Adjusted the repo as migrated from pagure to the new specialized content.

modules/ROOT/assets/attachments/services/httpd-basic-setup/zvhost-static-html.template

@@ -0,0 +1,195 @@
+# Apache vhost configuration for a static html server.
+# It manages SSL connections including certificates.
+# Initially, a self-signed certificate is active. 
+# Incoming http traffic is automatically redirected to https.
+# Version 2.1
+
+#==> To adjust in vi/vim copy and adjust to the vi command line:
+# : %s/SHORT_DESCR/real_short_descr/g	e.g. my-domain.org production production server
+# : %s/FQN_NAME/your_domain/g		e.g. my-domain.org
+# : %s/BASE_NAME/your_shortname/g	e.g. my-domain
+# : %s/OPTIONAL_ALIAS/your_alias/g	e.g. www.my-domain.org
+# afterwards delete these lines
+
+
+# Certificates are managed by Apache md module.
+#==> To activate, remove the leading '#' character and comment out 
+# the default distribution provided certificates further down. 
+#==> Adjust the mail address as appropriate!
+#MDContactEmail root@FQN_NAME
+#MDCertificateAgreement accepted
+#MDomain FQN_NAME 
+
+<VirtualHost *:443>
+	# Secure virtual WEB host configuration for 
+	# SHORT_DESCR
+
+	# The site can be accessed by https/ssl only. Without a valid certificate
+	# you have to use a self-signed certificate as a quick temporary fix.
+
+	ServerName      FQN_NAME
+	ServerAlias	OPTIONAL_ALIAS
+
+	#==> Adjust the mail address as appropriate!
+	ServerAdmin     root@localhost
+
+	# ##########################################################################
+	# NOTE: We re-route everything from the insecure site to this secure site!
+	# ##########################################################################
+
+	# Optional: Ensure that all registered domain names are rewritten to the
+	# official base name
+	#RewriteEngine   On
+	#RewriteCond     %{HTTP_HOST}    !^FQN_NAME [NC]
+	#RewriteCond     %{HTTP_HOST}    !^$
+	#RewriteRule     ^(.*)$          https://FQN_NAME$1  [R=301,L]
+
+	# ====================================================================
+	# Certificates configuration
+	# ====================================================================
+	SSLEngine on
+	# We rely on Fedora's systemwide configuration of SSL security.
+
+	# By default, certificates are managed by Apache md module (see above)
+	# In this case, no certificates needs bo be configured here.
+	# Otherwise, insert proper certificate configuration here.
+
+	# DEFAULT distribution provided, needed for initial startup.
+	#==> Comment OUT when module md created a certificate or you use custom
+	# certificates.
+	SSLCertificateFile	/etc/pki/tls/certs/localhost.crt
+	SSLCertificateKeyFile	/etc/pki/tls/private/localhost.key
+
+	# LetsEncrypt certificates managed by certbot (NOT by module md!)
+	#SSLCertificateFile      /etc/letsencrypt/live/DOMAIN_NAME/cert.pem
+	#SSLCertificateKeyFile   /etc/letsencrypt/live/DOMAIN_NAME/privkey.pem
+	#SSLCertificateChainFile /etc/letsencrypt/live/DOMAIN_NAME/chain.pem
+
+	# ===============================================================
+	# Directory Locations
+	# ===============================================================
+	DirectoryIndex	index.html
+	DocumentRoot	/srv/BASE_NAME/htdocs
+	# Specific to default 2.4 configuration:
+	# Enable access to server-specific base file location
+	<Directory "/srv/BASE_NAME">
+		AllowOverride None
+		# Allow open access:
+		Require all granted
+	</Directory>
+	# Further relax access to the default document root
+	<Directory "/srv/BASE_NAME/htdocs">
+		#
+		# Possible values for the Options directive are "None", "All",
+		# or any combination of:
+		#   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
+		#
+		# Note that "MultiViews" must be named *explicitly* --- "Options All"
+		# doesn't give it to you.
+		#
+		# The Options directive is both complicated and important.  Please see
+		# http://httpd.apache.org/docs/2.4/mod/core.html#options
+		# for more information.
+		#
+		Options Indexes FollowSymLinks
+
+		#
+		# AllowOverride controls what directives may be placed in .htaccess files.
+		# It can be "All", "None", or any combination of the keywords:
+		#   Options FileInfo AuthConfig Limit
+		#
+		AllowOverride None
+
+		#
+		# Controls who can get stuff from this server:
+		# Allow open access:
+		Require all granted
+
+	</Directory>
+
+
+	# ===============================================================
+	# Optional: Protect access to start page (and subsequent pages) 
+	# ==>       Ensure you created the additional auth.d directory 
+	#           including SELinux labels
+	# ===============================================================
+	#<Location />
+	#	AuthType Basic
+	#	AuthName "Access start page"
+	#	AuthUserFile /srv/BASE_NAME/auth.d/htuser
+	#	Require valid-user
+	#</Location>
+
+
+	# ===============================================================
+	# Optional: Configure webDAV access 
+	#==>        Ensure you created the additional davlock directory 
+	#           including SELinux labels
+	# ===============================================================
+	#DavLockDB /srv/SERVER_SHORT_NAME/davlock/dav_lock_db
+
+	#<Location /dav>
+	#	DAV On
+	#	ForceType text/plain
+
+	#	Order Allow,Deny
+	#	Allow from all
+	#	Options all
+	#	DirectoryIndex none
+
+		# Optional: Protect basic dav page (and all subsequent page)
+		#AuthType Basic
+		#AuthName "Application Server WebDAV access"
+		#AuthUserFile /srv/SERVER_SHORT_NAME/auth.d/htdavuser
+		#Require valid-user
+	#</Location>
+
+
+	# ===============================================================
+	# Logging configuration
+	# ===============================================================
+	# Use separate log files for the SSL virtual host; note that LogLevel
+	# is not inherited from httpd.conf.
+	# NOTE: fail2ban searches for ~/logs/*access_log and  ~/logs/*error_log
+	#       to access log files to watch and analyze!
+	ErrorLog        logs/BASE_NAME-ssl_error_log
+	CustomLog       logs/BASE_NAME-ssl_access_log combined
+	LogLevel warn
+
+</VirtualHost>
+
+<VirtualHost *:80>
+	# INSECURE virtual WEB host configuration for 
+	# SHORT_DESCR
+
+	# NOTE: Everything from the insecure port 80 is redirected to this instance'
+	#       SECURE site
+
+	ServerName      FQN_NAME
+	ServerAlias	OPTIONAL_ALIAS
+
+	ServerAdmin     root@FQN_NAME
+
+	# ##########################################################################
+	# NOTE: We re-route everything to the secure site! 
+	#       We retain all aliase names for now.
+	#       There is no need for an exception for Let's Encrypt anymore. 
+	#       Version 2.x can deal with self-signed certificates and https
+	# ##########################################################################
+	RewriteEngine   On
+	RewriteRule	(.*)	https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
+
+
+	# ===============================================================
+	# Logging configuration
+	# ===============================================================
+	# Use separate log files for the SSL virtual host; note that LogLevel
+	# is not inherited from httpd.conf.
+	# NOTE: fail2ban searches for ~/logs/*access_log and  ~/logs/*error_log
+	#       to access log files to watch and analyze!
+	ErrorLog        logs/BASE_NAME-error_log
+	CustomLog       logs/BASE_NAME-access_log combined
+
+</VirtualHost>
+
+

modules/ROOT/assets/attachments/tutorials/imagefactory/fedora-server-kvm-dev.ks

@@ -0,0 +1,201 @@
+# fedora-server-vm-full.ks (rel. 1.02)
+# Kickstart file to build a Fedora Server Edition VM disk image.
+# The image aims to resemble as close as technically possible the
+# full features of a Fedora Server Edition in a virtual machine.
+#
+# The image uses GPT partition type as of default in Fedora 39.
+#
+# At first boot it opens a text mode basic configuration screen.
+#
+# This kickstart file is designed to be used with ImageFactory (in Koji).
+#
+# To build the image locally, you need to install ImageFactory and
+# various additional helpers and configuration files.
+# See Fedora Server Edition user documentation tutorial.
+
+# Use text mode install
+text
+
+# Keyboard layouts
+keyboard 'us'
+
+# System language
+lang en_US.UTF-8
+
+# System timezone
+# set time zone to GMT (Etcetera/UTC)
+timezone Etc/UTC --utc
+
+
+# Root password
+rootpw --iscrypted --lock locked
+
+# SELinux configuration
+selinux --enforcing
+
+
+# System bootloader configuration
+bootloader --location=mbr --timeout=1 --append="console=tty1 console=ttyS0,115200n8"
+
+# Network information
+network  --bootproto=dhcp --device=link --activate --onboot=on
+
+# Firewall configuration
+firewall --enabled --service=mdns
+
+
+# System services
+services --enabled="sshd,NetworkManager,chronyd,initial-setup"
+
+# Run the Setup Agent on first boot
+firstboot --reconfig
+
+# Partition Information. Use GPT by default (since Fedora 37)
+# Resemble the Partitioning used for Fedora Server Install media
+clearpart --all --initlabel --disklabel=gpt
+reqpart --add-boot
+part pv.007     --size=4000  --grow
+volgroup  sysvg  pv.007
+logvol / --vgname=sysvg --size=4000 --grow --maxsize=16000 --fstype=xfs --name=root --label=sysroot
+
+
+# Include URLs for network installation dynamically, dependent on Fedora release
+# and imagefactory runtime environment
+%include fedora-repo.ks
+
+# Shutdown after installation
+shutdown
+
+
+
+##### begin package list #############################################
+%packages --inst-langs=en
+
+@server-product
+@core
+@headless-management
+@standard
+@networkmanager-submodules
+# container management is an optional install item on disk media.
+# Install options not available with VMs. So we don't include it
+# despite trying to resemble a DVD installation as close as possible.
+##@container-management
+@domain-client
+@guest-agents
+
+# All arm-tools packages install on aarch64/armhfp only
+# TODO: on a x86_64 devel environment are @arm-tools not available
+# and cause a build error.
+# @arm-tools
+
+# Standard Fedora Package Groups
+## dracut-config-generic  ## included in =core=
+glibc-all-langpacks
+initial-setup
+kernel-core
+-dracut-config-rescue
+-generic-release*
+-initial-setup-gui
+-kernel
+-linux-firmware
+-plymouth
+# pulled in by @standard
+-smartmontools
+-smartmontools-selinux
+
+%end
+##### end package list ###############################################
+
+
+##### begin kickstart post script ####################################
+%post --erroronfail  --log=/root/anaconda-post-1.log
+
+# Find the architecture we are on
+arch=$(uname -m)
+
+# Import RPM GPG key, during installation saved in /etc/pki
+echo "Import RPM GPG key"
+releasever=$(rpm --eval '%{fedora}')
+basearch=$(uname -i)
+rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
+
+# See the systemd-random-seed.service man page that says:
+#   " It is recommended to remove the random seed from OS images intended
+#     for replication on multiple systems"
+# The newly installed instance should make it's own
+echo "Removing random-seed so it's not the same in every image."
+rm -f /var/lib/systemd/random-seed
+
+# When we build the image a networking config file gets left behind.
+# Let's clean it up.
+echo "Cleanup leftover networking configuration"
+rm -f /etc/NetworkManager/system-connections/*.nmconnection
+
+# Truncate the /etc/resolv.conf left over from NetworkManager during the
+# kickstart because the DNS server is environment specific.
+truncate -s 0 /etc/resolv.conf
+
+echo "Cleaning repodata to save space."
+dnf clean all
+
+# linux-firmware is installed by default and is quite large. As of mid 2020:
+#   Total download size: 97 M
+#   Installed size: 268 M
+# Not needed in virtual environment.
+echo "Removing linux-firmware package."
+rpm -e linux-firmware
+
+# Will ever anybody see this?
+echo "Packages within this disk image"
+rpm -qa --qf '%{size}\t%{name}-%{version}-%{release}.%{arch}\n' |sort -rn
+
+# Note that running rpm recreates the rpm db files which aren't needed or wanted
+rm -f /var/lib/rpm/__db*
+
+
+# Do we need a serial terminal with a VM?
+if [[ $arch == "aarch64" ]] || [[ $arch == "armv7l" ]]; then
+ # Anaconda adds console=tty0 to the grub boot line on all images. this is problematic
+ # when you are using fedora via serial console as you do not get any output post grub
+ # linux does a good job of knowing what consoles need to be enabled.
+ # https://bugzilla.redhat.com/show_bug.cgi?id=2022757
+ sed -i -e 's|console=tty0||g' /boot/loader/entries/*conf
+fi
+
+
+# Remove machine-id on pre generated images
+rm -f /etc/machine-id
+touch /etc/machine-id
+
+%end
+##### end kickstart post script #####################################
+
+
+##### begin custom post script (after base) #########################
+%post
+
+# When we build the image /var/log gets populated.
+# Let's clean it up.
+echo "Cleanup leftover in /var/log"
+cd /var/log  && find . -name \* -type f -delete 
+
+echo "Zeroing out empty space."
+# Create zeros file with nodatacow and no compression
+touch /var/tmp/zeros
+chattr +C /var/tmp/zeros
+# This forces the filesystem to reclaim space from deleted files
+dd bs=1M if=/dev/zero of=/var/tmp/zeros || :
+echo "(Don't worry -- that out-of-space error was expected.)"
+# Force sync to disk
+sync /
+rm -f /var/tmp/zeros
+sync /
+
+# setup systemd to boot to the right runlevel
+echo -n "Setting default runlevel to multiuser text mode"
+rm -f /etc/systemd/system/default.target
+ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target
+echo .
+
+%end
+##### end custom post script ########################################

modules/ROOT/assets/attachments/tutorials/imagefactory/fedora-server-kvm-dev.tdl

@@ -0,0 +1,16 @@
+<template>
+    <name>fedora-server-kvm-dev</name>
+    <os>
+        <name>Fedora</name>
+        <version>22</version>
+        <arch>x86_64</arch>
+        <install type='url'>
+          <url>https://kojipkgs.fedoraproject.org/compose/branched/Fedora-39-20231001.n.0/compose/Everything/x86_64/os</url>
+        </install>
+    </os>
+    <description>Fedora-server-kvm-dev</description>
+    <disk>
+      <size>7G</size>
+    </disk>
+</template>
+