# Rocky Linux 10

Validated minimal CloudStack KVM VPS template promoted on 2026-08-11.

## Artifact

- File: `rocky-linux-10.qcow2`
- Format: standalone, uncompressed sparse QCOW2
- Backing file: none
- Compressed clusters: zero
- Architecture: x86_64
- Virtual disk: 30 GiB (32212254720 bytes)
- Exported file: 1.26 GiB (1352138752 bytes)
- SHA-256: `7fbd9a69ec8b30cc78829b4fe4dd62152f5670e39faf43c18e4d055a24853d40`
- Mirror URL: https://cloud-mirrors.noc.sh/rocky-linux-10/rocky-linux-10.qcow2
- CloudStack template UUID: `8901b214-d768-40f7-8460-1325c8033ab2`
- CloudStack state: Ready / Download Complete

## Guest image

- Release: Rocky Linux 10.2 (Red Quartz)
- Installed packages: 427
- Installed kernels: one current kernel
- Swap: fixed persistent 1 GiB `/swap.img`
- Retained components include GRUB/EFI, dracut, VirtIO storage and network support,
  NetworkManager, OpenSSH, cloud-init, QEMU Guest Agent, DNF, XFS utilities,
  SELinux, chrony, rsyslog, fwupd, mdadm, kexec-tools, sos, and rng-tools.

The minimalisation transaction used `dnf remove --noautoremove`. It removed
only the superseded kernel and non-VPS physical-device or management packages:
CPU microcode, Bluetooth, Cockpit, UDisks, NFS client, and SSSD client
components.

## CloudStack registration

Register the template privately with these settings:

- Hypervisor: KVM
- Format: QCOW2
- OS type: Other Linux (64-bit)
- HVM: Yes
- Password enabled: Yes
- SSH key enabled: Yes
- Public: No
- Featured: No
- Extractable: No
- Template detail: `guest.cpu.mode=host-model`

Do not copy transient CloudStack runtime details such as
`Message.ReservedCapacityFreed.Flag`.

## Verification

Run before registration:

```bash
sha256sum rocky-linux-10.qcow2
qemu-img info rocky-linux-10.qcow2
qemu-img check rocky-linux-10.qcow2
qemu-img map --output=json rocky-linux-10.qcow2
```

Expected SHA-256:

```text
7fbd9a69ec8b30cc78829b4fe4dd62152f5670e39faf43c18e4d055a24853d40  rocky-linux-10.qcow2
```

The candidate passed Base acceptance with an injected SSH key and the initial
CloudStack password, a CloudStack reboot, and repeated key/password checks.
Password-only Pro and Ultra deployments passed at 50 GiB and 80 GiB. A final
password-only Base deployment imported through the canonical URL also passed.
All tests validated filesystem growth, 1 GiB swap, cloud-init with no errors or
recoverable warnings, networking and repositories, SELinux enforcing, active
QEMU Guest Agent, one kernel, zero failed systemd units, and no residual
authorized key in password-only VMs.

## Lifecycle note

Validated final CloudStack template. Re-run the full acceptance test after
importing the artifact into another CloudStack environment.