Complete ISO desktop lifecycle and signed release qualification

[DigitalPals]

ISO installations previously lacked a complete desktop RPM update and migration path. This adds signed channel enrollment, deferred migrations that preserve user edits, resumable hardware setup, and installed-system diagnostics informed by the reference Dell XPS workstation.

The installer offers an explicit passwordless-sudo choice, disk rescanning and identification, all supported Anaconda locales, and actionable failure details. Battery status reflects configured charge limits. GTK provisioning skips desktop-bus initialization offline; live provisioning uses bounded, separate file captures to prevent inherited output pipes from hanging setup.

Release automation qualifies images on the PXE host and signs artifacts in a separate hosted Fedora container. Gates cover four graphical installation scenarios and an older-ISO RPM upgrade with GRUB recovery. Project code now uses MIT; bundled third-party terms and provenance remain separate.

Validation:

• All five clean UEFI QEMU scenarios passed: encrypted US/Dutch (25 checks each), unencrypted US/Dutch (12 each), and original-baseline RPM upgrade/GRUB restore (14). The 88 checks include unchanged guard disks, installed boot without the ISO, desktop/locale checks, enforcing SELinux, login behavior, and preservation of user settings during upgrade/recovery.
• The qualified ISO was built from clean a991a97 source. Later bd04954 changes affect qualification socket handling only. Final reports bind exact ISO/RPM hashes and harness revisions; diagnostic guests and superseded images are excluded.
• The initial local repository suite, focused GTK/shutdown/socket regressions, real isolated gsettings/dconf checks, and disposable-key signing/tamper checks passed. Required hosted CI checks cover the final PR head.
• Superseded images, VM disks, staging, logs, and temporary worktrees were removed. Final checksums passed; iVentoy refresh succeeded and PXE remains active.

See the qualification report for evidence and retained artifacts. The reference laptop was inspected without changing it. Physical PXE-client boot, Secure Boot, and laptop post-upgrade hardware behavior remain outside this QEMU qualification.

No production desktop RPM or public repository metadata has been published. The private testing ISO enables the future stable channel, so ordinary DNF operations require disabling that repository until publication; the report documents the command.