# CentOS Stream 10

Final CloudStack KVM template rebuilt from the official CentOS Stream 10
GenericCloud image `20260811.0` and validated on 11 August 2026.

## Artifact

- File: `centos-stream-10.qcow2`
- Format: standalone sparse QCOW2, uncompressed, with no backing file
- Architecture: x86_64
- Boot mode: legacy BIOS
- Virtual disk: 30 GiB (32212254720 bytes)
- Stored file: 993 MiB (1041039360 bytes)
- Fixed swap file: 1 GiB (1073741824 bytes; 1073737728 usable bytes)
- SHA-256: `d777152da3705fb3b9ea2c8677e13e8adb7f296c8d565d5a3fb71582f4c97b73`
- Mirror URL: https://cloud-mirrors.noc.sh/centos-stream-10/centos-stream-10.qcow2
- Final CloudStack template UUID: `8cd452e3-2570-42fd-9681-49a520b80edb`
- Retained private rebuild-source UUID: `376ab50d-0487-4df2-aeeb-896a929e1b40`
- Official source image: `CentOS-Stream-GenericCloud-10-20260811.0.x86_64.qcow2`
- Official source SHA-256: `48a9503dc1a1bcafda711da5e566187a4db954cc783c4c3ea7efd28ff9d6238d`
- Source state: Ready / Download Complete

## Guest contents

- Minimal VPS guest: 378 RPM packages
- Kernel: `6.12.0-257.el10.x86_64`
- cloud-init: `24.4-7.el10.1`
- QEMU Guest Agent: `10.1.0-25.el10`
- NetworkManager, OpenSSH, DNF, XFS, SELinux, chrony, polkit,
  policycoreutils, GRUB, dracut, the active kernel, and
  `kernel-modules-extra` retained
- Cockpit, NFS/RPC, quota, SSSD/Samba identity payloads, and physical
  GPU/Wi-Fi/microcode firmware removed without automatic dependency removal
- `wget` installed for CloudStack password delivery
- CentOS Stream BaseOS, AppStream, and Extras repositories enabled

The removed packages are optional in this KVM VPS environment and remain
available from the enabled repositories. No kernel, network, SSH, package
management, filesystem, SELinux, or CloudStack integration component was
removed.

## CloudStack registration

Register the template privately with these settings:

- Hypervisor: KVM
- Format: QCOW2
- OS type: CentOS Stream 10 (preview)
- HVM: Yes
- Password enabled: Yes
- SSH key enabled: Yes
- Public: No
- Featured: No
- Extractable: No
- Architecture: x86_64
- Template details: `guest.cpu.mode=host-model`

The word `preview` is part of the CloudStack guest OS mapping label. It does
not describe the lifecycle state of this CentOS Stream 10 image. Do not remove
the `guest.cpu.mode=host-model` detail: the EL10 guest cannot boot with the
default `qemu64` CPU model used by this CloudStack environment.

Root password and key delivery require both effective OpenSSH settings:

```text
PasswordAuthentication yes
PermitRootLogin yes
```

They are stored in
`/etc/ssh/sshd_config.d/00-cloudstack-password.conf`, ahead of the official
image's cloud-init defaults.

Do not copy transient CloudStack runtime details such as
`Message.ReservedCapacityFreed.Flag`.

## Verification

Run before registration:

```bash
sha256sum centos-stream-10.qcow2
qemu-img check centos-stream-10.qcow2
qemu-img info centos-stream-10.qcow2
```

Expected SHA-256:

```text
d777152da3705fb3b9ea2c8677e13e8adb7f296c8d565d5a3fb71582f4c97b73  centos-stream-10.qcow2
```

Fresh Base, Pro, and Ultra deployments passed boot, networking, automatic root
disk expansion to 30/50/80 GiB, fixed swap, CloudStack password delivery,
SSH-key delivery, cloud-init completion with no errors, SELinux Enforcing,
zero failed systemd units, host-model CPU, and QEMU Guest Agent checks. Base
passed password and key access before and after a CloudStack reboot. Pro and
Ultra passed password-only access with no residual key. A final password-only
Base smoke test was repeated from the canonical mirror URL and final UUID.