Time and Date: optional NTP servers in Germany.
0.de.pool.ntp.org 1.de.pool.ntp.org 2.de.pool.ntp.org 3.de.pool.ntp.org
I use dnf priority to isolate the core system from 3rd party software.
It means a 3rd party package cannot upgrade a baseos package.
Here is my /etc/yum.repos.d/rocky.repo
[baseos] name=Rocky Linux $releasever - BaseOS mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever$rltype gpgcheck=1 enabled=1 countme=1 metadata_expire=6h gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-10 priority=10
The rule is that if a [repository] has "enabled=1" then add "priority=X" to establish it's hierarchy among other repos.
The hierarchy usually is:
priority=10 for [baseos]
priority=20 for [appstream]
priority=20 for [crb]
priority=30 for [extras]
priority=40 for [epel]
priority=50 for [google-chrome]
priority=90 for [fedora]
Install epel repo, the Fedora Special Interest Group (with priority=40).
dnf install epel-release
Install GNOME desktop
dnf group install Workstation systemctl set-default graphical.target systemctl enable gdm.service # Create $HOME template directories, e.g. Documents, Downloads, Music, Trash as $HOME/.local/share/Trash # Run as regular user xdg-user-dirs-update
Create /etc/yum.repos.d/google-chrome.repo
[google-chrome] name=google-chrome baseurl=https://dl.google.com/linux/chrome/rpm/stable/x86_64 enabled=1 gpgcheck=1 gpgkey=https://dl.google.com/linux/linux_signing_key.pub priority=50
Install software from RESF repos
dnf install emacs emacs-lucid thunderbird google-chrome-stable ImageMagick dnf group install "Development Tools"
Install from flathub as root:
flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo flatpak install flathub org.xfce.ristretto flatpak install flathub org.gimp.GIMP flatpak install flathub org.gnome.Evince flatpak install flathub org.gnome.FileRoller flatpak install flathub org.libreoffice.LibreOffice flatpak install flathub org.videolan.VLC flatpak install flathub org.filezillaproject.Filezilla flatpak install flathub org.gnome.meld
Install KVM.
For setting up KVM with a Bridge Interface read kvm-centos.
For setting up KVM with NAT forwarding (aka "virtual networks") read libvirt networking.
For setting up KVM in general on rockylinux-10 read kvm-on-rocky-linux-10.
dnf groupinstall "Virtualization Host" dnf groupinstall "Development Tools" dnf install virt-install virt-manager virt-top virt-viewer libguestfs-tools net-tools bridge-utils wget curl usermod -aG libvirt $USER usermod -aG kvm $USER systemctl start libvirtd systemctl enable libvirtd lsmod | grep kvm virsh net-list --all brctl show # Setup host NAT forwarding vi /etc/sysctl.conf net.ipv4.ip_forward = 1
Install VirtualBox-7.1
dnf install install kernel-devel kernel-headers gcc gcc-c++ glibc make bzip2 \
dkms perl elfutils-libelf-devel libX11-devel libXt libXmu
curl http://download.virtualbox.org/virtualbox/rpm/rhel/virtualbox.repo -o /etc/yum.repos.d/virtualbox.repo
vi /etc/yum.repos.d/virtualbox.repo
# add priority=50
dnf search VirtualBox
# if dnf is complaining about not getting the signature key do the following:
cd /etc/pki/rpm-gpg
wget https://www.virtualbox.org/download/oracle_vbox_2016.asc
chown -v root:root oracle_vbox_2016.asc
chcon -u system_u -t cert_t -v oracle_vbox_2016.asc
vi /etc/yum.repos.d/virtualbox.repo
# replace gpg key:
gpgkey=file:///etc/pki/rpm-gpg/oracle_vbox_2016.asc
dnf install VirtualBox-7.1
VBoxManage -v
cd /tmp
curl -O http://download.virtualbox.org/virtualbox/7.1.12/Oracle_VirtualBox_Extension_Pack-7.1.12.vbox-extpack
VBoxManage extpack install Oracle_VirtualBox_Extension_Pack-7.1.12.vbox-extpack
# agree the license terms
Do you agree to these license terms and conditions (y/n)? y
VBoxManage list extpacks
# if the modules need to be rebuilt, then usually run
/sbin/vboxconfig
# VirtualBox is in conflict with QEMU/KVM and both cannot run at the same time.
# Remove kvm modules before starting a VM image.
lsmod | grep kvm
rmmod kvm_intel
rmmod kvm
To install vscode on rocky-10 read this page
My own repository
Create /etc/yum.repos.d/vasilian.repo
[vasilian] name=Vasilian packages for RHEL baseurl=ftp://vasilian.net/RHEL/$releasever/extras/$basearch/ enabled=1 gpgcheck=1 gpgkey=ftp://vasilian.net/RHEL/$releasever/RPM-GPG-KEY-vasilian protect=0 priority=90
Install some popular fonts.
dnf install win10-fonts mac-fonts
Add Fedora40 repo as the base for RHEL-10
cd /tmp wget https://archives.fedoraproject.org/pub/archive/fedora/linux/releases/40/Everything/x86_64/os/Packages/f/fedora-gpg-keys-40-1.noarch.rpm rpm2cpio fedora-gpg-keys-40-1.noarch.rpm | cpio -idmv cp etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-40-primary . rm -rfv etc rm fedora-gpg-keys-40-1.noarch.rpm # as root cp RPM-GPG-KEY-fedora-40-primary /etc/pki/rpm-gpg chown -v root:root /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-40-primary chmod 644 /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-40-primary chcon -u system_u -t cert_t -v /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-40-primaryCreate /etc/yum.repos.d/fedora40.repo
[fedora40] name=Fedora-40 base for RHEL-10 baseurl=http://archives.fedoraproject.org/pub/archive/fedora/linux/releases/40/Everything/$basearch/os/ enabled=0 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-40-primary protect=0 priority=90Installing sway (as an example)
dnf --enablerepo=fedora40 install sway