# AlmaLinux 10

Validated CloudStack KVM template built from the official AlmaLinux 10.2 Generic Cloud x86_64 image and promoted on 2026-08-11.

## Artifact

- File: `almalinux-10.qcow2`
- Format: standalone, sparse, uncompressed QCOW2 (no backing file)
- Architecture: x86_64 (`x86-64-v3` baseline)
- Virtual disk: 30 GiB (32212254720 bytes)
- Mirror file: 878.06 MiB (920715264 bytes)
- SHA-256: `a3a1e12ade92e38acd78e30ffd0d46ebbca81af4a292f40a34ef5547d2006826`
- Mirror URL: https://cloud-mirrors.noc.sh/almalinux-10/almalinux-10.qcow2
- CloudStack template UUID: `c18ad8e7-97ac-4307-9c6f-abdbc00a1166`
- CloudStack state: Ready / Download Complete

## Guest baseline

- AlmaLinux 10.2
- Kernel: `6.12.0-211.43.1.el10_2.x86_64`
- Fixed swap: 1 GiB at `/swap.img`
- `cloud-init`: `24.4-7.el10_2.1`
- QEMU Guest Agent: `10.1.0-16.el10_2.2.alma.1`
- SELinux: enforcing
- Root filesystem expands automatically to the CloudStack root disk
- Root password and SSH keys are injected per deployment; no fixed credential is stored in the image

## CloudStack registration

Register the template privately with these settings:

- Hypervisor: KVM
- Format: QCOW2
- OS type: Other PV (64-bit)
- HVM: Yes
- Password enabled: Yes
- SSH key enabled: Yes
- Public: No
- Featured: No
- Extractable: No
- Template details: `guest.cpu.mode=host-model`

Do not copy transient CloudStack runtime details such as `SSH.PublicKey`, `SSH.KeyPairNames`, `rootdisksize`, or `Message.ReservedCapacityFreed.Flag`.

Every KVM host used for this template must expose the `x86-64-v3` CPU baseline. The validated host resolved `host-model` to `Skylake-Server-IBRS`.

## Verification

Run before registration:

```bash
sha256sum almalinux-10.qcow2
qemu-img check almalinux-10.qcow2
```

Expected SHA-256:

```text
a3a1e12ade92e38acd78e30ffd0d46ebbca81af4a292f40a34ef5547d2006826  almalinux-10.qcow2
```

After registration reaches Ready / Download Complete, deploy a fresh VM and validate password-only and SSH-key access, hostname, networking, root-disk expansion, 1 GiB swap, cloud-init with no errors, SELinux, and QEMU Guest Agent `guest-ping` from the KVM host.

The final artifact passed fresh Base (2 vCPU, 3 GiB RAM, 30 GiB disk), Pro (2 vCPU, 4 GiB RAM, 50 GiB disk), and Ultra (4 vCPU, 6 GiB RAM, 80 GiB disk) acceptance. The final canonical UUID also passed an independent password-only Base smoke test.

## Lifecycle note

Validated final CloudStack template. The private official-source template may be retained solely as a rebuild source; it is not a customer template.