmonitor by default
+systemctl --no-reload disable mdmonitor.service 2> /dev/null || :
+systemctl --no-reload disable mdmonitor-takeover.service 2> /dev/null || :
+systemctl stop mdmonitor.service 2> /dev/null || :
+systemctl stop mdmonitor-takeover.service 2> /dev/null || :
+
+# Even if there isn't gnome, this doesn't hurt.
+gsettings set org.gnome.software download-updates 'false' || :
+
+# Disable cron
+systemctl --no-reload disable crond.service 2> /dev/null || :
+systemctl --no-reload disable atd.service 2> /dev/null || :
+systemctl stop crond.service 2> /dev/null || :
+systemctl stop atd.service 2> /dev/null || :
+
+# Disable abrt
+systemctl --no-reload disable abrtd.service 2> /dev/null || :
+systemctl stop abrtd.service 2> /dev/null || :
+
+# Don't sync the system clock when running live (RHBZ #1018162)
+sed -i 's/rtcsync//' /etc/chrony.conf
+
+# Mark things as configured
+touch /.liveimg-configured
+
+# add static hostname to work around xauth bug
+# https://bugzilla.redhat.com/show_bug.cgi?id=679486
+# the hostname must be something else than 'localhost'
+# https://bugzilla.redhat.com/show_bug.cgi?id=1370222
+echo "localhost-live" > /etc/hostname
+
+EOF
+
+# HAL likes to start late.
+cat > /etc/rc.d/init.d/livesys-late << EOF
+#!/bin/bash
+#
+# live: Late init script for live image
+#
+# chkconfig: 345 99 01
+# description: Late init script for live image.
+
+. /etc/init.d/functions
+
+if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ] || [ -e /.liveimg-late-configured ] ; then
+    exit 0
+fi
+
+exists() {
+    which \$1 >/dev/null 2>&1 || return
+    \$*
+}
+
+touch /.liveimg-late-configured
+
+# Read some stuff out of the kernel cmdline
+for o in \`cat /proc/cmdline\` ; do
+    case \$o in
+    ks=*)
+        ks="--kickstart=\${o#ks=}"
+        ;;
+    xdriver=*)
+        xdriver="\${o#xdriver=}"
+        ;;
+    esac
+done
+
+# If liveinst or textinst is given, start installer
+if strstr "\`cat /proc/cmdline\`" liveinst ; then
+   plymouth --quit
+   /usr/sbin/liveinst \$ks
+fi
+if strstr "\`cat /proc/cmdline\`" textinst ; then
+   plymouth --quit
+   /usr/sbin/liveinst --text \$ks
+fi
+
+# Configure X, allowing user to override xdriver
+if [ -n "\$xdriver" ]; then
+   cat > /etc/X11/xorg.conf.d/00-xdriver.conf <<FOE
+Section "Device"
+	Identifier	"Videocard0"
+	Driver	"\$xdriver"
+EndSection
+FOE
+fi
+
+EOF
+
+chmod 755 /etc/rc.d/init.d/livesys
+/sbin/restorecon /etc/rc.d/init.d/livesys
+/sbin/chkconfig --add livesys
+
+chmod 755 /etc/rc.d/init.d/livesys-late
+/sbin/restorecon /etc/rc.d/init.d/livesys-late
+/sbin/chkconfig --add livesys-late
+
+# Enable tmpfs for /tmp - this is a good idea
+systemctl enable tmp.mount
+
+# make it so that we don't do writing to the overlay for things which
+# are just tmpdirs/caches
+# note https://bugzilla.redhat.com/show_bug.cgi?id=1135475
+cat >> /etc/fstab << EOF
+vartmp   /var/tmp    tmpfs   defaults   0  0
+EOF
+
+# PackageKit likes to play games. Let's fix that.
+rm -f /var/lib/rpm/__db*
+releasever=$(rpm -q --qf '%{version}\n' --whatprovides system-release)
+basearch=$(uname -i)
+rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
+echo "Packages within this LiveCD"
+rpm -qa
+# Note that running rpm recreates the rpm db files which aren't needed or wanted
+rm -f /var/lib/rpm/__db*
+
+# go ahead and pre-make the man -k cache (#455968)
+/usr/bin/mandb
+
+# make sure there aren't core files lying around
+rm -f /core*
+
+# remove random seed, the newly installed instance should make it's own
+rm -f /var/lib/systemd/random-seed
+
+# convince readahead not to collect
+# FIXME: for systemd
+
+echo 'File created by kickstart. See systemd-update-done.service(8).' \
+    | tee /etc/.updated >/var/.updated
+
+# Drop the rescue kernel and initramfs, we don't need them on the live media itself.
+# See bug 1317709
+rm -f /boot/*-rescue*
+
+# Disable network service here, as doing it in the services line
+# fails due to RHBZ #1369794 - the error is expected
+/sbin/chkconfig network off
+
+# Remove machine-id on generated images
+rm -f /etc/machine-id
+touch /etc/machine-id
+
+%end
+
+%post --nochroot
+cp $INSTALL_ROOT/usr/share/licenses/*-release/* $LIVE_ROOT/
+
+# only works on x86_64
+if [ "$(uname -i)" = "i386" -o "$(uname -i)" = "x86_64" ]; then
+    # For livecd-creator builds
+    if [ ! -d $LIVE_ROOT/LiveOS ]; then mkdir -p $LIVE_ROOT/LiveOS ; fi
+    cp /usr/bin/livecd-iso-to-disk $LIVE_ROOT/LiveOS
+
+    # For lorax/livemedia-creator builds
+    sed -i '
+    /## make boot.iso/ i\
+    # Add livecd-iso-to-disk script to .iso filesystem at /LiveOS/\
+    <% f = "usr/bin/livecd-iso-to-disk" %>\
+    %if exists(f):\
+        install ${f} ${LIVEDIR}/${f|basename}\
+    %endif\
+    ' /usr/share/lorax/templates.d/99-generic/live/x86.tmpl
+fi
+
+%end
+
+%post
+# mate configuration
+
+cat >> /etc/rc.d/init.d/livesys << EOF
+# make the installer show up
+if [ -f /usr/share/applications/liveinst.desktop  ]; then
+  # Show harddisk install in shell dash
+  sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop ""
+fi
+mkdir /home/liveuser/Desktop
+cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
+chmod +x /home/liveuser/Desktop/liveinst.desktop
+
+# move to anaconda - probably not required for MATE.
+mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
+
+if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop  ]; then
+  mkdir -p ~liveuser/.config/autostart
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/
+fi
+
+# rebuild schema cache with any overrides we installed
+glib-compile-schemas /usr/share/glib-2.0/schemas
+
+# set up lightdm autologin
+sed -i 's/^#autologin-user=.*/autologin-user=liveuser/' /etc/lightdm/lightdm.conf
+sed -i 's/^#autologin-user-timeout=.*/autologin-user-timeout=0/' /etc/lightdm/lightdm.conf
+sed -i 's/^#show-language-selector=.*/show-language-selector=true/' /etc/lightdm/lightdm-gtk-greeter.conf
+
+# set MATE as default session, otherwise login will fail
+sed -i 's/^#user-session=.*/user-session=mate/' /etc/lightdm/lightdm.conf
+
+# Turn off PackageKit-command-not-found while uninstalled
+if [ -f /etc/PackageKit/CommandNotFound.conf  ]; then
+  sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
+fi
+
+# The updater applet might or might not exist
+rm -f /etc/xdg/autostart/org.mageia.dnfdragora-updater.desktop
+
+# reset selinux contexts
+chown -R liveuser:liveuser /home/liveuser/
+restorecon -R /home/liveuser/
+
+EOF
+
+# this doesn't come up automatically. not sure why.
+systemctl enable --force lightdm.service
+
+# CRB needs to be enabled for EPEL to function.
+dnf config-manager --set-enabled crb
+
+%end
+
+%packages
+@anaconda-tools
+@base-x
+@core
+@dial-up
+@fonts
+@guest-desktop-agents
+@hardware-support
+@input-methods
+@multimedia
+@standard
+NetworkManager-adsl
+NetworkManager-bluetooth
+NetworkManager-l2tp-gnome
+NetworkManager-libreswan-gnome
+NetworkManager-openconnect-gnome
+NetworkManager-openvpn-gnome
+NetworkManager-ovs
+NetworkManager-ppp
+NetworkManager-pptp-gnome
+NetworkManager-team
+NetworkManager-wifi
+NetworkManager-wwan
+aajohan-comfortaa-fonts
+anaconda
+anaconda-install-env-deps
+anaconda-live
+atril
+atril-caja
+atril-thumbnailer
+caja
+caja-actions
+chkconfig
+dconf-editor
+dracut-live
+efi-filesystem
+efibootmgr
+efivar-libs
+engrampa
+eom
+epel-release
+f36-backgrounds-extras-mate
+f36-backgrounds-mate
+filezilla
+firefox
+firewall-applet
+firewall-config
+glibc-all-langpacks
+gnome-disk-utility
+gnome-epub-thumbnailer
+gnome-themes-extra
+gparted
+grub2-common
+grub2-efi-*64
+grub2-efi-*64-cdboot
+grub2-pc-modules
+grub2-tools
+grub2-tools-efi
+grub2-tools-extra
+grub2-tools-minimal
+grubby
+gstreamer1-plugins-ugly-free
+gtk2-engines
+gucharmap
+gvfs-fuse
+gvfs-gphoto2
+gvfs-mtp
+gvfs-smb
+hexchat
+initial-setup-gui
+initscripts
+kernel
+kernel-modules
+kernel-modules-extra
+libmatekbd
+libmatemixer
+libmateweather
+libreoffice-calc
+libreoffice-emailmerge
+libreoffice-graphicfilter
+libreoffice-impress
+libreoffice-writer
+libsecret
+lightdm
+lm_sensors
+marco
+mate-applets
+mate-backgrounds
+mate-calc
+mate-control-center
+mate-desktop
+mate-dictionary
+mate-disk-usage-analyzer
+mate-icon-theme
+mate-media
+mate-menu
+mate-menus
+mate-menus-preferences-category-menu
+mate-notification-daemon
+mate-panel
+mate-polkit
+mate-power-manager
+mate-screensaver
+mate-screenshot
+mate-search-tool
+mate-sensors-applet
+mate-session-manager
+mate-settings-daemon
+mate-system-log
+mate-system-monitor
+mate-terminal
+mate-themes
+mate-user-admin
+mate-user-guide
+mate-utils
+memtest86+
+mozo
+network-manager-applet
+nm-connection-editor
+orca
+p7zip
+p7zip-plugins
+parole
+pavucontrol
+pipewire-alsa
+pipewire-pulseaudio
+pluma
+pluma-plugins
+rocky-backgrounds
+seahorse
+seahorse-caja
+setroubleshoot
+shim-*64
+slick-greeter-mate
+syslinux
+thunderbird
+tigervnc
+usermode-gtk
+vim-enhanced
+wireplumber
+xdg-user-dirs-gtk
+xmodmap
+xrdb
+yelp
+-@3d-printing
+-@admin-tools
+-audacious
+-brasero
+-evolution-help
+-fedora-icon-theme
+-gnome-icon-theme
+-gnome-icon-theme-symbolic
+-gnome-logs
+-gnome-software
+-gnome-user-docs
+-hplip
+-isdn4k-utils
+-mpage
+-sane-backends
+-shim-unsigned-*64
+-systemd-oomd-defaults
+-telnet
+-xane-gimp
+-xsane
+
+%end

live/9/x86_64/peridot/rocky-live-mate-common.ks

@@ -0,0 +1,135 @@
+# mate
+%packages
+rocky-backgrounds
+thunderbird
+firefox
+f36-backgrounds-mate
+f36-backgrounds-extras-mate
+
+NetworkManager-adsl
+NetworkManager-bluetooth
+NetworkManager-l2tp-gnome
+NetworkManager-libreswan-gnome
+NetworkManager-openconnect-gnome
+NetworkManager-openvpn-gnome
+NetworkManager-ovs
+NetworkManager-ppp
+NetworkManager-pptp-gnome
+NetworkManager-team
+NetworkManager-wifi
+NetworkManager-wwan
+atril
+atril-caja
+atril-thumbnailer
+caja
+caja-actions
+dconf-editor
+engrampa
+eom
+filezilla
+firewall-config
+gnome-disk-utility
+gnome-epub-thumbnailer
+gnome-logs
+gnome-themes-extra
+gparted
+gstreamer1-plugins-ugly-free
+gtk2-engines
+gucharmap
+gvfs-fuse
+gvfs-gphoto2
+gvfs-mtp
+gvfs-smb
+hexchat
+initial-setup-gui
+libmatekbd
+libmatemixer
+libmateweather
+libsecret
+lightdm
+lm_sensors
+marco
+mate-applets
+mate-backgrounds
+mate-calc
+mate-control-center
+mate-desktop
+mate-dictionary
+mate-disk-usage-analyzer
+mate-icon-theme
+mate-media
+mate-menus
+mate-menus-preferences-category-menu
+mate-notification-daemon
+mate-panel
+mate-polkit
+mate-power-manager
+mate-screensaver
+mate-screenshot
+mate-search-tool
+mate-session-manager
+mate-settings-daemon
+mate-system-log
+mate-system-monitor
+mate-terminal
+mate-themes
+mate-user-admin
+mate-user-guide
+mozo
+network-manager-applet
+nm-connection-editor
+orca
+p7zip
+p7zip-plugins
+parole
+pavucontrol
+pipewire-alsa
+pipewire-pulseaudio
+pluma
+seahorse
+seahorse-caja
+setroubleshoot
+slick-greeter-mate
+usermode-gtk
+vim-enhanced
+wireplumber
+xdg-user-dirs-gtk
+xmodmap
+xrdb
+yelp
+
+firewall-applet
+mate-menu
+mate-sensors-applet
+mate-utils
+pluma-plugins
+tigervnc
+
+libreoffice-calc
+libreoffice-emailmerge
+libreoffice-graphicfilter
+libreoffice-impress
+libreoffice-writer
+
+-@3d-printing
+-@admin-tools
+-brasero
+-fedora-icon-theme
+-gnome-icon-theme
+-gnome-icon-theme-symbolic
+-gnome-logs
+-gnome-software
+-gnome-user-docs
+-gnome-user-docs
+-evolution-help
+-telnet
+-audacious
+-systemd-oomd-defaults
+
+-xsane
+-xane-gimp
+-sane-backends
+-mpage
+-hplip
+-isdn4k-utils
+%end

live/9/x86_64/peridot/rocky-live-mate.ks

@@ -0,0 +1,63 @@
+# rocky-live-kde.ks
+# BROKEN
+
+%include rocky-live-base-spin.ks
+%include rocky-live-mate-common.ks
+
+part / --size 7168
+
+%post
+# mate configuration
+
+cat >> /etc/rc.d/init.d/livesys << EOF
+# make the installer show up
+if [ -f /usr/share/applications/liveinst.desktop  ]; then
+  # Show harddisk install in shell dash
+  sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop ""
+fi
+mkdir /home/liveuser/Desktop
+cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
+chmod +x /home/liveuser/Desktop/liveinst.desktop
+
+# move to anaconda - probably not required for MATE.
+mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
+
+if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop  ]; then
+  mkdir -p ~liveuser/.config/autostart
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/
+fi
+
+# rebuild schema cache with any overrides we installed
+glib-compile-schemas /usr/share/glib-2.0/schemas
+
+# set up lightdm autologin
+sed -i 's/^#autologin-user=.*/autologin-user=liveuser/' /etc/lightdm/lightdm.conf
+sed -i 's/^#autologin-user-timeout=.*/autologin-user-timeout=0/' /etc/lightdm/lightdm.conf
+sed -i 's/^#show-language-selector=.*/show-language-selector=true/' /etc/lightdm/lightdm-gtk-greeter.conf
+
+# set MATE as default session, otherwise login will fail
+sed -i 's/^#user-session=.*/user-session=mate/' /etc/lightdm/lightdm.conf
+
+# Turn off PackageKit-command-not-found while uninstalled
+if [ -f /etc/PackageKit/CommandNotFound.conf  ]; then
+  sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
+fi
+
+# The updater applet might or might not exist
+rm -f /etc/xdg/autostart/org.mageia.dnfdragora-updater.desktop
+
+# reset selinux contexts
+chown -R liveuser:liveuser /home/liveuser/
+restorecon -R /home/liveuser/
+#restorecon -R /
+
+EOF
+
+# this doesn't come up automatically. not sure why.
+systemctl enable --force lightdm.service
+
+# CRB needs to be enabled for EPEL to function.
+dnf config-manager --set-enabled crb
+
+%end

live/9/x86_64/peridot/rocky-live-xfce.ks

@@ -82,6 +82,7 @@ mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.des
 # this goes at the end after all other changes. 
 chown -R liveuser:liveuser /home/liveuser
 restorecon -R /home/liveuser
+#restorecon -R /
 
 EOF
 

live/9/x86_64/prod/rocky-live-mate-common.ks

@@ -0,0 +1,135 @@
+# mate
+%packages
+rocky-backgrounds
+thunderbird
+firefox
+f36-backgrounds-mate
+f36-backgrounds-extras-mate
+
+NetworkManager-adsl
+NetworkManager-bluetooth
+NetworkManager-l2tp-gnome
+NetworkManager-libreswan-gnome
+NetworkManager-openconnect-gnome
+NetworkManager-openvpn-gnome
+NetworkManager-ovs
+NetworkManager-ppp
+NetworkManager-pptp-gnome
+NetworkManager-team
+NetworkManager-wifi
+NetworkManager-wwan
+atril
+atril-caja
+atril-thumbnailer
+caja
+caja-actions
+dconf-editor
+engrampa
+eom
+filezilla
+firewall-config
+gnome-disk-utility
+gnome-epub-thumbnailer
+gnome-logs
+gnome-themes-extra
+gparted
+gstreamer1-plugins-ugly-free
+gtk2-engines
+gucharmap
+gvfs-fuse
+gvfs-gphoto2
+gvfs-mtp
+gvfs-smb
+hexchat
+initial-setup-gui
+libmatekbd
+libmatemixer
+libmateweather
+libsecret
+lightdm
+lm_sensors
+marco
+mate-applets
+mate-backgrounds
+mate-calc
+mate-control-center
+mate-desktop
+mate-dictionary
+mate-disk-usage-analyzer
+mate-icon-theme
+mate-media
+mate-menus
+mate-menus-preferences-category-menu
+mate-notification-daemon
+mate-panel
+mate-polkit
+mate-power-manager
+mate-screensaver
+mate-screenshot
+mate-search-tool
+mate-session-manager
+mate-settings-daemon
+mate-system-log
+mate-system-monitor
+mate-terminal
+mate-themes
+mate-user-admin
+mate-user-guide
+mozo
+network-manager-applet
+nm-connection-editor
+orca
+p7zip
+p7zip-plugins
+parole
+pavucontrol
+pipewire-alsa
+pipewire-pulseaudio
+pluma
+seahorse
+seahorse-caja
+setroubleshoot
+slick-greeter-mate
+usermode-gtk
+vim-enhanced
+wireplumber
+xdg-user-dirs-gtk
+xmodmap
+xrdb
+yelp
+
+firewall-applet
+mate-menu
+mate-sensors-applet
+mate-utils
+pluma-plugins
+tigervnc
+
+libreoffice-calc
+libreoffice-emailmerge
+libreoffice-graphicfilter
+libreoffice-impress
+libreoffice-writer
+
+-@3d-printing
+-@admin-tools
+-brasero
+-fedora-icon-theme
+-gnome-icon-theme
+-gnome-icon-theme-symbolic
+-gnome-logs
+-gnome-software
+-gnome-user-docs
+-gnome-user-docs
+-evolution-help
+-telnet
+-audacious
+-systemd-oomd-defaults
+
+-xsane
+-xane-gimp
+-sane-backends
+-mpage
+-hplip
+-isdn4k-utils
+%end

live/9/x86_64/prod/rocky-live-mate.ks

@@ -0,0 +1,63 @@
+# rocky-live-kde.ks
+# BROKEN
+
+%include rocky-live-base-spin.ks
+%include rocky-live-mate-common.ks
+
+part / --size 7168
+
+%post
+# mate configuration
+
+cat >> /etc/rc.d/init.d/livesys << EOF
+# make the installer show up
+if [ -f /usr/share/applications/liveinst.desktop  ]; then
+  # Show harddisk install in shell dash
+  sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop ""
+fi
+mkdir /home/liveuser/Desktop
+cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
+chmod +x /home/liveuser/Desktop/liveinst.desktop
+
+# move to anaconda - probably not required for MATE.
+mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
+
+if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop  ]; then
+  mkdir -p ~liveuser/.config/autostart
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/
+fi
+
+# rebuild schema cache with any overrides we installed
+glib-compile-schemas /usr/share/glib-2.0/schemas
+
+# set up lightdm autologin
+sed -i 's/^#autologin-user=.*/autologin-user=liveuser/' /etc/lightdm/lightdm.conf
+sed -i 's/^#autologin-user-timeout=.*/autologin-user-timeout=0/' /etc/lightdm/lightdm.conf
+sed -i 's/^#show-language-selector=.*/show-language-selector=true/' /etc/lightdm/lightdm-gtk-greeter.conf
+
+# set MATE as default session, otherwise login will fail
+sed -i 's/^#user-session=.*/user-session=mate/' /etc/lightdm/lightdm.conf
+
+# Turn off PackageKit-command-not-found while uninstalled
+if [ -f /etc/PackageKit/CommandNotFound.conf  ]; then
+  sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
+fi
+
+# The updater applet might or might not exist
+rm -f /etc/xdg/autostart/org.mageia.dnfdragora-updater.desktop
+
+# reset selinux contexts
+chown -R liveuser:liveuser /home/liveuser/
+restorecon -R /home/liveuser/
+#restorecon -R /
+
+EOF
+
+# this doesn't come up automatically. not sure why.
+systemctl enable --force lightdm.service
+
+# CRB needs to be enabled for EPEL to function.
+dnf config-manager --set-enabled crb
+
+%end

live/9/x86_64/prod/rocky-live-xfce.ks

@@ -82,6 +82,7 @@ mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.des
 # this goes at the end after all other changes. 
 chown -R liveuser:liveuser /home/liveuser
 restorecon -R /home/liveuser
+#restorecon -R /
 
 EOF
 

live/9/x86_64/stage/rocky-live-mate-common.ks

@@ -1,44 +1,116 @@
-# inherited from Fedora kickstarts F35 with minor changes
-
+# mate
 %packages
-# install env-group to resolve RhBug:1891500
-@^mate-desktop-environment
+rocky-backgrounds
+thunderbird
+firefox
+f36-backgrounds-mate
+f36-backgrounds-extras-mate
 
-compiz
-compiz-plugins-main
-compiz-plugins-extra
-compiz-manager
-compizconfig-python
-compiz-plugins-experimental
-libcompizconfig
-compiz-plugins-main
-ccsm
-simple-ccsm
-emerald-themes
-emerald
-fusion-icon
+NetworkManager-adsl
+NetworkManager-bluetooth
+NetworkManager-l2tp-gnome
+NetworkManager-libreswan-gnome
+NetworkManager-openconnect-gnome
+NetworkManager-openvpn-gnome
+NetworkManager-ovs
+NetworkManager-ppp
+NetworkManager-pptp-gnome
+NetworkManager-team
+NetworkManager-wifi
+NetworkManager-wwan
+atril
+atril-caja
+atril-thumbnailer
+caja
+caja-actions
+dconf-editor
+engrampa
+eom
+filezilla
+firewall-config
+gnome-disk-utility
+gnome-epub-thumbnailer
+gnome-logs
+gnome-themes-extra
+gparted
+gstreamer1-plugins-ugly-free
+gtk2-engines
+gucharmap
+gvfs-fuse
+gvfs-gphoto2
+gvfs-mtp
+gvfs-smb
+hexchat
+initial-setup-gui
+libmatekbd
+libmatemixer
+libmateweather
+libsecret
+lightdm
+lm_sensors
+marco
+mate-applets
+mate-backgrounds
+mate-calc
+mate-control-center
+mate-desktop
+mate-dictionary
+mate-disk-usage-analyzer
+mate-icon-theme
+mate-media
+mate-menus
+mate-menus-preferences-category-menu
+mate-notification-daemon
+mate-panel
+mate-polkit
+mate-power-manager
+mate-screensaver
+mate-screenshot
+mate-search-tool
+mate-session-manager
+mate-settings-daemon
+mate-system-log
+mate-system-monitor
+mate-terminal
+mate-themes
+mate-user-admin
+mate-user-guide
+mozo
+network-manager-applet
+nm-connection-editor
+orca
+p7zip
+p7zip-plugins
+parole
+pavucontrol
+pipewire-alsa
+pipewire-pulseaudio
+pluma
+seahorse
+seahorse-caja
+setroubleshoot
+slick-greeter-mate
+usermode-gtk
+vim-enhanced
+wireplumber
+xdg-user-dirs-gtk
+xmodmap
+xrdb
+yelp
 
-# blacklist applications which breaks mate-desktop
--audacious
+firewall-applet
+mate-menu
+mate-sensors-applet
+mate-utils
+pluma-plugins
+tigervnc
 
-# see https://bugzilla.redhat.com/show_bug.cgi?id=2068699
-# and https://bugzilla.redhat.com/show_bug.cgi?id=1933494
-# use earlyoom instead of systemd-oomd-defaults
-#earlyoom
-#-systemd-oomd-defaults
-
-# libreoffice
 libreoffice-calc
 libreoffice-emailmerge
 libreoffice-graphicfilter
 libreoffice-impress
 libreoffice-writer
 
-# FIXME; apparently the glibc maintainers dislike this, but it got put into the
-# desktop image at some point.  We won't touch this one for now.
-nss-mdns
-
-# Drop things for size
 -@3d-printing
 -@admin-tools
 -brasero
@@ -48,14 +120,16 @@ nss-mdns
 -gnome-logs
 -gnome-software
 -gnome-user-docs
-
--@mate-applications
-
-# Help and art can be big, too
 -gnome-user-docs
 -evolution-help
-
-# Legacy cmdline things we don't want
 -telnet
+-audacious
+-systemd-oomd-defaults
 
+-xsane
+-xane-gimp
+-sane-backends
+-mpage
+-hplip
+-isdn4k-utils
 %end

live/9/x86_64/stage/rocky-live-mate.ks

@@ -1,15 +1,15 @@
-# inherited from Fedora kickstarts F35
+# rocky-live-kde.ks
+# BROKEN
 
-%include rocky-live-base.ks
+%include rocky-live-base-spin.ks
 %include rocky-live-mate-common.ks
-%include rocky-live-minimization.ks
 
-part / --size 8192
+part / --size 7168
 
 %post
+# mate configuration
+
 cat >> /etc/rc.d/init.d/livesys << EOF
-
-
 # make the installer show up
 if [ -f /usr/share/applications/liveinst.desktop  ]; then
   # Show harddisk install in shell dash
@@ -17,17 +17,24 @@ if [ -f /usr/share/applications/liveinst.desktop  ]; then
 fi
 mkdir /home/liveuser/Desktop
 cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
-
-# and mark it as executable
 chmod +x /home/liveuser/Desktop/liveinst.desktop
 
+# move to anaconda - probably not required for MATE.
+mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
+
+if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop  ]; then
+  mkdir -p ~liveuser/.config/autostart
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/
+  cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/
+fi
+
 # rebuild schema cache with any overrides we installed
 glib-compile-schemas /usr/share/glib-2.0/schemas
 
 # set up lightdm autologin
 sed -i 's/^#autologin-user=.*/autologin-user=liveuser/' /etc/lightdm/lightdm.conf
 sed -i 's/^#autologin-user-timeout=.*/autologin-user-timeout=0/' /etc/lightdm/lightdm.conf
-#sed -i 's/^#show-language-selector=.*/show-language-selector=true/' /etc/lightdm/lightdm-gtk-greeter.conf
+sed -i 's/^#show-language-selector=.*/show-language-selector=true/' /etc/lightdm/lightdm-gtk-greeter.conf
 
 # set MATE as default session, otherwise login will fail
 sed -i 's/^#user-session=.*/user-session=mate/' /etc/lightdm/lightdm.conf
@@ -37,12 +44,20 @@ if [ -f /etc/PackageKit/CommandNotFound.conf  ]; then
   sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
 fi
 
-# no updater applet in live environment
+# The updater applet might or might not exist
 rm -f /etc/xdg/autostart/org.mageia.dnfdragora-updater.desktop
 
-# make sure to set the right permissions and selinux contexts
+# reset selinux contexts
 chown -R liveuser:liveuser /home/liveuser/
 restorecon -R /home/liveuser/
+#restorecon -R /
+
 EOF
 
+# this doesn't come up automatically. not sure why.
+systemctl enable --force lightdm.service
+
+# CRB needs to be enabled for EPEL to function.
+dnf config-manager --set-enabled crb
+
 %end

live/9/x86_64/stage/rocky-live-xfce.ks

@@ -82,6 +82,7 @@ mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.des
 # this goes at the end after all other changes. 
 chown -R liveuser:liveuser /home/liveuser
 restorecon -R /home/liveuser
+#restorecon -R /
 
 EOF