Fedora

Knowledge Base for Fedora

Fedora 42 Kinoite

Custom system-wide CA

sudo cp my-root-cert.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust extract

Hypervisor: Use qemu & kvm

# 1) Create new deployment with virtualization and Windows 11 prerequisites
sudo rpm-ostree install qemu-kvm libvirt virt-manager virt-install virt-viewer edk2-ovmf swtpm

# 2) Reboot into that deployment
systemctl reboot

# 3) Check for known bug in Fedora
grep -E '^libvirt:' /etc/group || echo "no libvirt in /etc/group"

## If output is missing your encountering the bug: group exists in /usr/lib/group but not in /etc/group, s
## Copy the system group into /etc/group. Safe append from system database into /etc
## Source: https://github.com/crc-org/crc/wiki/Fails-to-add-the-user-to-the-libvirt-group-Fedora-Silverblue/a64b0efc0a4a293ae2883e69d3881312c7409245
getent group libvirt | sudo tee -a /etc/group

## Add your user to the group (and re-login afterwards)
sudo gpasswd -a <YOUR_USER> libvirt

# 4) Allow your user to manage VMs without sudo after re-login
sudo usermod -aG libvirt $(whoami)

# 5) Start/enable the hypervisor daemon
sudo systemctl enable --now libvirtd

# 6) (Re-login so the libvirt group takes effect if you added yourself)

# After the installation with rpm-ostree you will find the packages in LayeredPackages
$ sudo rpm-ostree status
State: idle
Deployments:
● fedora:fedora/42/x86_64/kinoite
                  Version: 42.20250812.0 (2025-08-12T00:32:31Z)
               BaseCommit: 5fb4697b96656c7a5809a34c143c6fdcad6ba05c1632daa4cb33d755252cbe1d
             GPGSignature: Valid signature by B0F4950458F69E1150C6C5EDC8AC4916105EF944
          LayeredPackages: edk2-ovmf libvirt qemu-kvm swtpm virt-install virt-manager virt-viewer

  fedora:fedora/42/x86_64/kinoite
                  Version: 42.20250812.0 (2025-08-12T00:32:31Z)
                   Commit: 5fb4697b96656c7a5809a34c143c6fdcad6ba05c1632daa4cb33d755252cbe1d
             GPGSignature: Valid signature by B0F4950458F69E1150C6C5EDC8AC4916105EF944