Friday, November 10, 2023

Install Win11 KVM on Manjaro Gnome 23.04

Please be advised, that in particular case extraction of rpms is supported  via CLI   $ bsdtar -xf *.rpm . The rest of deployment procedure keeps to be the same as on previous versions of Manjaro linux. So the commands which bring you to successful deployment of Windows 11 KVM Guest should be :

 ~/Downloads > bsdtar -xf  virtio-win-0.1.240-1.noarch.rpm

The most recent version of virtio-win-0.1.240-1.noarch.rpm has been downloaded and extracted via bsdtar , the last one appears to be installed on Manjaro Linux by default .

 ~/Downloads > sudo cp -r usr /      

 ~/Downloads > sudo pacman -S swtpm   

 ~/Downloads > hostnamectl                                                   ✔ 

 Static hostname: boris-manjaro

       Icon name: computer-desktop

         Chassis: desktop 🖥️

      Machine ID: 235d4418d2f24e8d9cf80d1967566422

         Boot ID: 34c09380dbf646f084dee4abb33b11e4

Operating System: Manjaro Linux                     

          Kernel: Linux 6.5.9-1-MANJARO

    Architecture: x86-64

 Hardware Vendor: Micro-Star International Co., Ltd.

  Hardware Model: MS-7C37

Firmware Version: H.60

   Firmware Date: Wed 2019-11-06

    Firmware Age: 4y 4d 

~/Downloads$> ls -l virtio-win-0.1.240-1.noarch.rpm

-rw-r--r--. 1 boris boris 258267861 Nov 10 21:35 virtio-win-0.1.240-1.noarch.rpm      

~/Downloads >  bsdtar -xf  virtio-win-0.1.240-1.noarch.rpm          

~/Downloads > ls  -l                                     ✔  10s  

total 5666096

drwxr-xr-x 3 boris boris         19 Nov 10 10:12 usr

~/Downloads > sudo cp -r usr /                                                        ~/Downloads > cd /usr/share/virtio-win*                                                               

/usr/share/virtio-win > ls -l                                                              
total 612816
drwxr-xr-x 1 root root        46 Nov 11 14:06 drivers
drwxr-xr-x 1 root root        68 Nov 11 14:06 guest-agent
drwxr-xr-x 1 root root       136 Nov 11 14:06 installer
-rw-r--r-- 1 root root 627519488 Nov 11 14:06 virtio-win-0.1.240.iso
lrwxrwxrwx 1 root root        22 Nov 11 14:06 virtio-win.iso -> virtio-win-0.1.240.iso

 /usr/share/virtio-win > sudo pacman -S swtpm                                  ✘  7s  

resolving dependencies...

looking for conflicting packages...

Packages (2) libtpms-0.9.6-1  swtpm-0.8.1-1

Total Download Size:   0.57 MiB

Total Installed Size:  1.48 MiB

:: Proceed with installation? [Y/n] Y

:: Retrieving packages...

 libtpms-0.9.6-1-x86_64        419.2 KiB   446 KiB/s 00:01 [###############################] 100%

 swtpm-0.8.1-1-x86_64          163.1 KiB   570 KiB/s 00:00 [###############################] 100%

 Total (2/2)                   582.4 KiB   401 KiB/s 00:01 [###############################] 100%

(2/2) checking keys in keyring                             [###############################] 100%

(2/2) checking package integrity                           [###############################] 100%

(2/2) loading package files                                [###############################] 100%

(2/2) checking for file conflicts                          [###############################] 100%

(2/2) checking available disk space                        [###############################] 100%

:: Processing package changes...

(1/2) installing libtpms                                   [###############################] 100%

(2/2) installing swtpm                                     [###############################] 100%

:: Running post-transaction hooks...

(1/3) Creating system user accounts...

(2/3) Creating temporary files...

(3/3) Arming ConditionNeedsUpdate...

/usr/share/virtio-win > sudo pacman -S edk2-ovmf                               ✔  8s  

warning: edk2-ovmf-202308-3 is up to date -- reinstalling

resolving dependencies...

looking for conflicting packages...

Packages (1) edk2-ovmf-202308-3

Total Installed Size:  51.52 MiB

Net Upgrade Size:       0.00 MiB

:: Proceed with installation? [Y/n] Y

(1/1) checking keys in keyring                             [###############################] 100%

(1/1) checking package integrity                           [###############################] 100%

(1/1) loading package files                                [###############################] 100%

(1/1) checking for file conflicts                          [###############################] 100%

(1/1) checking available disk space                        [###############################] 100%

:: Running pre-transaction hooks...

(1/1) Creating Timeshift snapshot before upgrade...

==> skipping timeshift-autosnap due skipRsyncAutosnap in /etc/timeshift-autosnap.conf set to TRUE.

:: Processing package changes...

(1/1) reinstalling edk2-ovmf                               [###############################] 100%

:: Running post-transaction hooks...

(1/1) Arming ConditionNeedsUpdate...








































































































































































Anyway on remote Fedora 39 box just run with no issues

boris@fedora:~/SENDTO$ uname -a
Linux fedora 6.6.1-300.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 10 20:08:54 UTC 2023 x86_64 GNU/Linux
boris@fedora:~/SENDTO$ rpm2cpio virtio-win-0.1.240-1.noarch.rpm | cpio -idum
2448567 blocks
boris@fedora:~/SENDTO$ ll
total 252216
drwxr-xr-x. 1 boris boris        10 Nov 11 19:25 usr
-rw-r--r--. 1 boris boris 258267861 Nov 11 19:24 virtio-win-0.1.240-1.noarch.rpm
boris@fedora:~/SENDTO$  tar -zcvf usr.tar.gz usr
boris@fedora:~/SENDTO$ scp usr.tar.gz 192.168.0.27:/home/boris/target
boris@192.168.0.27's password: 
usr.tar.gz                                                     100%  385MB 480.2MB/s   00:00  
Where 192.168.0.27 - IP of remote Manjaro Instance running sshd daemon.
Actually, any RH's clone like Alma Linux, Rocky Linux or Fedora Linux itself having rpm2cpio and cpio installed allow to convert virtio-win-0.1.240-1.noarch.rpm into required tar ball - usr.tar.gz to be scp'ed to Manjaro Instance for extraction and deployment

UPDATE as of 11/12/23
Same schema works on ArcoLinux-v23.11-03-x86_64







































UPDATE as of 11/13/23 That is what causes limited experience ( regarding myself )

FreeBSD tar (also BSD tar) has become the default tar on most Berkeley Software Distribution-based operating systems including Mac OS X. The core functionality is available as libarchive for inclusion in other applications. This implementation automatically detects the format of the file and can extract from tar, pax, cpio, zip, rar, ar, xar, rpm and ISO 9660 cdrom images. It also comes with a functionally equivalent cpio command-line interface.

boris@fedora:~$ uname -a
Linux fedora 6.6.1-300.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 10 20:08:54 UTC 2023 x86_64 GNU/Linux
boris@fedora:~/SENDTO2$ sudo dnf install bsdtar
[sudo] password for boris: 
Last metadata expiration check: 1:40:05 ago on Mon 13 Nov 2023 12:36:56 PM MSK.
Dependencies resolved.
================================================
 Package            Architecture       Version                   Repository          Size
================================================
Installing:
 bsdtar             x86_64             3.7.1-1.fc39              fedora              65 k

Transaction Summary
================================================
Install  1 Package
Total download size: 65 k
Installed size: 134 k
Is this ok [y/N]: y
Downloading Packages:
bsdtar-3.7.1-1.fc39.x86_64.rpm                            457 kB/s |  65 kB     00:00    
-----------------------------------------------------------------------------------
Total                                                      86 kB/s |  65 kB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                  1/1 
  Installing       : bsdtar-3.7.1-1.fc39.x86_64                                       1/1 
  Running scriptlet: bsdtar-3.7.1-1.fc39.x86_64                                       1/1 
  Verifying        : bsdtar-3.7.1-1.fc39.x86_64                                       1/1 
Installed:
  bsdtar-3.7.1-1.fc39.x86_64                                                              
Complete!
boris@fedora:~/SENDTO$ bsdtar -xf virtio-win-0.1.240-1.noarch.rpm
boris@fedora:~/SENDTO$ ll
total 252216
drwxr-xr-x. 1 boris boris        10 Nov 13 14:17 usr
-rw-r--r--. 1 boris boris 258267861 Nov 11 19:24 virtio-win-0.1.240-1.noarch.rpm
boris@fedora:~/SENDTO$ cd usr/share/virt*
boris@fedora:~/SENDTO/usr/share/virtio-win$ ll
total 612816
drwxr-xr-x. 1 boris boris        46 Nov 13 14:17 drivers
drwxr-xr-x. 1 boris boris        68 Nov 13 14:17 guest-agent
drwxr-xr-x. 1 boris boris       136 Nov 13 14:17 installer
-rw-r--r--. 1 boris boris 627519488 Sep 19 09:18 virtio-win-0.1.240.iso
lrwxrwxrwx. 1 boris boris        22 Sep 19 09:18 virtio-win.iso -> virtio-win-0.1.240.iso

Tuesday, November 7, 2023

Install Win11 as KVM on Fedora 39 Server

 Mentioned procedure on Fedora 39 Server and AlmaLinux 9.3 requires only verification of presence packages edk2-ovmf swtpm swtpm-tools on the system. You are not supposed to experience any problems during deployment Win11 KVM in security mode (virt-manager's setup)

See also   http://lxer.com/module/newswire/view/330505/index.html



























Runtime snapshot




























References

1.  https://fedoraproject.org/wiki/Test_Results:Fedora_39_RC_1.5_Installation







Sunday, November 5, 2023

Install Win11 as KVM on openSUSE Tumbleweed

UPDATE as of 11/07/2023

Same procedure on Fedora 39 Server requires only verification of presence packages edk2-ovmf swtpm swtpm-tools on the system. You are not supposed to experience any problems during deployment Win11 KVM in security mode (virt-manager's setup)

















==========================================

We start as usual ( no convertion is required on openSUSE )

$ sudo rpm -iv virtio-win-0.1.229-1.noarch.rpm

Second step looks a bit strange. I would expect this dependencies to be resolved automatically upon install of package swtpm

boris@localhost:~> sudo zypper install swtpm*
[sudo] password for root: 
Loading repository data...
Reading installed packages...
'swtpm' providing 'swtpm*' is already installed.
No update candidate for 'swtpm-0.8.1-2.1.x86_64'. The highest available version is already installed.
Resolving package dependencies...
 
The following 6 recommended packages were automatically selected: container-selinux policycoreutils-python-utils python3-policycoreutils selinux-autorelabel
  selinux-tools setools-console
 
The following 35 NEW packages are going to be installed:
  checkpolicy container-selinux glib2-devel glibc-devel libblkid-devel libffi-devel
  libmount-devel libopenssl-3-devel libopenssl-devel libpcre2-posix3 libseccomp-devel
  libselinux-devel libsepol-devel libstdc++6-devel-gcc13 libstdc++-devel libtpms-devel
  libxcrypt-devel linux-glibc-devel mozilla-nspr-devel pcre2-devel policycoreutils
  policycoreutils-python-utils python311-selinux python311-semanage python311-setools
  python3-audit python3-policycoreutils selinux-autorelabel selinux-policy
  selinux-policy-targeted selinux-tools setools-console swtpm-devel swtpm-selinux zlib-devel
 
35 new packages to install.
Overall download size: 26.8 MiB. Already cached: 0 B. After the operation, additional 103.8 MiB
will be used.
Continue? [y/n/v/...? shows all options] (y): y
 
Otherwise upon first guest reboot getting << no swtpm socket show up && installation failed>>. Packet swtmp was previuosly installed.

































































































One more picture ( Guest OS confirmation provided )




















The more I test openSUSE, the more I understand how important Fedora Linux development is for FOSS.

Friday, November 3, 2023

Reconfiguration openSUSE Tumbleweed disk layout && setting up "/var FS" LVM size

 Snapshots below demonstrate abilities of openSUSE Tumbleweed installer to create separated from root BTRFS volume two LVMs for /var and /home (FSs) formatted as XFS  file systems. Next step is deploying F39 WKS Guest with size of virtual disk greater then size of root BTRFS volume, just as POC (Proof of concept) of openSUSE installer flexibility

boris@localhost:~> hostnamectl

   Static hostname: (unset)                            

Transient hostname: localhost

         Icon name: computer-vm

           Chassis: vm \U0001f5b4

        Machine ID: 2b5498fe006448659c13856794c35bae

           Boot ID: 2b68f27006214a2a8adeb01e6fbcd663

    Virtualization: kvm

  Operating System: openSUSE Tumbleweed                

       CPE OS Name: cpe:/o:opensuse:tumbleweed:20231101

            Kernel: Linux 6.5.9-1-default

      Architecture: x86-64

   Hardware Vendor: QEMU

    Hardware Model: Standard PC _Q35 + ICH9, 2009_

  Firmware Version: edk2-20230524-3.fc38

     Firmware Date: Wed 2023-05-24

      Firmware Age: 5month 1w 4d

boris@localhost:~> df -Th

Filesystem              Type      Size  Used Avail Use% Mounted on

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /

devtmpfs                devtmpfs  4.0M     0  4.0M   0% /dev

tmpfs                   tmpfs     5.7G     0  5.7G   0% /dev/shm

efivarfs                efivarfs   56K   34K   18K  66% /sys/firmware/efi/efivars

tmpfs                   tmpfs     2.3G  1.7M  2.3G   1% /run

tmpfs                   tmpfs     5.7G   16K  5.7G   1% /tmp

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /.snapshots

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /boot/grub2/i386-pc

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /boot/grub2/x86_64-efi

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /opt

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /root

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /srv

/dev/mapper/system-root btrfs      47G  5.6G   41G  13% /usr/local

/dev/vda1               vfat      511M  5.9M  506M   2% /boot/efi

/dev/mapper/system-var  xfs        50G  5.0G   45G  10% /var

/dev/mapper/system-home xfs        13G  2.3G  9.8G  19% /home

tmpfs                   tmpfs     1.2G   96K  1.2G   1% /run/user/1000












Configuration and starting F39 WKS KVM Guest via Virt-manager . Just starting same guest via Cockpit Web Console on openSUSE Tumbleweed



Tuesday, October 31, 2023

Setup Cockpit Web Console on openSUSE 15.5 Leap

Setup Cockpit Web Console on openSUSE 15.5 Leap  requires activation an additional repo mentioned first in the post, which by some reasons wasn't activated during standard installation by default . Now proceed as follows :-

boris@localhost:~> sudo zypper addrepo https://download.opensuse.org/repositories/systemsmanagement:cockpit/15.5/systemsmanagement:cockpit.repo

[sudo] password for root: 

Adding repository 'cockpit-project.org (15.5)' ....................................................[done]

Repository 'cockpit-project.org (15.5)' successfully added

URI         : https://download.opensuse.org/repositories/systemsmanagement:/cockpit/15.5/

Enabled     : Yes

GPG Check   : Yes

Autorefresh : No

Priority    : 99 (default priority)

Repository priorities are without effect. All enabled repositories share the same priority.

boris@localhost:~> sudo zypper refresh

Repository 'Update repository of openSUSE Backports' is up to date.                                      

Repository 'Non-OSS Repository' is up to date.                                                           

Repository 'Open H.264 Codec (openSUSE Leap)' is up to date.                                             

Repository 'Main Repository' is up to date.                                                              

Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date.                 

Repository 'Main Update Repository' is up to date.                                                       

Repository 'Update Repository (Non-Oss)' is up to date.                                                  


New repository or package signing key received:

  Repository:       cockpit-project.org (15.5)

  Key Fingerprint:  50E6 0431 5448 5D99 0732 B5D6 ACAA 9CF7 E6E5 A213

  Key Name:         systemsmanagement OBS Project <systemsmanagement@build.opensuse.org>

  Key Algorithm:    RSA 2048

  Key Created:      Mon 11 Oct 2021 05:00:48 AM EDT

  Key Expires:      Wed 20 Dec 2023 04:00:48 AM EST (expires in 50 days)

  Rpm Name:         gpg-pubkey-e6e5a213-6163fd40

    Note: Signing data enables the recipient to verify that no modifications occurred after the data

    were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system

    and in extreme cases even to a system compromise.

    Note: A GPG pubkey is clearly identified by its fingerprint. Do not rely on the key's name. If

    you are not sure whether the presented key is authentic, ask the repository provider or check

    their web site. Many providers maintain a web page showing the fingerprints of the GPG keys they

    are using.

Do you want to reject the key, trust temporarily, or trust always? [r/t/a/?] (r): a

Retrieving repository 'cockpit-project.org (15.5)' metadata .......................................[done]

Building repository 'cockpit-project.org (15.5)' cache ............................................[done]

All repositories have been refreshed.

boris@localhost:~> sudo zypper install cockpit

Loading repository data...

Reading installed packages...

Resolving package dependencies...

The following 2 recommended packages were automatically selected:

  cockpit-networkmanager cockpit-storaged

The following package is recommended, but will not be installed due to conflicts or dependency issues:

  cockpit-packagekit

The following 2 packages are suggested, but will not be installed:

  cockpit-pcp cockpit-selinux

The following 9 NEW packages are going to be installed:

  cockpit cockpit-bridge cockpit-networkmanager cockpit-storaged cockpit-suse-theme cockpit-system

  cockpit-ws libpwquality-tools libudisks2-0_lvm2

9 new packages to install.

Overall download size: 7.9 MiB. Already cached: 0 B. After the operation, additional 9.2 MiB will be

used.

Continue? [y/n/v/...? shows all options] (y): y

Retrieving: libpwquality-tools-1.4.4-150400.15.4.x86_64 (Main Repository)            (1/9),  18.6 KiB    

Retrieving: libpwquality-tools-1.4.4-150400.15.4.x86_64.rpm .......................................[done]

Retrieving: libudisks2-0_lvm2-2.9.2-150400.3.3.1.x86_64 (Main Repository)            (2/9),  57.0 KiB    

Retrieving: libudisks2-0_lvm2-2.9.2-150400.3.3.1.x86_64.rpm ...........................[done (1.1 KiB/s)]

Retrieving: cockpit-bridge-300.1-lp155.122.1.x86_64 (cockpit-project.org (15.5))     (3/9), 358.5 KiB    

Retrieving: cockpit-bridge-300.1-lp155.122.1.x86_64.rpm ...............................[done (1.1 MiB/s)]

Retrieving: cockpit-suse-theme-0.1-lp155.6.1.noarch (cockpit-project.org (15.5))     (4/9), 855.8 KiB    

Retrieving: cockpit-suse-theme-0.1-lp155.6.1.noarch.rpm ...............................[done (1.7 MiB/s)]

Retrieving: cockpit-ws-300.1-lp155.122.1.x86_64 (cockpit-project.org (15.5))         (5/9),   1.7 MiB    

Retrieving: cockpit-ws-300.1-lp155.122.1.x86_64.rpm ...................................[done (3.1 MiB/s)]

Retrieving: cockpit-system-300.1-lp155.122.1.noarch (cockpit-project.org (15.5))     (6/9),   3.2 MiB    

Retrieving: cockpit-system-300.1-lp155.122.1.noarch.rpm ...............................[done (2.7 MiB/s)]

Retrieving: cockpit-storaged-300.1-lp155.122.1.noarch (cockpit-project.org (15.5))   (7/9), 899.7 KiB    

Retrieving: cockpit-storaged-300.1-lp155.122.1.noarch.rpm .............................[done (2.4 MiB/s)]

Retrieving: cockpit-networkmanager-300.1-lp155.122.1.noarch (cockpit-project.org (15.5))

                                                                                     (8/9), 780.4 KiB    

Retrieving: cockpit-networkmanager-300.1-lp155.122.1.noarch.rpm .......................[done (1.9 MiB/s)]

Retrieving: cockpit-300.1-lp155.122.1.x86_64 (cockpit-project.org (15.5))            (9/9),  43.1 KiB    

Retrieving: cockpit-300.1-lp155.122.1.x86_64.rpm ......................................[done (2.4 KiB/s)]

Checking for file conflicts: ......................................................................[done]

(1/9) Installing: libpwquality-tools-1.4.4-150400.15.4.x86_64 .....................................[done]

(2/9) Installing: libudisks2-0_lvm2-2.9.2-150400.3.3.1.x86_64 .....................................[done]

(3/9) Installing: cockpit-bridge-300.1-lp155.122.1.x86_64 .........................................[done]

(4/9) Installing: cockpit-suse-theme-0.1-lp155.6.1.noarch .........................................[done]

(5/9) Installing: cockpit-ws-300.1-lp155.122.1.x86_64 .............................................[done]

(6/9) Installing: cockpit-system-300.1-lp155.122.1.noarch .........................................[done]

(7/9) Installing: cockpit-storaged-300.1-lp155.122.1.noarch .......................................[done]

(8/9) Installing: cockpit-networkmanager-300.1-lp155.122.1.noarch .................................[done]

(9/9) Installing: cockpit-300.1-lp155.122.1.x86_64 ................................................[done]


boris@localhost:~> sudo systemctl start cockpit

boris@localhost:~> sudo systemctl status cockpit

\u25cf cockpit.service - Cockpit Web Service

     Loaded: loaded (/usr/lib/systemd/system/cockpit.service; static)

     Active: active (running) since Tue 2023-10-31 04:19:30 EDT; 8s ago

TriggeredBy: \u25cf cockpit.socket

       Docs: man:cockpit-ws(8)

    Process: 5809 ExecStartPre=/usr/lib/cockpit-certificate-ensure --for-cockpit-tls (code=exited, statu>

   Main PID: 5830 (cockpit-tls)

      Tasks: 1 (limit: 4915)

     CGroup: /system.slice/cockpit.service

             \u2514\u2500 5830 /usr/lib/cockpit-tls


Oct 31 04:19:29 localhost.localdomain systemd[1]: Starting Cockpit Web Service...

Oct 31 04:19:29 localhost.localdomain cockpit-certificate-ensure[5824]: /usr/lib/cockpit-certificate-hel>

Oct 31 04:19:29 localhost.localdomain cockpit-certificate-ensure[5825]: Generating a RSA private key

Oct 31 04:19:30 localhost.localdomain cockpit-certificate-ensure[5825]: ................................>

Oct 31 04:19:30 localhost.localdomain cockpit-certificate-ensure[5825]: ................................>

Oct 31 04:19:30 localhost.localdomain cockpit-certificate-ensure[5825]: writing new private key to '0-se>

Oct 31 04:19:30 localhost.localdomain cockpit-certificate-ensure[5825]: -----

Oct 31 04:19:30 localhost.localdomain systemd[1]: Started Cockpit Web Service.

[boris@ServerFedora38 ~]$ ssh boris@192.168.0.37

(boris@192.168.0.37) Password: 

Last login: Tue Oct 31 04:08:45 2023 from 192.168.0.18

Have a lot of fun...

boris@localhost:~> sudo firewall-cmd --add-service=cockpit --zone=public --permanent

[sudo] password for root: 

success

boris@localhost:~> sudo firewall-cmd --reload

success

 

































Deploying F40 KVM guest via bridge0

































One additional step was required

localhost:/usr/lib/systemd/system # cat cockpit.service

[Unit]

Description=Cockpit Web Service

Documentation=man:cockpit-ws(8)

Requires=cockpit.socket

Requires=cockpit-wsinstance-http.socket cockpit-wsinstance-https-factory.socket

After=cockpit-wsinstance-http.socket cockpit-wsinstance-https-factory.socket

[Service]

RuntimeDirectory=cockpit/tls

# systemd ≥ 241 sets this automatically

Environment=RUNTIME_DIRECTORY=/run/cockpit/tls

ExecStartPre=+/usr/lib/cockpit-certificate-ensure --for-cockpit-tls

ExecStart=/usr/lib/cockpit-tls

User=cockpit-ws

Group=cockpit-ws

NoNewPrivileges=true

ProtectSystem=strict

ProtectHome=true

PrivateTmp=true

PrivateDevices=true

ProtectKernelTunables=true

RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6

MemoryDenyWriteExecute=true

# This lines have been added to enable cockpit.service

[Install]

WantedBy=graphical.target

*******************************************************

Managing VMs via Cockpit Web Console on openSUSE 15.5 Leap

*******************************************************