@underpostnet/cyberia 3.2.80

package/nginx.conf

@@ -0,0 +1,128 @@
+# Generated by 'underpost docker-compose --generate --deploy-id dd-cyberia --docker-compose-id cyberia' — do not hand-edit.
+# Source of truth: engine-private/conf/dd-cyberia/conf.instances.json (multiInstance).
+# Single localhost gateway (dev compose). Access http://localhost/ (default),
+# http://localhost/<PATH> per variant. Client origins point back here
+# (compose.env CYBERIA_WS_ORIGIN=ws://localhost, CYBERIA_ENGINE_API_ORIGIN=http://localhost).
+
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ''      close;
+}
+
+# Docker embedded DNS: resolve upstream names per request so a variant that is
+# briefly down never fails nginx startup or config reload.
+resolver 127.0.0.11 ipv6=off valid=10s;
+
+proxy_http_version 1.1;
+
+server {
+    listen 80 default_server;
+    server_name localhost 127.0.0.1 _;
+
+        location = /healthz {
+            access_log off;
+            return 200 "ok\n";
+            add_header Content-Type text/plain;
+        }
+
+        # Shared content authority: REST API + engine-served assets (fonts, ui-icons).
+        location /api/ {
+            set $up_engine engine-cyberia:4005;
+            proxy_pass http://$up_engine;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location /assets/ {
+            set $up_engine engine-cyberia:4005;
+            proxy_pass http://$up_engine;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location = /ws {
+            set $up_server_default cyberia-server:8081;
+            proxy_pass http://$up_server_default;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location /FOREST/ws {
+            set $up_server_forest cyberia-server-forest:8081;
+            rewrite ^/FOREST/(.*)$ /$1 break;
+            proxy_pass http://$up_server_forest;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location /TEST/ws {
+            set $up_server_test cyberia-server-test:8081;
+            rewrite ^/TEST/(.*)$ /$1 break;
+            proxy_pass http://$up_server_test;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location / {
+            set $up_client_default cyberia-client:8081;
+            proxy_pass http://$up_client_default;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location = /FOREST { return 301 /FOREST/; }
+        location /FOREST {
+            set $up_client_forest cyberia-client-forest:8081;
+            proxy_pass http://$up_client_forest;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location = /TEST { return 301 /TEST/; }
+        location /TEST {
+            set $up_client_test cyberia-client-test:8081;
+            proxy_pass http://$up_client_test;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+}

package/nodemon.json

@@ -0,0 +1,6 @@
+{
+  "watch": ["./src"],
+  "ext": "js",
+  "delay": 0,
+  "ignore": ["src/client/public"]
+}

package/package.json

@@ -0,0 +1,101 @@
+{
+    "type": "module",
+    "main": "src/index.js",
+    "name": "@underpostnet/cyberia",
+    "version": "3.2.80",
+    "description": "Cyberia CLI — toolchain for the Cyberia MMO data layer, content pipeline, persistence, gRPC services, and ERC-1155 lifecycle on Hyperledger Besu.",
+    "scripts": {
+        "start": "node --max-old-space-size=8192 src/server",
+        "build": "node bin client",
+        "test": "NODE_ENV=test c8 mocha",
+        "test:monitor": "NODE_ENV=test c8 mocha test/deploy-monitor.test.js",
+        "dev": "NODE_ENV=development nodemon src/server",
+        "dev:container": "NODE_ENV=development node src/server",
+        "prod:container": "NODE_ENV=production node src/server",
+        "dev:api": "NODE_ENV=development nodemon --watch src --ignore src/client src/api",
+        "dev:client": "NODE_ENV=development node src/client.dev",
+        "dev:proxy": "NODE_ENV=development node src/proxy proxy",
+        "docs": "typedoc --options typedoc.json",
+        "install:global": "npm install -g prettier",
+        "install:test": "npm install -g mocha && npm install -g c8 && npm install -g coveralls-next",
+        "install": "npm run install:global && npm run install:test",
+        "prettier": "prettier --write .",
+        "fix": "npm audit fix --force && npm audit",
+        "baremetal": "node bin baremetal --dev --commission --ls --create-machine",
+        "security:secrets": "gitleaks detect --source . --config .gitleaks.toml --report-path ./gitleaks-report.json --report-format json --redact=0",
+        "security:secrets:ci": "gitleaks detect --source . --config .gitleaks.toml --redact=1",
+        "security:deps": "npm audit",
+        "security": "npm run security:secrets:ci && npm run security:deps",
+        "clean": "node bin env clean && node bin run clean",
+        "docker:generate": "node bin docker-compose --generate --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:up": "node bin docker-compose --up --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:up:build": "node bin docker-compose --up --build --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:down": "node bin docker-compose --down --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:down:volumes": "node bin docker-compose --down --volumes --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:restart": "node bin docker-compose --restart --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:build": "node bin docker-compose --build",
+        "docker:pull": "node bin docker-compose --pull --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:logs": "node bin docker-compose --logs --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:status": "node bin docker-compose --status --deploy-id dd-cyberia --docker-compose-id cyberia",
+        "docker:shell": "node bin docker-compose --shell",
+        "docker:reset": "node bin docker-compose --reset --deploy-id dd-cyberia --docker-compose-id cyberia"
+    },
+    "bin": {
+        "cyberia": "bin/index.js"
+    },
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/underpostnet/engine-ghpkg-cyberia.git"
+    },
+    "keywords": [
+        "cyberia",
+        "cyberia-cli",
+        "engine-cyberia",
+        "sidecar",
+        "data-layer",
+        "object-layer",
+        "atlas-sprite-sheet",
+        "ipfs",
+        "erc-1155",
+        "object-layer-token",
+        "hardhat",
+        "hyperledger-besu",
+        "blockchain",
+        "web3",
+        "underpost-platform",
+        "mmorpg"
+    ],
+    "author": "https://github.com/underpostnet",
+    "license": "MIT",
+    "bugs": {
+        "url": "https://github.com/underpostnet/engine-cyberia/issues"
+    },
+    "homepage": "https://github.com/underpostnet/engine-cyberia#readme",
+    "dependencies": {
+        "underpost": "^3.2.80",
+        "adm-zip": "^0.6.0",
+        "maxrects-packer": "^2.7.3",
+        "pngjs": "^7.0.0",
+        "jimp": "^1.6.0",
+        "sharp": "^0.34.5",
+        "ethers": "~6.16.0"
+    },
+    "publishConfig": {
+        "provenance": true,
+        "access": "public",
+        "registry": "https://registry.npmjs.org/"
+    },
+    "overrides": {
+        "simple-xml-to-json": "1.2.4",
+        "minimatch": "^10.2.2",
+        "glob": "^11.0.0",
+        "diff": ">=8.0.3",
+        "js-yaml": ">=3.14.2",
+        "debug": ">=4.3.6",
+        "serialize-javascript": ">=7.0.5",
+        "router": {
+            "path-to-regexp": ">=8.4.0"
+        },
+        "ws": "^8.20.2"
+    }
+}

package/packer/images/Rocky9Amd64/Makefile

@@ -0,0 +1,62 @@
+#!/usr/bin/make -f
+
+include ../scripts/check.mk
+
+PACKER ?= packer
+PACKER_LOG ?= 0
+TIMEOUT ?= 1h
+ARCH ?= x86_64
+
+# Detect if running on ARM host
+ifeq ($(shell uname -m),aarch64)
+    HOST_IS_ARM = true
+else
+    HOST_IS_ARM = false
+endif
+
+ifeq ($(wildcard /usr/share/OVMF/OVMF_CODE.fd),)
+	OVMF_SFX ?= _4M
+else
+	OVMF_SFX ?=
+endif
+
+export PACKER_LOG
+
+# Fallback
+ifeq ($(strip $(ARCH)),amd64)
+	ARCH = x86_64
+endif
+
+.PHONY: all clean
+
+all: rocky9.tar.gz
+
+$(eval $(call check_packages_deps))
+
+lint:
+	packer validate .
+	packer fmt -check -diff .
+
+format:
+	packer fmt .
+
+OVMF_VARS.fd: /usr/share/OVMF/OVMF_VARS${OVMF_SFX}.fd
+	cp -v $< ${ARCH}_VARS.fd
+
+SIZE_VARS.fd:
+ifeq ($(strip $(ARCH)),aarch64)
+	truncate -s 64m ${ARCH}_VARS.fd
+else
+	truncate -s 2m ${ARCH}_VARS.fd
+endif
+
+rocky9.tar.gz: check-deps clean OVMF_VARS.fd SIZE_VARS.fd
+	${PACKER} init rocky9.pkr.hcl && ${PACKER} build \
+		-var architecture=${ARCH} \
+		-var host_is_arm=${HOST_IS_ARM} \
+		-var timeout=${TIMEOUT} \
+		-var ovmf_suffix=${OVMF_SFX} \
+		rocky9.pkr.hcl
+
+clean:
+	${RM} -rf *.fd output-rocky9 rocky9.tar.gz

package/packer/images/Rocky9Amd64/QUICKSTART.md

@@ -0,0 +1,113 @@
+# Quick Start Guide - Rocky9 MAAS Image Build
+
+## Prerequisites Check
+
+Run these commands to verify your system is ready:
+
+```bash
+# Check hardware virtualization
+egrep -c '(vmx|svm)' /proc/cpuinfo  # Should be > 0
+
+# Check libvirt
+systemctl status libvirtd
+
+# Check QEMU
+qemu-system-x86_64 --version
+
+# Check Packer
+packer version
+```
+
+## Build Commands
+
+```bash
+# From the engine root directory
+cd /home/dd/engine
+
+# Option 1: Build and Upload (recommended)
+node bin baremetal --dev --packer-workflow-id Rocky9Amd64 --packer-maas-image-build
+
+# Option 2: Upload Only (skip rebuild, use existing artifact)
+node bin baremetal --dev --packer-workflow-id Rocky9Amd64 --packer-maas-image-upload
+
+# Option 3: Manual build
+cd packer/images/Rocky9Amd64
+packer init .
+PACKER_LOG=1 packer build .
+```
+
+## Build Process Timeline
+
+- **Download ISO**: ~5-10 minutes (1.3GB)
+- **VM Installation**: ~20-40 minutes
+- **Post-processing**: ~5-10 minutes
+- **Total**: ~30-60 minutes
+
+## Output
+
+The build produces:
+- `rocky9.tar.gz` - The MAAS-ready image (~1.2GB)
+
+## Upload to MAAS
+
+After successful build, upload happens automatically. To re-upload:
+
+```bash
+# Option 1: Use the CLI (recommended, includes MAAS profile auto-detection)
+node bin baremetal --dev --packer-workflow-id Rocky9Amd64 --packer-maas-image-upload
+
+# Option 2: Use the upload script directly
+./scripts/maas-upload-boot-resource.sh maas \
+  custom/rocky9 \
+  "Rocky 9 Custom" \
+  amd64/generic \
+  rhel/9 \
+  tgz \
+  packer/images/Rocky9Amd64/rocky9.tar.gz
+```
+
+### Upload-Only Flag Benefits
+
+The `--packer-maas-image-upload` flag allows you to:
+- ⚡ **Skip rebuild** - Saves 30-60 minutes
+- 💾 **Reuse artifacts** - Uses existing 1.2GB tarball
+- 🔄 **Retry uploads** - Re-upload if upload failed
+- 🎯 **Test uploads** - Upload to different MAAS instances
+
+## Common Issues
+
+### "No checksum found"
+✅ Fixed - ISO URL now uses Rocky-9-latest naming
+
+### "qemu-system-x86_64 not found"  
+✅ Fixed - Symlink created to /usr/libexec/qemu-kvm
+
+### "OVMF_CODE.fd not found"
+✅ Fixed - OVMF symlinks created
+
+### Build hangs or times out
+- Check system resources (RAM, CPU)
+- Verify network connectivity
+- Check logs: `packer_cache/` and console output
+
+## Monitoring Build Progress
+
+Watch the Packer output for:
+```
+==> qemu.rocky9: Downloading ISO...
+==> qemu.rocky9: Starting HTTP server on port...
+==> qemu.rocky9: Starting VM...
+==> qemu.rocky9: Waiting for shutdown...
+==> qemu.rocky9: Converting image...
+```
+
+## Clean Up After Build
+
+```bash
+# Remove build artifacts (keep only the tarball)
+cd packer/images/Rocky9Amd64
+rm -rf output-rocky9 packer_cache x86_64_VARS.fd
+
+# Disconnect NBD devices if build failed
+for i in {0..15}; do sudo qemu-nbd -d /dev/nbd${i} 2>/dev/null; done
+```

package/packer/images/Rocky9Amd64/README.md

@@ -0,0 +1,122 @@
+# Rocky 9 Packer template for MAAS
+
+## Introduction
+
+The Packer template in this directory creates a Rocky 9 AMD64/ARM64 image for use with MAAS.
+
+## Prerequisites to create the image
+
+* A machine running Ubuntu 22.04+ with the ability to run KVM virtual machines.
+* qemu-utils, libnbd-bin, nbdkit and fuse2fs
+* qemu-system
+* qemu-system-modules-spice (If building on Ubuntu 24.04 LTS "Noble")
+* ovmf
+* cloud-image-utils
+* parted
+* [Packer.](https://www.packer.io/intro/getting-started/install.html), v1.11.0 or newer
+
+## Requirements to deploy the image
+
+* [MAAS](https://maas.io) 3.3 or later, as that version introduces support for Rocky
+* [Curtin](https://launchpad.net/curtin) 22.1. If you have a MAAS with an earlier Curtin version, you can [patch](https://code.launchpad.net/~xnox/curtin/+git/curtin/+merge/415604) distro.py to deploy Rocky.
+
+## Customizing the image
+
+You can customize the deployment image by modifying http/rocky.ks. See the [RHEL kickstart documentation](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/performing_an_advanced_rhel_installation/kickstart-commands-and-options-reference_installing-rhel-as-an-experienced-user#part-or-partition_kickstart-commands-for-handling-storage) for more information.
+
+## Building the image using a proxy
+
+The Packer template downloads the Rocky ISO image from the Internet. You can tell Packer to use a proxy by setting the HTTP_PROXY environment variable to point to your proxy server. You can also redefine rocky_iso_url to a local file. If you want to skip the base image integrity check, set iso_checksum_type to none and remove iso_checksum.
+
+To use a proxy during the installation define the `KS_PROXY` variable in the environment, as bellow:
+
+```shell
+export KS_PROXY="\"${HTTP_PROXY}\""
+```
+
+# Building the image using a kickstart mirror
+
+To tell Packer to use a specific mirror set the `KS_MIRROR` environment variable
+poiniting to the mirror URL.
+
+```shell
+export KS_MIRROR="https://dl.rockylinux.org/pub/rocky/9"
+```
+
+## Building an image
+
+You can build the image using the Makefile:
+
+```shell
+make
+```
+
+You can also manually run packer. Set your current working directory to packer-maas/rocky9, where this file resides, and generate an image with:
+
+```shell
+packer init
+PACKER_LOG=1 packer build .
+```
+
+The installation runs in a non-interactive mode.
+
+Note: rocky9.pkr.hcl runs Packer in headless mode, with the serial port output from qemu redirected to stdio to give feedback on image creation process. If you wish to see more, change the value of `headless` to `false` in rocky9.pkr.hcl, remove `[ "-serial", "stdio" ]` from `qemuargs` section and select `View`, then `serial0` in the qemu window that appears during build. This lets you watch progress of the image build script. Press `ctrl-b 2` to switch to shell to explore more, and `ctrl-b 1` to go back to log view.
+
+### Makefile Parameters
+
+#### ARCH
+
+Defaults to x86_64 to build AMD64 compatible images. In order to build ARM64 images, use ARCH=aarch64
+
+#### TIMEOUT
+
+The timeout to apply when building the image. The default value is set to 1h.
+
+## Uploading an image to MAAS
+
+```shell
+maas $PROFILE boot-resources create name='custom/rocky9' \
+    title='Rocky 9 Custom' architecture='amd64/generic' \
+    base_image='rhel/9' filetype='tgz' \
+    content@=rocky9.tar.gz
+```
+
+For ARM64, use:
+
+```shell
+maas $PROFILE boot-resources create name='custom/rocky9' \
+    title='Rocky 9 Custom' architecture='arm64/generic' \
+    base_image='rhel/9' filetype='tgz' \
+    content@=rocky9.tar.gz
+```
+
+Please note that, currently due to lack of support in curtin, deploying ARM64 images needs a preseed file. This is due to [LP# 2090874](https://bugs.launchpad.net/curtin/+bug/2090874) and currently is in the process of getting fixed.
+
+```
+#cloud-config
+debconf_selections:
+ maas: |
+  {{for line in str(curtin_preseed).splitlines()}}
+  {{line}}
+  {{endfor}}
+
+extract_commands:
+  grub_install: curtin in-target -- cp -v /boot/efi/EFI/rocky/shimaa64.efi /boot/efi/EFI/rocky/shimx64.efi
+
+late_commands:
+  maas: [wget, '--no-proxy', '{{node_disable_pxe_url}}', '--post-data', '{{node_disable_pxe_data}}', '-O', '/dev/null']
+  bootloader_01: ["curtin", "in-target", "--", "cp", "-v", "/boot/efi/EFI/rocky/shimaa64.efi", "/boot/efi/EFI/BOOT/bootaa64.efi"]
+  bootloader_02: ["curtin", "in-target", "--", "cp", "-v", "/boot/efi/EFI/rocky/grubaa64.efi", "/boot/efi/EFI/BOOT/"]
+```
+
+This file needs to be saved on Region Controllers under /var/snap/maas/current/preseeds/curtin_userdata_custom_arm64_generic_rocky9 or /etc/maas/preseeds/curtin_userdata_custom_arm64_generic_rocky9. The last portion of this file must match the image name uploaded in MAAS.
+
+## Default username
+
+MAAS uses cloud-init to create ```cloud-user``` account using the ssh keys configured for the MAAS admin user (e.g. imported from Launchpad). Log in to the machine:
+
+```shell
+ssh -i ~/.ssh/<your_identity_file> cloud-user@<machine-ip-address>
+```
+
+Next to that, the kickstart script creates an account with both username and password set to  ```rocky```. Note that the default sshd configuration in Rocky 9 disallows password-based authentication when logging in via ssh, so trying `ssh rocky@<machine-ip-address>` will fail. Password-based authentication can be enabled by having `PasswordAuthentication yes` in /etc/ssh/sshd_config after logging in with ```cloud-user```. Perhaps there is a way to make that change using kickstart script, but it is not obvious as ```anaconda```, the installer, makes its own changes to sshd_config file during installation. If you know how to do this, a PR is welcome.

package/packer/images/Rocky9Amd64/http/rocky9.ks.pkrtpl.hcl

@@ -0,0 +1,114 @@
+url ${KS_OS_REPOS} ${KS_PROXY}
+repo --name="AppStream" ${KS_APPSTREAM_REPOS} ${KS_PROXY}
+repo --name="Extras" ${KS_EXTRAS_REPOS} ${KS_PROXY}
+
+eula --agreed
+
+# Turn off after installation
+poweroff
+
+# Do not start the Inital Setup app
+firstboot --disable
+
+# System language, keyboard and timezone
+lang en_US.UTF-8
+keyboard us
+timezone UTC --utc
+
+# Set the first NIC to acquire IPv4 address via DHCP
+network --device eth0 --bootproto=dhcp
+# Enable firewal, let SSH through
+firewall --enabled --service=ssh
+# Enable SELinux with default enforcing policy
+selinux --enforcing
+
+# Do not set up XX Window System
+skipx
+
+# Initial disk setup
+# Use the first paravirtualized disk
+ignoredisk --only-use=vda
+# No need for bootloader
+bootloader --disabled
+# Wipe invalid partition tables
+zerombr
+# Erase all partitions and assign default labels
+clearpart --all --initlabel
+# Initialize the primary root partition with ext4 filesystem
+part / --size=1 --grow --asprimary --fstype=ext4
+
+# Set root password
+rootpw --plaintext password
+
+# Add a user named packer
+user --groups=wheel --name=rocky --password=rocky --plaintext --gecos="rocky"
+
+%post --erroronfail
+# workaround anaconda requirements and clear root password
+passwd -d root
+passwd -l root
+
+# Clean up install config not applicable to deployed environments.
+for f in resolv.conf fstab; do
+    rm -f /etc/$f
+    touch /etc/$f
+    chown root:root /etc/$f
+    chmod 644 /etc/$f
+done
+
+rm -f /etc/sysconfig/network-scripts/ifcfg-[^lo]*
+
+# Kickstart copies install boot options. Serial is turned on for logging with
+# Packer which disables console output. Disable it so console output is shown
+# during deployments
+sed -i 's/^GRUB_TERMINAL=.*/GRUB_TERMINAL_OUTPUT="console"/g' /etc/default/grub
+sed -i '/GRUB_SERIAL_COMMAND="serial"/d' /etc/default/grub
+sed -ri 's/(GRUB_CMDLINE_LINUX=".*)\s+console=ttyS0(.*")/\1\2/' /etc/default/grub
+sed -i 's/GRUB_ENABLE_BLSCFG=.*/GRUB_ENABLE_BLSCFG=false/g' /etc/default/grub
+
+dnf clean all
+
+# Passwordless sudo for the user 'rocky'
+echo "rocky ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/rocky
+chmod 440 /etc/sudoers.d/rocky
+
+#---- Optional - Install your SSH key ----
+# mkdir -m0700 /home/rocky/.ssh/
+#
+# cat <<EOF >/home/rocky/.ssh/authorized_keys
+# ssh-rsa <your_public_key_here> you@your.domain
+# EOF
+#
+### set permissions
+# chmod 0600 /home/rocky/.ssh/authorized_keys
+#
+#### fix up selinux context
+# restorecon -R /home/rocky/.ssh/
+
+%end
+
+%packages  --ignoremissing
+@core
+bash-completion
+cloud-init
+cloud-utils-growpart
+rsync
+tar
+patch
+yum-utils
+grub2-pc
+grub2-efi-*
+shim-*
+grub2-efi-*-modules
+efibootmgr
+dosfstools
+lvm2
+mdadm
+device-mapper-multipath
+iscsi-initiator-utils
+-plymouth
+# Remove ALSA firmware
+-a*-firmware
+# Remove Intel wireless firmware
+-i*-firmware
+%end