commit 93b6d7acb8746ad3e209454ed25eef081925885a
Author: anthony.wen <awen01@gmail.com>
Date:   Wed Mar 11 15:19:25 2026 -0400

    Initial commit

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..80dd262
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+log/
diff --git a/atvm/AGENTS.md b/atvm/AGENTS.md
new file mode 100644
index 0000000..c7000a5
--- /dev/null
+++ b/atvm/AGENTS.md
@@ -0,0 +1,162 @@
+# ATVM AGENTS Guide
+
+This file defines how to operate and maintain the ATVM folder workflows.
+It is rebuilt from current files in `/home/aw/code/cds/atvm`.
+
+## Scope
+Two operational tracks exist in this folder:
+- Setup/bootstrap track:
+  - `atvm-setup-script.sh`
+  - `run-atvm-setup-and-collect-log.sh`
+  - `atvm-setup-script-guide.md`
+  - `atvm-setup-script-runs.md`
+- Cypress automation track:
+  - `atvm-automation-guide.md`
+  - `atvm-automation-examples.md`
+  - `atvm-automation-runs.md`
+
+Reference/inventory material:
+- `cypress-automation-for-cmc.md`
+- `cypress-automation-for-cmc.md:Zone.Identifier`
+
+## File Roles
+- `*-guide.md` files:
+  - Guide-only procedures, rules, defaults, and checklists.
+  - No dated or one-off run examples.
+- `*-runs.md` files:
+  - Run-specific learnings only when a run introduces new information.
+  - No routine/no-change run logs.
+- `*-examples.md` files:
+  - Reusable command examples and commonly used option combinations.
+  - Keep generic; avoid dated one-off run outcomes.
+
+## Setup Track: Required Behavior
+Use `atvm-setup-script-guide.md` as the procedure source and keep behavior aligned with `atvm-setup-script.sh`.
+
+### Safety-Critical Rules
+1. Never run setup without operator-provided `--expected-ip` and `--expected-hostname`.
+2. Never infer expected hostname from target host output.
+3. Stop immediately on hostname mismatch or expected-IP-not-assigned.
+4. Keep static IP configuration as a final step to avoid mid-run connection loss.
+
+### Canonical Setup Order
+1. Parse args.
+2. Validate host identity.
+3. Check sudo/privileges.
+4. Fix repositories.
+5. Configure Ubuntu root SSH/password workflow (Ubuntu only).
+6. Install sudo if needed.
+7. Configure Oracle default non-UEK kernel (Oracle Linux only).
+8. Disable Ubuntu auto-upgrades (Ubuntu only).
+9. Run package cleanup/install.
+10. Disable SELinux (RHEL-family).
+11. Configure static IP.
+12. Print summary.
+13. Reboot + post-reboot SELinux verifier when applicable.
+14. Keep client on until controller log copy + SHA256 verification completes.
+15. Power off only after verified success and no real error log lines.
+
+### Setup Defaults
+- ATVM static IP target: `192.168.3.191/22`
+- Gateway: `192.168.0.1`
+- DNS: `8.8.8.8`, `8.8.4.4`
+- Ubuntu root SSH workflow credential in docs/script: `root / cdsi2012`
+- Client log file: `atvm_setup_script.log` (typically `/root/atvm_setup_script.log` when run as root)
+
+### Setup Controller Wrapper Rules
+- Wrapper supports:
+  - run-and-collect (default)
+  - `--collect-after-complete`
+- `run-and-collect` requires env vars:
+  - `EXPECTED_IP_ARG`
+  - `EXPECTED_HOSTNAME_ARG`
+- Wrapper validates success marker and SHA256 before success.
+- Wrapper powers off only when log has no lines matching `^\[ERROR\]`.
+
+## Cypress Automation Track: Required Behavior
+Use `atvm-automation-guide.md` as the execution source.
+Use `atvm-automation-examples.md` as the common options/command reference.
+
+### Controller Client
+- Hostname: `atvm-cypres-vm-1`
+- IP: `192.168.3.190`
+- Credentials: `root / atvmcdsi2012`
+
+### Mandatory Run Control
+1. Before planning a new run, check for active automation processes.
+2. Report running/not-running status.
+3. If running, ask before termination; terminate only with explicit approval.
+4. Always show exact planned command(s) before execution.
+5. Execute only after explicit approval.
+6. If monitoring is not requested, report immediate command success/failure and any errors.
+7. Monitor completion only when explicitly requested by the operator.
+8. For monitored runs, allow long runtime windows (15-30+ minutes or longer) and continue until completion unless operator instructs otherwise.
+9. Do not terminate monitored runs unless the operator explicitly instructs termination.
+
+### Status Request Format
+When the operator asks for run status, report in this order:
+1. Heading/title using the run `build_name`.
+2. Completed machines with pass/fail state for each machine.
+3. Skipped machines with reason.
+4. Remaining machines still to run.
+5. Summary counts for finished, passed, failed, and skipped machines.
+6. Timing details:
+   - start time
+   - end time if complete
+   - total run time if complete, or elapsed run time if still running
+   - quickest completed test runtime
+   - longest completed test runtime
+   - average completed test runtime
+7. Estimated completion time.
+
+Status details:
+- Use the live run log on the automation VM when available.
+- Use the run `build_name` as the heading/title when available.
+- Show blacklisted machines under skipped machines when they are part of the requested scope.
+- Show in-progress machines under remaining machines as `RUNNING`.
+- Show not-yet-started machines as `NOT STARTED`.
+- Use completed spec results already recorded in the log to determine machine pass/fail state.
+- For failed machines, include the failure reason from the run log in the status output.
+- Include start time in status output when it can be derived from the log.
+- Include end time and total runtime for completed runs, or elapsed runtime for active runs.
+- Include quickest completed test runtime, longest completed test runtime, and average completed test runtime under timing details when they can be derived from the log.
+
+### Automation Blacklist
+Always exclude these machines with `--exclude_partial_match` when building ATVM automation commands.
+
+CMC install blacklist (`BLACKLISTED: CMC INSTALL - CAN'T COMPILE`):
+- `atvm6-centos6.0`
+- `atvm41-redhat6.0`
+- `atvm73-oracle6.0`
+
+Support-request blacklist (`BLACKLISTED: SUPPORT REQUEST - WAITING`):
+- `atvm113-debian9.0.0`
+- `atvm115-debian9.1.0`
+- `atvm116-debian9.2.0`
+- `atvm156-debian9.3.0`
+
+Re-create blacklist:
+- `atvm157-debian13.0.0`
+
+### Operator Preferences
+- Do not include Gold Disk IDs in `--build_name`.
+- `--build_name` must not contain spaces; use `-` between words.
+- Prefer distro-scoped filtering (for example `--containsVm redhat9`) when possible.
+
+## Update Policy (Both Tracks)
+After each run:
+- Update corresponding `*-guide.md` only if workflow/rules/default behavior changed.
+- Update corresponding `*-examples.md` when common command patterns/options change.
+- Update corresponding `*-runs.md` only if the run produced new learning.
+
+## Path and Naming Consistency Note
+Current repo filenames use hyphen style, but some script text/defaults still show underscore-style paths (for example `atvm_setup_script.sh`, `run_atvm_setup_and_collect_log.sh`, `/home/aw/code/atvm`).
+
+When operating:
+1. Use actual filesystem paths in this repo first (`/home/aw/code/cds/atvm/...`).
+2. If script defaults are used, verify they match existing files before execution.
+3. If changing path conventions, update scripts and guides in the same change.
+
+## Non-Goals
+- Do not treat `cypress-automation-for-cmc.md` as executable runbook logic.
+- Do not record secrets/tokens into new guide or runs entries.
diff --git a/atvm/atvm-automation-examples.md b/atvm/atvm-automation-examples.md
new file mode 100644
index 0000000..3d76536
--- /dev/null
+++ b/atvm/atvm-automation-examples.md
@@ -0,0 +1,97 @@
+## Examples
+
+- `--build_name` values must not include spaces; use `-` between words.
+- Add the maintained blacklist to `--exclude_partial_match` for runs that use broad selection or randomization.
+- Maintained blacklist:
+  - `atvm6-centos6.0`
+  - `atvm41-redhat6.0`
+  - `atvm73-oracle6.0`
+  - `atvm113-debian9.0.0`
+  - `atvm115-debian9.1.0`
+  - `atvm116-debian9.2.0`
+  - `atvm156-debian9.3.0`
+  - `atvm157-debian13.0.0`
+
+### E2E: Pure iscsi+fc with specific VMs
+```bash
+python3 cmc-templates.py --template cmc-e2e --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --test_partition --integration_type pure --use_specified_plugin both --specify_vms atvm3-ubuntu18.04 atvm109-w2k12R2; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-e2e-pure-plugin
+```
+
+### E2E: Infinibox fc with specific VMs
+```bash
+python3 cmc-templates.py --template cmc-e2e --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --test_partition --integration_type infinibox --use_specified_plugin fc --specify_vms atvm51-redhat6.10 atvm110-w2k16; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-e2e-infinibox-plugin
+```
+
+### E2E: Regular cutover
+```bash
+python3 cmc-templates.py --template cmc-e2e --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --test_partition --integration_type pure --use_specified_plugin fc --specify_vms atvm93-oracle7.9 atvm111-w2k19 --regular_cutover; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-e2e-regular-cutover
+```
+
+### Reboot test
+```bash
+python3 cmc-templates.py --template cmc-reboot --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --integration_type pure --use_specified_plugin fc --specify_vms atvm37-rocky8.8 atvm112-w2k22 --wait_for_power_on 120; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-reboot
+```
+
+### SystemOS test
+```bash
+python3 cmc-templates.py --template cmc-systemOS --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --specify_vms atvm118-oracle9.3 atvm145-w2k25; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-systemOS
+```
+
+### MigrateOPS test
+```bash
+python3 cmc-templates.py --template cmc-migrateops --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --integration_type pure --use_specified_plugin fc --specify_vms atvm139-redhat9.5 atvm112-w2k22; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-migrateOPS
+```
+
+### Compute MigrateOPS: vmware
+```bash
+python3 cmc-templates.py --template cmc-migrateops-compute-migration --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --vm_platforms vmware --test_partition --specify_vms atvm138-oracle9.4-opt atvm112-w2k22 --set_static_ip_dest; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-computeMigrateOPS-vmware
+```
+
+### Compute MigrateOPS: ovirt
+```bash
+python3 cmc-templates.py --template cmc-migrateops-compute-migration --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --vm_platforms ovirt --test_partition --specify_vms atvm124-redhat8.8 atvm111-w2k19 --set_static_ip_dest; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-computeMigrateOPS-ovirt
+```
+
+### Group consistency
+```bash
+python3 cmc-templates.py --template cmc-group-consistency --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --integration_type pure --use_specified_plugin fc --specify_vms atvm4-ubuntu20.04 atvm112-w2k22 --enable_uuid; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-consistentyGroup
+```
+
+### H2H same platform
+```bash
+python3 cmc-templates.py --template cmc-h2h-same-platf --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --integration_type pure --use_specified_plugin fc --specify_vms atvm38-rocky9.0 atvm112-w2k22; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-h2hSamePlatform
+```
+
+### H2H different platform
+```bash
+python3 cmc-templates.py --template cmc-h2h-diff-platf --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --integration_type pure --use_specified_plugin fc --specify_vms atvm65-redhat8.3 atvm112-w2k22; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name nightly-h2hDifferentPlatform
+```
+
+### Randomized reboot sanity
+```bash
+python3 cmc-templates.py --template cmc-reboot --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --test_partition --integration_type pure --use_specified_plugin fc --randomize 1 --exclude_partial_match suse15.0 atvm6-centos6.0 atvm41-redhat6.0 atvm73-oracle6.0 atvm113-debian9.0.0 atvm115-debian9.1.0 atvm116-debian9.2.0 atvm156-debian9.3.0 atvm157-debian13.0.0 --wait_for_power_on 120; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name sanity-reboot-iscsi
+```
+
+### Randomized e2e sanity
+```bash
+python3 cmc-templates.py --template cmc-e2e --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --test_partition --integration_type pure --use_specified_plugin both --randomize 1 --exclude_partial_match suse15.0 atvm6-centos6.0 atvm41-redhat6.0 atvm73-oracle6.0 atvm113-debian9.0.0 atvm115-debian9.1.0 atvm116-debian9.2.0 atvm156-debian9.3.0 atvm157-debian13.0.0; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name sanity-e2e
+```
+
+### Randomized systemOS sanity
+```bash
+python3 cmc-templates.py --template cmc-systemOS --ignore_force_shutdown --config_file_path ./cypress.atvm-config.ts --randomize 1 --exclude_partial_match suse15.0 fedora34 atvm6-centos6.0 atvm41-redhat6.0 atvm73-oracle6.0 atvm113-debian9.0.0 atvm115-debian9.1.0 atvm116-debian9.2.0 atvm156-debian9.3.0 atvm157-debian13.0.0; \
+python3 ./run-sorry-cypress.py --config_file cypress.atvm-config.ts --build_name sanity-systemOS
+```
diff --git a/atvm/atvm-automation-guide.md b/atvm/atvm-automation-guide.md
new file mode 100644
index 0000000..0448b88
--- /dev/null
+++ b/atvm/atvm-automation-guide.md
@@ -0,0 +1,166 @@
+# Run ATVM Automation Guide
+
+This file is guide-only documentation for operating ATVM CMC automation.
+Do not put specific run examples here.
+For reusable command examples and common option combinations, use `atvm-automation-examples.md`.
+
+## Purpose
+Run ATVM CMC automation tests on the designated automation VM without unintended system or file changes.
+
+## ATVM Cypress Automation Controller Client
+- Hostname: `atvm-cypres-vm-1`
+- IP: `192.168.3.190`
+- Credentials: `root / atvmcdsi2012`
+
+## Operating Constraints
+- Run only scripts/commands explicitly requested.
+- Do not make manual system configuration changes on the client.
+- Do not edit client files unless explicitly requested.
+
+## Operator Preferences
+- Do not include Gold Disk identifiers in `--build_name`.
+- `--build_name` must not contain spaces; use `-` between words.
+- For multiple VMs in same distro, use distro-scoped filtering (`--containsVm`) instead of long explicit VM lists.
+- Before preparing a new run, always check whether automation is already running.
+- Always report whether automation is currently running.
+- If running, ask whether to terminate; terminate only with explicit approval.
+- After termination approval, terminate first, then present planned command(s), then wait for separate execution approval.
+- Before any run, always show exact planned command(s) and wait for explicit approval.
+- Execute only after explicit approval (for example `approve`).
+- After execution, report immediate success/failure only.
+- Do not actively monitor completion unless explicitly requested.
+- If monitoring is requested, allow long runtime windows (15-30+ minutes) and continue until completion unless operator instructs otherwise.
+- Report command errors immediately.
+- `sshpass` may be used where password-based SSH automation is required.
+
+## Core Scripts
+- Template prep: `/root/cdc-e2e-cyp-12.17.4/cmc-templates.py`
+- Test execution: `./run-sorry-cypress.py`
+
+Typical sequence:
+1. Run `cmc-templates.py` with requested template/options.
+2. Run `run-sorry-cypress.py` with matching config and build name.
+
+## Config File / Gold Disk Mapping
+- `cypress.atvm-config-gold.ts` -> Gold Disk 1
+- `cypress.atvm-config-gold-2.ts` -> Gold Disk 2
+- Additional numbered config variants map to corresponding Gold Disks.
+
+## Available Templates
+- `cmc-e2e`
+- `cmc-group-consistency`
+- `cmc-h2h-diff-platf`
+- `cmc-h2h-same-platf`
+- `cmc-migrateops`
+- `cmc-migrateops-compute-migration`
+- `cmc-reboot`
+- `cmc-systemOS`
+
+## Command Pattern
+```bash
+python3 cmc-templates.py --template <template> --config_file_path ./<config-file> [template options...]; \
+python3 ./run-sorry-cypress.py --config_file <config-file> --build_name <hyphenated-description-no-spaces>
+```
+
+## Examples Reference
+- Commonly used command examples: `atvm-automation-examples.md`
+- Keep this guide focused on run-control rules and workflow constraints.
+
+## Example Option Patterns (Guide-Only)
+- Distro-scoped VM selection:
+  - `--containsVm redhat`
+  - `--containsVm redhat9`
+- Explicit VM selection:
+  - `--specify_vms <vm1> <vm2> ...`
+- Compute migrateops platform:
+  - `--vm_platforms vmware|ovirt|openshift|proxmox`
+
+## Blacklisted Machines
+Always exclude these machines from ATVM automation runs by adding them to `--exclude_partial_match`.
+
+Permanently blacklisted because CMC cannot compile:
+- `atvm6-centos6.0`
+- `atvm41-redhat6.0`
+- `atvm73-oracle6.0`
+
+Temporarily blacklisted while support requests are waiting:
+- `atvm113-debian9.0.0`
+- `atvm115-debian9.1.0`
+- `atvm116-debian9.2.0`
+- `atvm156-debian9.3.0`
+
+Temporarily blacklisted until re-created:
+- `atvm157-debian13.0.0`
+
+Preferred exclude list:
+- `--exclude_partial_match atvm6-centos6.0 atvm41-redhat6.0 atvm73-oracle6.0 atvm113-debian9.0.0 atvm115-debian9.1.0 atvm116-debian9.2.0 atvm156-debian9.3.0 atvm157-debian13.0.0`
+
+## Running-Automation Check (Mandatory)
+Before any new automation request:
+1. SSH to `root@192.168.3.190`.
+2. Check for active automation processes (for example `run-sorry-cypress.py`, `cmc-templates.py`, and related Cypress runners).
+3. Report:
+   - `Running` with process details, or
+   - `Not running`.
+4. If `Running`, ask operator whether to terminate.
+5. If termination is approved, terminate matching process(es), confirm termination, then proceed to planned-command approval.
+6. If termination is not approved, do not start a new run.
+
+## Approval Workflow (Mandatory)
+1. Build exact command(s) for the request.
+2. Present them verbatim as planned commands.
+3. Wait for explicit approval.
+4. Run only approved command(s), no extra options.
+5. If monitoring was not requested, report immediate success/failure for each command.
+6. If monitoring was requested, keep monitoring until completion and report final outcome.
+
+## Requested Test Style
+When asked for one VM or a VM set:
+- choose requested template/options,
+- choose correct config file for intended Gold Disk,
+- use a descriptive `--build_name` without Gold Disk IDs.
+
+## Update Rule
+- After each run, update this guide only for workflow/rule/default changes.
+- Update `atvm-automation-examples.md` for reusable command/option examples.
+- Add run-specific learnings only to `atvm-automation-runs.md` when the run produced new information.
+
+## Monitoring Policy
+- Monitor only when the operator explicitly asks to monitor.
+- If monitoring was not requested, run commands and report execution success/failure and any errors.
+- If monitoring was requested, do not terminate processes automatically; only terminate if the operator explicitly instructs termination.
+
+## Status Reporting Format
+When the operator asks for the status of an ATVM automation run, report in this order:
+1. Heading/title using the run `build_name`.
+2. Completed machines with pass/fail state for each machine.
+3. Skipped machines with reason.
+4. Remaining machines still to run.
+5. Summary counts for finished, passed, failed, and skipped machines.
+6. Timing details:
+   - start time
+   - end time if complete
+   - total run time if complete, or elapsed run time if still running
+   - quickest completed test runtime
+   - longest completed test runtime
+   - average completed test runtime
+7. Estimated completion time.
+
+Status-report expectations:
+- Use the live automation VM state when available.
+- Derive the heading/title from the run `build_name` when available.
+- Derive completed-machine status from completed spec results already written to the run log.
+- Include the run start time in every status response when it can be derived from the run log.
+- If the run is complete, include the end time and total run time.
+- If the run is still active, include the elapsed run time so far.
+- Include quickest completed test runtime, longest completed test runtime, and average completed test runtime under timing details when they can be derived from the run log.
+- Show blacklisted machines under skipped machines even if they are part of the broader machine family requested by the operator.
+- For skipped machines, include the reason category:
+  - `BLACKLISTED: CMC INSTALL - CAN'T COMPILE`
+  - `BLACKLISTED: SUPPORT REQUEST - WAITING`
+  - `BLACKLISTED: RE-CREATE NEEDED`
+- If a machine is currently in progress, show it under remaining machines as `RUNNING`.
+- If a machine has not started yet, show it under remaining machines as `NOT STARTED`.
+- If no failures are present in completed spec results, report those completed machines as `PASS`.
+- If a completed spec result shows a failure, report that machine as `FAIL` and include the failure reason from the run log.
+- Base the completion estimate on the current remaining machine count and recent per-machine runtime visible in the run log.
diff --git a/atvm/atvm-automation-runs.md b/atvm/atvm-automation-runs.md
new file mode 100644
index 0000000..7b2c283
--- /dev/null
+++ b/atvm/atvm-automation-runs.md
@@ -0,0 +1,47 @@
+# Run ATVM Automation Runs
+
+This file stores run-specific examples only when a run produced a new learning relevant to future automation tasks.
+
+## Entry Rule
+- Add an entry only when a run changed workflow behavior, exposed a failure mode, or confirmed a required new check.
+- Do not add routine runs with no new learning.
+
+## Current State
+- No run-learning entries recorded yet from `atvm-automation-guide.md` source material.
+
+## Run Learning: 2026-03-08 (E2E redhat9.7, pure/fc)
+- Request:
+  - template: `cmc-e2e`
+  - filter: `--containsVm redhat9.7`
+  - integration: `--integration_type pure`
+  - plugin: `--use_specified_plugin fc`
+- Observed result:
+  - Cypress spec execution passed (`1` test, `1` passing, `0` failing).
+  - Cloud run URL was produced and marked uploaded.
+  - `run-sorry-cypress.py` remained running afterward with a defunct `npm exec cypress-cloud` child process and did not exit cleanly on its own.
+- Action for future runs:
+  - If pass/upload is confirmed but `run-sorry-cypress.py` does not exit, treat it as a runner hang condition.
+  - Capture run URL and pass/fail status first, then terminate the stuck runner process cleanly.
+
+## Run Learning: 2026-03-09 (Blacklist handling and status format)
+- Observed requirement:
+  - Some ATVM machines must be skipped even when a broad selector such as `--containsVm` or `--randomize` would otherwise include them.
+- Machines to blacklist via `--exclude_partial_match`:
+  - `BLACKLISTED: CMC INSTALL - CAN'T COMPILE`:
+    - `atvm6-centos6.0`
+    - `atvm41-redhat6.0`
+    - `atvm73-oracle6.0`
+  - `BLACKLISTED: SUPPORT REQUEST - WAITING`:
+    - `atvm113-debian9.0.0`
+    - `atvm115-debian9.1.0`
+    - `atvm116-debian9.2.0`
+    - `atvm156-debian9.3.0`
+  - Needs re-creation:
+    - `atvm157-debian13.0.0`
+- Action for future runs:
+  - Add these machine names to `--exclude_partial_match` when building broad-scope automation commands.
+  - When reporting run status, include skipped blacklisted machines separately with their reason, in addition to completed and remaining machines.
+  - Use the run `build_name` as the heading/title for status responses so the test type is obvious.
+  - For failed machines in status responses, include the failure reason taken from the run log.
+  - Include timing details in status responses: start time, end time when complete, and total or elapsed runtime.
+  - Also include timing stats in status responses: quickest completed test runtime, longest completed test runtime, and average completed test runtime.
diff --git a/atvm/atvm-setup-script-guide.md b/atvm/atvm-setup-script-guide.md
new file mode 100644
index 0000000..95c0bc5
--- /dev/null
+++ b/atvm/atvm-setup-script-guide.md
@@ -0,0 +1,165 @@
+# ATVM Setup Script Guide
+
+This file is guide-only documentation for running and maintaining the ATVM setup workflow.
+Do not put dated run examples here.
+
+## Scope
+- Client setup script: `/home/aw/code/cds/atvm/atvm-setup-script.sh`
+- Controller wrapper: `/home/aw/code/cds/atvm/run-atvm-setup-and-collect-log.sh`
+- Run-learnings log: `/home/aw/code/cds/atvm/atvm-setup-script-runs.md`
+
+## Purpose
+The setup flow performs a controlled bootstrap across supported Linux distributions:
+1. Validate target host identity using expected IP + expected hostname before any configuration.
+2. Fix repositories (especially CD/DVD media repo entries).
+3. On Ubuntu, configure root SSH password-login workflow (`root/cdsi2012`) for follow-on root operations.
+4. On Oracle Linux, set default boot kernel to non-UEK when available.
+5. Disable unattended auto-upgrades on Ubuntu.
+6. Remove specific storage-related packages and install base tooling.
+7. Disable SELinux on Red Hat-family systems.
+8. Configure static IP as the final step.
+9. Print final summary and write logs to `atvm_setup_script.log`.
+10. On SELinux-capable distros, reboot and verify runtime SELinux status post-reboot.
+11. Keep client powered on after successful setup so controller-side log collection + SHA256 verification can complete.
+12. Power off from controller only after successful verification and no setup errors.
+
+## Execution Model
+- Shell safety flags: `set -euo pipefail`
+- Logging: colorized console + plain text log file
+- Entry point: `main "$@"`
+- Default operator assumption for setup access: `root / cdsi2012` unless explicitly overridden.
+
+## Mandatory Identity Gate
+Setup must not start unless operator explicitly provides both values:
+- `--expected-ip <ip>`
+- `--expected-hostname <hostname>`
+
+Rules:
+- Connect to the operator-provided target IP directly.
+- Do not pre-scan alternate candidate IPs.
+- Do not infer hostname from target.
+- If hostname is missing from request, stop and ask for it.
+- If detected hostname does not exactly match expected hostname, stop immediately.
+- If expected IP is not assigned on target, stop immediately.
+
+## Canonical Run Order
+1. `parse_args`
+2. `validate_target_host_identity`
+3. `check_sudo`
+4. `fix_repositories`
+5. `configure_ubuntu_root_ssh_access` (Ubuntu only)
+6. `install_sudo_if_needed`
+7. `configure_oracle_non_uek_kernel` (Oracle Linux only)
+8. `disable_ubuntu_auto_upgrades` (Ubuntu only)
+9. `run_package_installation`
+10. `disable_selinux` (RHEL-family only)
+11. `configure_static_ip` (final configuration step)
+12. `print_final_summary`
+13. `reboot_and_verify_selinux_if_needed`
+14. `poweroff_client_if_successful` (controller-driven after verification)
+
+## Core Behavior By Step
+
+### Repository Fix
+- Debian/Ubuntu: comment `cdrom` entries in apt lists and run `apt-get update`.
+- RHEL-family/Oracle: disable media/cdrom/dvd repo entries and run `yum clean all && yum makecache`.
+- Fedora: same model via `dnf clean all && dnf makecache`.
+- openSUSE/SLES: disable CD/DVD repos with `zypper mr -d` and refresh.
+
+### Oracle Linux Kernel Handling
+- Oracle Linux only.
+- Select first non-UEK kernel via `grubby --info=ALL` and set GRUB default.
+- Track whether default changed and whether reboot is required.
+
+### Ubuntu Root SSH Workflow
+- Ubuntu only.
+- Set root password `cdsi2012`, unlock root account.
+- Write `/etc/ssh/sshd_config.d/99-atvm-root-login.conf` enabling root + password auth.
+- Validate config and restart SSH service.
+
+### Ubuntu Auto-Upgrade Disable
+- Ubuntu only.
+- Update `/etc/apt/apt.conf.d/20auto-upgrades` to disable periodic update/upgrade actions.
+
+### Package Installation
+- Package manager detection order: `apt-get`, `dnf`, `yum`, `zypper`, `pacman`, `apk`.
+- Pre-cleanup removes multipath/iSCSI packages where applicable.
+- Installs kernel headers per distro.
+- Base package set includes:
+  `curl wget git vim perl gdb scsitools net-tools parted fio ca-certificates python3 elfutils-libelf-devel`
+
+### SELinux Disable
+- RHEL-family only.
+- If enforcing/permissive, backup and rewrite `/etc/selinux/config` to disabled.
+- Marks reboot recommendation/requirement in summary.
+
+### Static IP Configuration (Final Step)
+Hardcoded target values:
+- IP: `192.168.3.191`
+- Prefix: `22`
+- Gateway: `192.168.0.1`
+- DNS: `8.8.8.8`, `8.8.4.4`
+
+Interface detection priority:
+1. default-route interface
+2. first non-loopback interface with IPv4
+3. first non-loopback interface from link list
+
+Network-stack handling includes `netplan`, `NetworkManager`/`nmcli`, `wicked`, and legacy `ifcfg` fallback patterns.
+
+### SELinux Reboot Verification
+- Applies to `rhel`, `centos`, `rocky`, `almalinux`, `fedora`, `ol` when SELinux changed.
+- Creates one-time systemd verifier service before reboot.
+- Post-reboot service records runtime `getenforce` and self-removes.
+- On success/no real errors, keeps client on for controller log copy/hash verification before controller power-off.
+- On errors, leaves client on for manual inspection.
+
+## Power-State Rules
+- After successful setup, keep client powered on until controller log collection + SHA256 verification completes.
+- If verification succeeds and no real error lines exist (`^\[ERROR\]`), controller powers off client.
+- If any real error lines exist, keep client powered on.
+
+## Logging and Verification
+- Client log filename: `atvm_setup_script.log`
+- Common client log path when run as root: `/root/atvm_setup_script.log`
+- Controller collected log naming: `atvm_configuration_<hostname>_<yyyymmdd_hhmmss>.log`
+
+Required post-run validation:
+1. Copy client log to controller `atvm/log/` path.
+2. Compare SHA256 between client and copied controller log.
+3. Require exact match.
+
+## Preferred Execution Commands
+Direct client execution:
+```bash
+sudo bash /home/cirrususer/atvm-setup-script.sh \
+  --expected-ip <current-client-ip> \
+  --expected-hostname <exact-hostname>
+```
+
+Controller run + collect:
+```bash
+EXPECTED_IP_ARG=<current-client-ip> EXPECTED_HOSTNAME_ARG=<exact-hostname> \
+/home/aw/code/cds/atvm/run-atvm-setup-and-collect-log.sh
+```
+
+Controller collect-only after client run:
+```bash
+/home/aw/code/cds/atvm/run-atvm-setup-and-collect-log.sh --collect-after-complete
+```
+
+## Troubleshooting
+- If local collected log is missing, do not rerun full setup just for log recovery.
+- Use collect-only mode and verify SHA256 after copy.
+- If wrapper appears stuck after IP/reboot transition, stop older wrapper sessions and run one fresh collect-only session.
+- If `sshpass` is missing on controller, wrapper can still run but may require repeated interactive password prompts.
+
+## Operational Caveats
+- Not fully idempotent for all paths; repeated runs may rewrite network configs and create multiple backups.
+- Static IP values are hardcoded; adjust before use in other environments.
+- Run in maintenance windows because network changes can interrupt active sessions.
+- Preserve host identity gating; do not weaken expected IP/hostname checks.
+
+## Update Rule
+- After each run, update this file only for guide/rule/checklist/default behavior changes.
+- Put run-specific outcomes in `atvm-setup-script-runs.md` only when the run produced a new learning.
diff --git a/atvm/atvm-setup-script-runs.md b/atvm/atvm-setup-script-runs.md
new file mode 100644
index 0000000..669a5aa
--- /dev/null
+++ b/atvm/atvm-setup-script-runs.md
@@ -0,0 +1,40 @@
+# ATVM Setup Script Runs
+
+This file stores run-specific examples only when a run produced a new learning relevant to future tasks.
+
+## Entry Rule
+- Add an entry only when the run changed workflow behavior, exposed a new failure mode, or confirmed a new required check.
+- Do not add routine runs with no new learning.
+
+## Run Learning: 2026-03-03 (Ubuntu 24.04)
+- Environment:
+  - Initial IP: `192.168.0.89`
+  - Final static IP: `192.168.3.191`
+  - Hostname: `atvm-codextest-vm-1`
+- Learning:
+  - Root SSH password workflow (`root/cdsi2012`) and log copy/hash verification path are valid end-to-end.
+  - Wrapper must enforce identity arguments for run-and-collect mode.
+- Action for future runs:
+  - Require `EXPECTED_IP_ARG` and `EXPECTED_HOSTNAME_ARG` for wrapper run-and-collect.
+
+## Run Learning: 2026-03-05 (RHEL 9)
+- Environment:
+  - Initial IP: `192.168.3.212`
+  - Final static IP: `192.168.3.191`
+  - Hostname: `atvm-codextest-vm-2`
+- Learning:
+  - SELinux disable path with reboot + post-reboot verifier worked.
+  - Auto power-off can race controller-side log collection if done too early.
+- Action for future runs:
+  - Keep client powered on until controller log copy + SHA256 verification completes.
+  - Only then perform controller-side power-off when no real error lines are present.
+
+## Run Learning: 2026-03-06 (Oracle Linux 9)
+- Environment:
+  - Initial IP: `192.168.0.121`
+  - Final static IP: `192.168.3.191`
+  - Hostname: `atvm-codextest-vm`
+- Learning:
+  - Wrapper auto power-off was blocked by false-positive error detection from instructional text.
+- Action for future runs:
+  - Match only real error log lines using `^\[ERROR\]` for power-off gating.
diff --git a/atvm/atvm-setup-script.sh b/atvm/atvm-setup-script.sh
new file mode 100644
index 0000000..22abde1
--- /dev/null
+++ b/atvm/atvm-setup-script.sh
@@ -0,0 +1,1867 @@
+#!/usr/bin/env bash
+
+# ATVM VM Setup Script
+# Combined script that:
+# 0. Validates target host identity using expected IP + hostname
+# 1. Fixes repository configuration (removes DVD/CD-ROM entries)
+# 2. Configures Ubuntu root SSH/password workflow
+# 3. Sets Oracle Linux default kernel to non-UEK
+# 4. Disables Ubuntu unattended auto-upgrades
+# 5. Installs cross-distro packages
+# 6. Disables SELinux (Red Hat-based systems only)
+# 7. Configures Static IP as the final step (All distributions)
+# 8. Reboots SELinux-capable distros and verifies SELinux after boot
+# 9. Keeps client powered on until controller-side log copy + hash verification complete
+# 10. Requires controller-side power-off only after successful verification
+
+set -euo pipefail
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+CYAN='\033[0;36m'
+NC='\033[0m' # No Color
+
+# Global variables to track actions
+SUDO_CMD=""
+SUDO_INSTALLED=false
+MULTIPATH_REMOVED=()
+ISCSI_REMOVED=()
+KERNEL_HEADERS_INSTALLED=false
+PACKAGES_INSTALLED=()
+DISTRO=""
+PM=""
+REPO_FIX_COMPLETED=false
+PACKAGE_INSTALL_COMPLETED=false
+AUTO_UPGRADES_DISABLED=false
+SELINUX_DISABLED=false
+SELINUX_WAS_ENFORCING=false
+NETWORKMANAGER_COMPLETED=false
+ROOT_SSH_CONFIGURED=false
+HOST_IDENTITY_VALIDATED=false
+INTERFACE=""
+STATIC_IP_METHOD="not-set"
+ORACLE_KERNEL_STEP_COMPLETED=false
+ORACLE_KERNEL_DEFAULT_CHANGED=false
+ORACLE_KERNEL_REBOOT_REQUIRED=false
+ORACLE_KERNEL_TARGET=""
+ORACLE_KERNEL_DEFAULT_BEFORE=""
+ORACLE_KERNEL_DEFAULT_AFTER=""
+ORACLE_TARGET_KERNEL_VERSION=""
+ATVM_SCRIPT_DIR=""
+LOG_FILE="atvm_setup_script.log"
+WARNINGS_ENCOUNTERED=()
+ERRORS_ENCOUNTERED=()
+WORKAROUNDS_USED=()
+SELINUX_POST_REBOOT_VERIFIED=false
+SELINUX_POST_REBOOT_STATUS="not-run"
+AUTO_REBOOT_FOR_SELINUX=false
+EXPECTED_IP=""
+EXPECTED_HOSTNAME=""
+ACTUAL_HOSTNAME=""
+
+#==============================================================================
+# UTILITY FUNCTIONS
+#==============================================================================
+
+# Function to log to file (without color codes)
+log_to_file() {
+    echo "$1" | sed 's/\x1b\[[0-9;]*m//g' >> "$LOG_FILE"
+}
+
+# Function to print colored output
+print_info() {
+    echo -e "${GREEN}[INFO]${NC} $1"
+    log_to_file "[INFO] $1"
+}
+
+print_error() {
+    echo -e "${RED}[ERROR]${NC} $1"
+    log_to_file "[ERROR] $1"
+    ERRORS_ENCOUNTERED+=("$1")
+}
+
+print_warning() {
+    echo -e "${YELLOW}[WARNING]${NC} $1"
+    log_to_file "[WARNING] $1"
+    WARNINGS_ENCOUNTERED+=("$1")
+}
+
+record_workaround() {
+    WORKAROUNDS_USED+=("$1")
+    print_info "Workaround used: $1"
+}
+
+is_selinux_distro() {
+    [[ "$DISTRO" == "rhel" || "$DISTRO" == "centos" || "$DISTRO" == "rocky" || \
+       "$DISTRO" == "almalinux" || "$DISTRO" == "fedora" || "$DISTRO" == "ol" ]]
+}
+
+setup_completed_without_errors() {
+    [[ "$HOST_IDENTITY_VALIDATED" == true ]] && \
+    [[ "$REPO_FIX_COMPLETED" == true ]] && \
+    [[ "$PACKAGE_INSTALL_COMPLETED" == true ]] && \
+    [[ ${#ERRORS_ENCOUNTERED[@]} -eq 0 ]]
+}
+
+setup_selinux_post_reboot_verifier() {
+    local verify_script="/usr/local/sbin/atvm_selinux_post_reboot_verify.sh"
+    local verify_service="/etc/systemd/system/atvm-selinux-postreboot.service"
+
+    if ! command -v systemctl &>/dev/null; then
+        print_warning "systemctl not available - cannot configure post-reboot SELinux verification"
+        return 1
+    fi
+
+    ${SUDO_CMD} bash -c "cat > '$verify_script' <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+LOG_FILE_PATH='${LOG_FILE}'
+RESULT='unavailable'
+HAS_SUCCESS_MARKER='false'
+HAS_ERRORS='false'
+if command -v getenforce >/dev/null 2>&1; then
+  RESULT=\$(getenforce 2>/dev/null || echo unavailable)
+fi
+
+if grep -Fq 'SUCCESS: ATVM VM Setup Complete!' "\$LOG_FILE_PATH" 2>/dev/null; then
+  HAS_SUCCESS_MARKER='true'
+fi
+
+if grep -Eq '^\\[ERROR\\]' "\$LOG_FILE_PATH" 2>/dev/null; then
+  HAS_ERRORS='true'
+fi
+
+{
+  echo '[INFO] Post-reboot SELinux verification: '\$RESULT
+  echo '[INFO] Verification timestamp: '\"\$(date '+%Y-%m-%d %H:%M:%S %Z')\"
+  if [[ "\$HAS_SUCCESS_MARKER" == 'true' && "\$HAS_ERRORS" == 'false' ]]; then
+    echo '[INFO] Setup completed without logged errors - keeping client powered on for controller log collection.'
+    echo '[INFO] Required next step: after controller log copy + SHA256 verification succeed, power off the client from controller.'
+  else
+    echo '[WARNING] Setup reported errors or missing success marker - keeping client powered on for manual inspection.'
+  fi
+} >> \"\$LOG_FILE_PATH\"
+
+systemctl disable atvm-selinux-postreboot.service >/dev/null 2>&1 || true
+rm -f /etc/systemd/system/atvm-selinux-postreboot.service
+rm -f /usr/local/sbin/atvm_selinux_post_reboot_verify.sh
+systemctl daemon-reload >/dev/null 2>&1 || true
+EOF"
+
+    ${SUDO_CMD} chmod 700 "$verify_script"
+    ${SUDO_CMD} bash -c "cat > '$verify_service' <<'EOF'
+[Unit]
+Description=ATVM SELinux Post-Reboot Verification
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/atvm_selinux_post_reboot_verify.sh
+
+[Install]
+WantedBy=multi-user.target
+EOF"
+
+    ${SUDO_CMD} systemctl daemon-reload
+    ${SUDO_CMD} systemctl enable atvm-selinux-postreboot.service >/dev/null
+    return 0
+}
+
+reboot_and_verify_selinux_if_needed() {
+    print_section "STEP 9: SELinux Reboot And Verification"
+
+    if ! is_selinux_distro; then
+        print_info "SELinux reboot/verification is not applicable to this distro"
+        return 0
+    fi
+
+    if [[ "$SELINUX_DISABLED" != true ]]; then
+        print_info "SELinux was not changed to disabled - no reboot required for SELinux verification"
+        return 0
+    fi
+
+    if setup_completed_without_errors; then
+        print_info "Run is currently error-free; post-reboot verifier will keep client on for controller log collection"
+    else
+        print_warning "Errors detected in this run; post-reboot verifier will keep client powered on for manual inspection"
+    fi
+
+    if setup_selinux_post_reboot_verifier; then
+        print_info "Configured one-time post-reboot SELinux verification"
+    else
+        print_warning "Proceeding with reboot without automated post-reboot verification service"
+    fi
+
+    AUTO_REBOOT_FOR_SELINUX=true
+    print_warning "Rebooting now to apply SELinux disabled state"
+    print_warning "After reboot, post-reboot verification will log SELinux runtime status"
+    sync
+    sleep 2
+    ${SUDO_CMD} reboot
+}
+
+poweroff_client_if_successful() {
+    print_section "STEP 10: Final Power State"
+
+    if setup_completed_without_errors; then
+        print_info "Setup completed without errors - keeping client powered on for controller log collection"
+        print_info "Required next step: after controller copies log and confirms SHA256 match, power off the client"
+    else
+        print_warning "Setup has errors or incomplete required steps - keeping client powered on for manual inspection"
+    fi
+}
+
+print_section() {
+    echo ""
+    echo -e "${BLUE}========================================${NC}"
+    echo -e "${BLUE}$1${NC}"
+    echo -e "${BLUE}========================================${NC}"
+    echo ""
+    log_to_file ""
+    log_to_file "========================================"
+    log_to_file "$1"
+    log_to_file "========================================"
+    log_to_file ""
+}
+
+print_usage() {
+    cat <<'EOF'
+Usage:
+  atvm_setup_script.sh --expected-ip <ip> --expected-hostname <hostname>
+
+Required:
+  --expected-ip         Expected target host IPv4 address (the SSH destination)
+  --expected-hostname   Expected target hostname for safety verification
+                        (must be operator-provided; do not infer)
+                        If hostname was not explicitly given by the operator,
+                        do not run setup.
+                        Connect directly to the operator-provided target IP.
+                        Do not pre-probe alternate "likely" IP addresses.
+
+EOF
+}
+
+parse_args() {
+    while [[ $# -gt 0 ]]; do
+        case "$1" in
+            --expected-ip)
+                EXPECTED_IP="${2:-}"
+                shift 2
+                ;;
+            --expected-hostname)
+                EXPECTED_HOSTNAME="${2:-}"
+                shift 2
+                ;;
+            -h|--help)
+                print_usage
+                exit 0
+                ;;
+            *)
+                print_error "Unknown argument: $1"
+                print_usage
+                exit 1
+                ;;
+        esac
+    done
+
+    if [[ -z "$EXPECTED_IP" || -z "$EXPECTED_HOSTNAME" ]]; then
+        print_error "Safety check requires both --expected-ip and --expected-hostname"
+        print_error "Expected hostname must be explicitly operator-provided. Do not infer hostname from the target."
+        print_usage
+        exit 1
+    fi
+}
+
+validate_target_host_identity() {
+    print_section "STEP 0: Target Host Identity Validation"
+
+    local expected_norm actual_short actual_fqdn
+    expected_norm="$(echo "$EXPECTED_HOSTNAME" | tr '[:upper:]' '[:lower:]')"
+    actual_short="$(hostname -s 2>/dev/null || hostname)"
+    actual_fqdn="$(hostname -f 2>/dev/null || hostname)"
+    ACTUAL_HOSTNAME="$actual_short"
+
+    print_info "Expected IP: $EXPECTED_IP"
+    print_info "Expected hostname: $EXPECTED_HOSTNAME"
+    print_info "Detected hostname (short): $actual_short"
+    print_info "Detected hostname (fqdn):  $actual_fqdn"
+
+    if ! ip -o -4 addr show 2>/dev/null | awk '{print $4}' | cut -d/ -f1 | grep -Fxq "$EXPECTED_IP"; then
+        print_error "Expected IP $EXPECTED_IP is not assigned to this machine. Aborting for safety."
+        exit 1
+    fi
+
+    if [[ "$expected_norm" != "$(echo "$actual_short" | tr '[:upper:]' '[:lower:]')" ]] && \
+       [[ "$expected_norm" != "$(echo "$actual_fqdn" | tr '[:upper:]' '[:lower:]')" ]]; then
+        print_error "Hostname mismatch. Expected '$EXPECTED_HOSTNAME' but detected '$actual_short'. Aborting."
+        exit 1
+    fi
+
+    HOST_IDENTITY_VALIDATED=true
+    print_info "Target host identity validation passed"
+}
+
+#==============================================================================
+# SECTION 1: REPOSITORY FIX
+#==============================================================================
+
+fix_repositories() {
+    print_section "STEP 1: Fixing Repository Configuration"
+    
+    print_info "Detecting Linux distribution..."
+    
+    if [ -f /etc/os-release ]; then
+        . /etc/os-release
+        DISTRO=$ID
+    else
+        print_error "Cannot detect distribution"
+        exit 1
+    fi
+    
+    print_info "Detected: $DISTRO"
+    
+    case $DISTRO in
+        ubuntu|debian)
+            print_info "Processing Debian/Ubuntu repositories..."
+            REPO_FILE="/etc/apt/sources.list"
+            
+            if [ -f "$REPO_FILE" ]; then
+                ${SUDO_CMD} cp $REPO_FILE ${REPO_FILE}.backup.$(date +%Y%m%d_%H%M%S)
+                print_info "Backup created: ${REPO_FILE}.backup.$(date +%Y%m%d_%H%M%S)"
+                ${SUDO_CMD} sed -i 's/^deb cdrom:/#deb cdrom:/g' $REPO_FILE
+                ${SUDO_CMD} sed -i 's/^deb-src cdrom:/#deb-src cdrom:/g' $REPO_FILE
+            fi
+            
+            if [ -d /etc/apt/sources.list.d/ ]; then
+                for file in /etc/apt/sources.list.d/*.list; do
+                    if [ -f "$file" ]; then
+                        ${SUDO_CMD} sed -i 's/^deb cdrom:/#deb cdrom:/g' "$file"
+                        ${SUDO_CMD} sed -i 's/^deb-src cdrom:/#deb-src cdrom:/g' "$file"
+                    fi
+                done
+            fi
+            
+            print_info "CD-ROM/DVD entries commented out"
+            print_info "Updating package lists..."
+            ${SUDO_CMD} apt-get update
+            ;;
+            
+        rhel|centos|rocky|almalinux|ol)
+            print_info "Processing Red Hat/CentOS/Oracle Linux repositories..."
+            REPO_DIR="/etc/yum.repos.d"
+            
+            for file in $REPO_DIR/*.repo; do
+                if [ -f "$file" ]; then
+                    if grep -q "file:///media\|cdrom\|dvd" "$file"; then
+                        print_info "Processing: $file"
+                        ${SUDO_CMD} cp "$file" "${file}.backup.$(date +%Y%m%d_%H%M%S)"
+                        ${SUDO_CMD} sed -i 's/^baseurl=file:\/\/\/media/#baseurl=file:\/\/\/media/g' "$file"
+                        ${SUDO_CMD} sed -i 's/^baseurl=.*cdrom/#&/g' "$file"
+                        ${SUDO_CMD} sed -i 's/^baseurl=.*dvd/#&/g' "$file"
+                        ${SUDO_CMD} sed -i '/\[.*media.*\]/,/^\[/ s/^enabled=1/enabled=0/' "$file"
+                    fi
+                fi
+            done
+            
+            print_info "CD-ROM/DVD entries commented out"
+            print_info "Cleaning and updating cache..."
+            ${SUDO_CMD} yum clean all
+            ${SUDO_CMD} yum makecache
+            ;;
+            
+        fedora)
+            print_info "Processing Fedora repositories..."
+            REPO_DIR="/etc/yum.repos.d"
+            
+            for file in $REPO_DIR/*.repo; do
+                if [ -f "$file" ]; then
+                    if grep -q "file:///media\|cdrom\|dvd" "$file"; then
+                        print_info "Processing: $file"
+                        ${SUDO_CMD} cp "$file" "${file}.backup.$(date +%Y%m%d_%H%M%S)"
+                        ${SUDO_CMD} sed -i 's/^baseurl=file:\/\/\/media/#baseurl=file:\/\/\/media/g' "$file"
+                        ${SUDO_CMD} sed -i 's/^baseurl=.*cdrom/#&/g' "$file"
+                        ${SUDO_CMD} sed -i 's/^baseurl=.*dvd/#&/g' "$file"
+                        ${SUDO_CMD} sed -i '/\[.*media.*\]/,/^\[/ s/^enabled=1/enabled=0/' "$file"
+                    fi
+                fi
+            done
+            
+            print_info "CD-ROM/DVD entries commented out"
+            print_info "Cleaning and updating cache..."
+            ${SUDO_CMD} dnf clean all
+            ${SUDO_CMD} dnf makecache
+            ;;
+            
+        opensuse*|sles)
+            print_info "Processing openSUSE/SLES repositories..."
+            print_info "Disabling CD/DVD repositories..."
+            for repo in $(${SUDO_CMD} zypper lr | grep -i "cd\|dvd" | awk '{print $1}'); do
+                print_info "Disabling repository: $repo"
+                ${SUDO_CMD} zypper mr -d $repo
+            done
+            print_info "Refreshing repositories..."
+            ${SUDO_CMD} zypper refresh
+            ;;
+            
+        *)
+            print_warning "Unsupported distribution for repo fix: $DISTRO"
+            print_warning "Continuing with installation..."
+            ;;
+    esac
+    
+    print_info "Repository configuration updated"
+    REPO_FIX_COMPLETED=true
+}
+
+#==============================================================================
+# SECTION 1B: UBUNTU ROOT SSH WORKFLOW
+#==============================================================================
+
+configure_ubuntu_root_ssh_access() {
+    print_section "STEP 2: Ubuntu Root SSH Access Configuration"
+
+    if [[ "$DISTRO" != "ubuntu" ]]; then
+        print_info "Ubuntu root SSH workflow is not applicable to this distro"
+        return 0
+    fi
+
+    print_warning "Ubuntu-specific workflow: configuring root account for SSH password login"
+
+    echo "root:cdsi2012" | ${SUDO_CMD} chpasswd
+    ${SUDO_CMD} passwd -u root >/dev/null 2>&1 || true
+    print_info "Root password set to configured workflow value"
+
+    ${SUDO_CMD} install -d -m 755 /etc/ssh/sshd_config.d
+    ${SUDO_CMD} bash -c "cat > /etc/ssh/sshd_config.d/99-atvm-root-login.conf <<'EOF'
+PermitRootLogin yes
+PasswordAuthentication yes
+KbdInteractiveAuthentication yes
+UsePAM yes
+EOF"
+
+    ${SUDO_CMD} sshd -t
+    if ${SUDO_CMD} systemctl restart ssh 2>/dev/null; then
+        print_info "Restarted ssh service"
+    elif ${SUDO_CMD} systemctl restart sshd 2>/dev/null; then
+        print_info "Restarted sshd service"
+    else
+        print_warning "Could not restart ssh/sshd service automatically"
+    fi
+
+    local sshd_effective
+    sshd_effective="$(${SUDO_CMD} sshd -T 2>/dev/null | egrep 'permitrootlogin|passwordauthentication|kbdinteractiveauthentication|usepam' || true)"
+    if [[ -n "$sshd_effective" ]]; then
+        print_info "Effective sshd settings:"
+        while IFS= read -r line; do
+            print_info "  $line"
+        done <<< "$sshd_effective"
+    fi
+
+    ROOT_SSH_CONFIGURED=true
+    print_info "Root SSH/password workflow configured for Ubuntu"
+    print_info "Next operator step: reconnect as root with password cdsi2012"
+}
+
+#==============================================================================
+# SECTION 2: STATIC IP CONFIGURATION
+#==============================================================================
+# All check functions use ONLY: command -v, [ -d ], [ -f ], rpm -q.
+# NO grep-in-pipe — those return exit code 1 on no-match and kill the script
+# under `set -euo pipefail`.
+# Interface is AUTO-DETECTED from the system rather than hardcoded.
+#==============================================================================
+
+check_netplan() {
+    command -v netplan &>/dev/null && return 0
+    [ -d /etc/netplan ] && [ -n "$(ls -A /etc/netplan 2>/dev/null)" ] && return 0
+    return 1
+}
+
+check_networkmanager() {
+    command -v nmcli                                         &>/dev/null && return 0
+    [ -d /etc/NetworkManager ]                                           && return 0
+    [ -d /etc/NetworkManager/system-connections ]                        && return 0
+    [ -f /usr/lib/systemd/system/NetworkManager.service ]                && return 0
+    [ -f /lib/systemd/system/NetworkManager.service ]                    && return 0
+    command -v rpm &>/dev/null && rpm -q NetworkManager &>/dev/null 2>&1 && return 0
+    return 1
+}
+
+check_wicked() {
+    command -v wicked                                   &>/dev/null && return 0
+    [ -f /usr/lib/systemd/system/wicked.service ]                  && return 0
+    [ -f /lib/systemd/system/wicked.service ]                      && return 0
+    return 1
+}
+
+check_ifcfg() {
+    [ -d /etc/sysconfig/network-scripts ] && \
+        ls /etc/sysconfig/network-scripts/ifcfg-* &>/dev/null 2>&1 && return 0
+    [ -f /etc/sysconfig/network ] && return 0
+    return 1
+}
+
+# Detect the active non-loopback interface that currently has an IP.
+# Priority: interface with default route > interface with an IP > first UP non-lo interface.
+detect_active_interface() {
+    local iface=""
+
+    # 1. Interface carrying the default route (most reliable)
+    iface=$(ip route 2>/dev/null | awk '/^default/ {print $5; exit}')
+    if [ -n "$iface" ] && ip link show "$iface" &>/dev/null 2>&1; then
+        echo "$iface"; return 0
+    fi
+
+    # 2. First non-loopback interface with an IPv4 address assigned
+    iface=$(ip -4 addr show 2>/dev/null \
+        | awk '/^[0-9]+:/ {gsub(/:$/,"",$2); iface=$2}
+               /inet / && iface != "lo" {print iface; exit}')
+    if [ -n "$iface" ] && ip link show "$iface" &>/dev/null 2>&1; then
+        echo "$iface"; return 0
+    fi
+
+    # 3. First non-loopback interface that is UP (may not have IP yet)
+    iface=$(ip link show 2>/dev/null \
+        | awk -F': ' '/^[0-9]+: / && $2 != "lo" {print $2; exit}')
+    if [ -n "$iface" ] && ip link show "$iface" &>/dev/null 2>&1; then
+        echo "$iface"; return 0
+    fi
+
+    return 1
+}
+
+# Shared helper: write a NetworkManager keyfile and activate it.
+write_nm_keyfile() {
+    local nm_conn_dir="/etc/NetworkManager/system-connections"
+    local keyfile="${nm_conn_dir}/${INTERFACE}.nmconnection"
+    local uuid
+
+    if command -v uuidgen &>/dev/null; then
+        uuid=$(uuidgen)
+    else
+        uuid=$(cat /proc/sys/kernel/random/uuid)
+    fi
+
+    print_info "Writing NM keyfile: ${keyfile}"
+    ${SUDO_CMD} mkdir -p "${nm_conn_dir}"
+    [ -f "${keyfile}" ] && \
+        ${SUDO_CMD} cp "${keyfile}" "${keyfile}.backup.$(date +%Y%m%d_%H%M%S)"
+
+    ${SUDO_CMD} bash -c "printf '%s\n' \
+'[connection]' \
+'id=${INTERFACE}' \
+'uuid=${uuid}' \
+'type=ethernet' \
+'interface-name=${INTERFACE}' \
+'autoconnect=true' \
+'' \
+'[ethernet]' \
+'' \
+'[ipv4]' \
+'method=manual' \
+'address1=${IP_ADDRESS}/${NETMASK},${GATEWAY}' \
+'dns=${DNS1};${DNS2};' \
+'' \
+'[ipv6]' \
+'method=disabled' \
+'' \
+'[proxy]' \
+> '${keyfile}'"
+
+    ${SUDO_CMD} chmod 600 "${keyfile}"
+    print_info "Keyfile written (permissions 600)"
+
+    ${SUDO_CMD} systemctl enable NetworkManager 2>/dev/null || true
+    ${SUDO_CMD} systemctl start  NetworkManager 2>/dev/null || true
+    sleep 2
+
+    if command -v nmcli &>/dev/null; then
+        ${SUDO_CMD} nmcli connection reload 2>/dev/null || true
+        ${SUDO_CMD} nmcli connection up "${INTERFACE}" 2>/dev/null || true
+        print_info "Connection activated via nmcli"
+    else
+        local nm_pid
+        nm_pid=$(systemctl show -p MainPID NetworkManager 2>/dev/null | cut -d= -f2 || true)
+        [ -n "${nm_pid:-}" ] && [ "${nm_pid}" != "0" ] && \
+            ${SUDO_CMD} kill -HUP "$nm_pid" 2>/dev/null || true
+        print_info "NM signalled to reload (will activate on next reboot if nmcli unavailable)"
+    fi
+
+    echo ""
+    print_info "Network verification:"
+    ip addr show "${INTERFACE}" 2>/dev/null | grep "inet " || true
+    ip route 2>/dev/null | grep default || true
+    STATIC_IP_METHOD="NetworkManager keyfile"
+}
+
+configure_static_ip() {
+    print_section "STEP 8: Static IP Configuration"
+
+    IP_ADDRESS="192.168.3.191"
+    NETMASK="22"
+    GATEWAY="192.168.0.1"
+    DNS1="8.8.8.8"
+    DNS2="8.8.4.4"
+
+    # Auto-detect the active network interface — no hardcoded name
+    print_info "Auto-detecting active network interface..."
+    INTERFACE=$(detect_active_interface 2>/dev/null || true)
+
+    if [ -z "${INTERFACE:-}" ]; then
+        print_warning "Could not detect an active network interface — skipping static IP"
+        print_info "Available interfaces:"
+        ip link show 2>/dev/null | awk -F': ' '/^[0-9]+: / {print "  - " $2}'
+        return 0
+    fi
+
+    print_info "Detected active interface: ${INTERFACE}"
+    print_info "Configuring static IP for $DISTRO..."
+    print_info "Interface: $INTERFACE | IP: $IP_ADDRESS/$NETMASK | Gateway: $GATEWAY"
+    echo ""
+
+    # Check for network managers
+    print_info "Checking for network managers..."
+    FOUND_MANAGER=false
+
+    if check_netplan;        then print_info "Found: netplan";        FOUND_MANAGER=true; fi
+    if check_networkmanager; then print_info "Found: NetworkManager"; FOUND_MANAGER=true; fi
+    if check_wicked;         then print_info "Found: wicked";         FOUND_MANAGER=true; fi
+    if check_ifcfg;          then print_info "Found: legacy ifcfg";   FOUND_MANAGER=true; fi
+
+    if [[ "$FOUND_MANAGER" == false ]]; then
+        print_warning "No network manager detected — skipping static IP"
+        print_warning "Fix: dnf install -y NetworkManager && systemctl enable --now NetworkManager"
+        return 0
+    fi
+
+    print_info "Network manager detected — proceeding with configuration"
+    echo ""
+
+    case $DISTRO in
+        ubuntu|debian)                          configure_debian_static_ip  ;;
+        rhel|centos|rocky|almalinux|fedora|ol)  configure_redhat_static_ip  ;;
+        opensuse*|sles)                         configure_suse_static_ip    ;;
+        arch)                                   configure_arch_static_ip    ;;
+        *)
+            print_warning "Unsupported distribution for static IP: $DISTRO"
+            return 0
+            ;;
+    esac
+}
+
+configure_debian_static_ip() {
+    if check_netplan; then
+        local netplan_file="/etc/netplan/99-atvm-static.yaml"
+        [ -f "$netplan_file" ] && \
+            ${SUDO_CMD} cp "$netplan_file" "${netplan_file}.backup.$(date +%Y%m%d_%H%M%S)"
+
+        ${SUDO_CMD} bash -c "cat > '$netplan_file' <<EOF
+network:
+  version: 2
+  ethernets:
+    ${INTERFACE}:
+      dhcp4: false
+      addresses:
+        - ${IP_ADDRESS}/${NETMASK}
+      routes:
+        - to: default
+          via: ${GATEWAY}
+      nameservers:
+        addresses:
+          - ${DNS1}
+          - ${DNS2}
+EOF"
+        ${SUDO_CMD} chmod 600 "$netplan_file"
+
+        if ${SUDO_CMD} netplan generate && ${SUDO_CMD} netplan apply; then
+            print_info "netplan configured and applied"
+            STATIC_IP_METHOD="netplan"
+        else
+            print_warning "netplan apply failed — falling back to /etc/network/interfaces"
+            record_workaround "netplan apply failed; fallback to /etc/network/interfaces"
+            [ -f /etc/network/interfaces ] && \
+                ${SUDO_CMD} cp /etc/network/interfaces \
+                    "/etc/network/interfaces.backup.$(date +%Y%m%d_%H%M%S)"
+            ${SUDO_CMD} bash -c "printf '%s\n' \
+'auto lo' \
+'iface lo inet loopback' \
+'' \
+'auto ${INTERFACE}' \
+'iface ${INTERFACE} inet static' \
+'    address ${IP_ADDRESS}' \
+'    netmask 255.255.252.0' \
+'    gateway ${GATEWAY}' \
+'    dns-nameservers ${DNS1} ${DNS2}' \
+> /etc/network/interfaces"
+            ${SUDO_CMD} systemctl restart networking 2>/dev/null || true
+            print_info "/etc/network/interfaces configured"
+            STATIC_IP_METHOD="ifupdown interfaces"
+        fi
+    elif command -v nmcli &>/dev/null; then
+        write_nm_keyfile
+    else
+        [ -f /etc/network/interfaces ] && \
+            ${SUDO_CMD} cp /etc/network/interfaces \
+                "/etc/network/interfaces.backup.$(date +%Y%m%d_%H%M%S)"
+        ${SUDO_CMD} bash -c "printf '%s\n' \
+'auto lo' \
+'iface lo inet loopback' \
+'' \
+'auto ${INTERFACE}' \
+'iface ${INTERFACE} inet static' \
+'    address ${IP_ADDRESS}' \
+'    netmask 255.255.252.0' \
+'    gateway ${GATEWAY}' \
+'    dns-nameservers ${DNS1} ${DNS2}' \
+> /etc/network/interfaces"
+        ${SUDO_CMD} systemctl restart networking 2>/dev/null || true
+        print_info "/etc/network/interfaces configured"
+        STATIC_IP_METHOD="ifupdown interfaces"
+    fi
+
+    echo ""
+    print_info "Network verification:"
+    ip addr show "${INTERFACE}" 2>/dev/null | grep "inet " || true
+    ip route 2>/dev/null | grep default || true
+    NETWORKMANAGER_COMPLETED=true
+}
+
+configure_redhat_static_ip() {
+    # Check NM service state safely (no pipe)
+    local nm_active=false
+    systemctl is-active --quiet NetworkManager 2>/dev/null && nm_active=true
+
+    if command -v nmcli &>/dev/null && [[ "$nm_active" == true ]]; then
+        print_info "Using nmcli (NetworkManager is running)"
+        # Delete stale connections one at a time — nmcli delete takes ONE argument
+        ${SUDO_CMD} nmcli connection delete "${INTERFACE}"        2>/dev/null || true
+        ${SUDO_CMD} nmcli connection delete "Wired connection 1"  2>/dev/null || true
+        ${SUDO_CMD} nmcli connection delete "System ${INTERFACE}" 2>/dev/null || true
+
+        if ${SUDO_CMD} nmcli connection add \
+                type ethernet \
+                con-name "${INTERFACE}" \
+                ifname   "${INTERFACE}" \
+                ipv4.method    manual \
+                ipv4.addresses "${IP_ADDRESS}/${NETMASK}" \
+                ipv4.gateway   "${GATEWAY}" \
+                ipv4.dns       "${DNS1} ${DNS2}" \
+                connection.autoconnect yes 2>/dev/null; then
+            ${SUDO_CMD} nmcli connection up "${INTERFACE}" 2>/dev/null || \
+                print_warning "Could not activate now — will apply on reboot"
+            print_info "NetworkManager configured via nmcli"
+            STATIC_IP_METHOD="NetworkManager (nmcli)"
+        else
+            print_warning "nmcli connection add failed — falling back to keyfile"
+            record_workaround "nmcli connection add failed; generated NetworkManager keyfile fallback"
+            write_nm_keyfile
+        fi
+
+    elif command -v nmcli &>/dev/null && [[ "$nm_active" == false ]]; then
+        print_info "NetworkManager installed but not running — starting it and writing keyfile"
+        record_workaround "NetworkManager was installed but inactive; started service and wrote keyfile"
+        ${SUDO_CMD} systemctl enable NetworkManager 2>/dev/null || true
+        ${SUDO_CMD} systemctl start  NetworkManager 2>/dev/null || true
+        sleep 3
+        write_nm_keyfile
+
+    else
+        # nmcli not in PATH — write keyfile directly (Rocky/OL/RHEL 9 minimal install)
+        print_info "nmcli not found — writing NM keyfile directly"
+        record_workaround "nmcli not available; generated NetworkManager keyfile directly"
+        write_nm_keyfile
+    fi
+
+    echo ""
+    print_info "Network verification:"
+    ip addr show "${INTERFACE}" 2>/dev/null | grep "inet " || true
+    ip route 2>/dev/null | grep default || true
+
+    NETWORKMANAGER_COMPLETED=true
+}
+
+configure_suse_static_ip() {
+    if command -v wicked &>/dev/null; then
+        local ifcfg="/etc/sysconfig/network/ifcfg-${INTERFACE}"
+        [ -f "$ifcfg" ] && ${SUDO_CMD} cp "$ifcfg" "${ifcfg}.backup.$(date +%Y%m%d_%H%M%S)"
+        ${SUDO_CMD} bash -c "printf '%s\n' \
+\"BOOTPROTO='static'\" \
+\"IPADDR='${IP_ADDRESS}/${NETMASK}'\" \
+\"STARTMODE='auto'\" \
+> '${ifcfg}'"
+        ${SUDO_CMD} bash -c "echo 'default ${GATEWAY} - -' \
+> /etc/sysconfig/network/ifroute-${INTERFACE}"
+        ${SUDO_CMD} wicked ifreload "${INTERFACE}" 2>/dev/null || \
+            ${SUDO_CMD} systemctl restart wicked 2>/dev/null || true
+        print_info "Wicked configured"
+        STATIC_IP_METHOD="wicked"
+        NETWORKMANAGER_COMPLETED=true
+    else
+        print_warning "wicked not found — cannot configure static IP on this SUSE system"
+    fi
+}
+
+configure_arch_static_ip() {
+    local nm_active=false
+    systemctl is-active --quiet NetworkManager 2>/dev/null && nm_active=true
+
+    if command -v nmcli &>/dev/null && [[ "$nm_active" == true ]]; then
+        ${SUDO_CMD} nmcli connection delete "${INTERFACE}" 2>/dev/null || true
+        ${SUDO_CMD} nmcli connection add \
+            type ethernet con-name "${INTERFACE}" ifname "${INTERFACE}" \
+            ipv4.method    manual \
+            ipv4.addresses "${IP_ADDRESS}/${NETMASK}" \
+            ipv4.gateway   "${GATEWAY}" \
+            ipv4.dns       "${DNS1} ${DNS2}" \
+            connection.autoconnect yes 2>/dev/null || true
+        ${SUDO_CMD} nmcli connection up "${INTERFACE}" 2>/dev/null || true
+        print_info "NetworkManager configured"
+        STATIC_IP_METHOD="NetworkManager (nmcli)"
+    else
+        local netfile="/etc/systemd/network/20-${INTERFACE}.network"
+        [ -f "$netfile" ] && ${SUDO_CMD} cp "$netfile" "${netfile}.backup.$(date +%Y%m%d_%H%M%S)"
+        ${SUDO_CMD} bash -c "printf '%s\n' \
+'[Match]' \
+'Name=${INTERFACE}' \
+'' \
+'[Network]' \
+'Address=${IP_ADDRESS}/${NETMASK}' \
+'Gateway=${GATEWAY}' \
+'DNS=${DNS1}' \
+'DNS=${DNS2}' \
+> '${netfile}'"
+        ${SUDO_CMD} systemctl enable systemd-networkd 2>/dev/null || true
+        ${SUDO_CMD} systemctl restart systemd-networkd 2>/dev/null || true
+        print_info "systemd-networkd configured"
+        STATIC_IP_METHOD="systemd-networkd"
+    fi
+    NETWORKMANAGER_COMPLETED=true
+}
+
+# SECTION 3: PACKAGE INSTALLATION
+#==============================================================================
+
+detect_package_manager() {
+    if command -v apt-get &> /dev/null; then
+        echo "apt"
+    elif command -v dnf &> /dev/null; then
+        echo "dnf"
+    elif command -v yum &> /dev/null; then
+        echo "yum"
+    elif command -v zypper &> /dev/null; then
+        echo "zypper"
+    elif command -v pacman &> /dev/null; then
+        echo "pacman"
+    elif command -v apk &> /dev/null; then
+        echo "apk"
+    else
+        echo "unknown"
+    fi
+}
+
+check_sudo() {
+    if command -v sudo &> /dev/null; then
+        SUDO_CMD="sudo"
+        print_info "sudo is available"
+        return 0
+    fi
+    
+    if [[ $EUID -eq 0 ]]; then
+        SUDO_CMD=""
+        print_info "Running as root - will install sudo after fixing repositories"
+        return 0
+    fi
+    
+    print_error "sudo is not installed and you are not root."
+    print_error "Please run as root: su -c './atvm_vm_setup.sh'"
+    exit 1
+}
+
+install_sudo_if_needed() {
+    # If sudo already exists, nothing to do
+    if command -v sudo &> /dev/null; then
+        return 0
+    fi
+    
+    # Must be root to install sudo
+    if [[ $EUID -ne 0 ]]; then
+        print_error "Cannot install sudo without root privileges"
+        exit 1
+    fi
+    
+    print_info "sudo not found - installing now..."
+    
+    local pm=$(detect_package_manager)
+    
+    case $pm in
+        apt) 
+            apt-get update
+            apt-get install -y sudo
+            ;;
+        dnf) dnf install -y sudo ;;
+        yum) yum install -y sudo ;;
+        zypper) zypper install -y sudo ;;
+        pacman) pacman -Sy --noconfirm sudo ;;
+        apk) apk add sudo ;;
+        *)
+            print_error "Cannot install sudo: unknown package manager"
+            exit 1
+            ;;
+    esac
+    
+    if command -v sudo &> /dev/null; then
+        SUDO_INSTALLED=true
+        SUDO_CMD="sudo"
+        print_info "sudo has been installed successfully"
+        
+        # If we were running as root, we now want to use sudo for consistency
+        if [[ $EUID -eq 0 ]]; then
+            print_info "Will use sudo for all commands for consistency"
+        fi
+    else
+        print_error "Failed to install sudo"
+        exit 1
+    fi
+}
+
+install_kernel_headers() {
+    local pm=$1
+    local kernel_ver
+    local devel_pkg=""
+    local headers_pkg=""
+    kernel_ver=$(uname -r)
+
+    # On Oracle Linux, prefer headers for the selected non-UEK target kernel.
+    if [[ "$DISTRO" == "ol" ]] && [[ -n "${ORACLE_TARGET_KERNEL_VERSION:-}" ]]; then
+        kernel_ver="$ORACLE_TARGET_KERNEL_VERSION"
+    fi
+    
+    print_info "Installing kernel headers for kernel version: $kernel_ver"
+
+    if [[ "$DISTRO" == "ol" && "$kernel_ver" == *"uek"* ]]; then
+        devel_pkg="kernel-uek-devel-${kernel_ver}"
+        headers_pkg="kernel-headers-${kernel_ver}"
+    else
+        devel_pkg="kernel-devel-${kernel_ver}"
+        headers_pkg="kernel-headers-${kernel_ver}"
+    fi
+    
+    case $pm in
+        apt)
+            ${SUDO_CMD} apt-get update
+            ${SUDO_CMD} apt-get install -y "linux-headers-${kernel_ver}"
+            ;;
+        dnf)
+            if ! ${SUDO_CMD} dnf install -y "$devel_pkg" "$headers_pkg"; then
+                print_warning "Version-locked kernel headers not found; falling back to latest kernel header packages"
+                if [[ "$DISTRO" == "ol" && "$kernel_ver" == *"uek"* ]]; then
+                    ${SUDO_CMD} dnf install -y kernel-uek-devel kernel-headers
+                else
+                    ${SUDO_CMD} dnf install -y kernel-devel kernel-headers
+                fi
+            fi
+            ;;
+        yum)
+            if ! ${SUDO_CMD} yum install -y "$devel_pkg" "$headers_pkg"; then
+                print_warning "Version-locked kernel headers not found; falling back to latest kernel header packages"
+                if [[ "$DISTRO" == "ol" && "$kernel_ver" == *"uek"* ]]; then
+                    ${SUDO_CMD} yum install -y kernel-uek-devel kernel-headers
+                else
+                    ${SUDO_CMD} yum install -y kernel-devel kernel-headers
+                fi
+            fi
+            ;;
+        zypper)
+            ${SUDO_CMD} zypper install -n -y --type pattern devel_basis
+            ${SUDO_CMD} zypper install -n -y -f "kernel-devel=${kernel_ver}" "kernel-source=${kernel_ver}" libselinux-devel
+            ;;
+        pacman)
+            local pacman_ver=$(echo "$kernel_ver" | sed 's/-/./1')
+            ${SUDO_CMD} pacman -Sy --noconfirm "linux-headers=${pacman_ver}" || ${SUDO_CMD} pacman -Sy --noconfirm linux-headers
+            ;;
+        apk)
+            local flavor=$(echo "$kernel_ver" | grep -oP '\d+-\K[^-]+$' || echo "")
+            if [[ -n "$flavor" ]]; then
+                ${SUDO_CMD} apk add "linux-${flavor}-dev" || ${SUDO_CMD} apk add linux-headers
+            else
+                ${SUDO_CMD} apk add linux-headers
+            fi
+            ;;
+        *)
+            print_error "Unknown package manager. Cannot install kernel headers."
+            exit 1
+            ;;
+    esac
+    
+    print_info "Kernel headers installed successfully"
+    KERNEL_HEADERS_INSTALLED=true
+}
+
+remove_multipath_iscsi() {
+    local pm=$1
+    
+    print_info "Checking for multipath and iSCSI packages..."
+    
+    case $pm in
+        apt)
+            local packages_to_remove=()
+            dpkg -l 2>/dev/null | grep -q "multipath-tools" && packages_to_remove+=("multipath-tools") && MULTIPATH_REMOVED+=("multipath-tools")
+            dpkg -l 2>/dev/null | grep -q "open-iscsi" && packages_to_remove+=("open-iscsi") && ISCSI_REMOVED+=("open-iscsi")
+            
+            if [ ${#packages_to_remove[@]} -gt 0 ]; then
+                print_info "Removing packages: ${packages_to_remove[*]}"
+                ${SUDO_CMD} systemctl stop multipathd iscsid open-iscsi 2>/dev/null || true
+                ${SUDO_CMD} apt-get remove -y "${packages_to_remove[@]}" 2>/dev/null || true
+                ${SUDO_CMD} apt-get autoremove -y 2>/dev/null || true
+            else
+                print_info "No multipath or iSCSI packages found"
+            fi
+            ;;
+        dnf|yum)
+            local packages_to_remove=()
+            rpm -qa 2>/dev/null | grep -q "device-mapper-multipath" && packages_to_remove+=("device-mapper-multipath") && MULTIPATH_REMOVED+=("device-mapper-multipath")
+            rpm -qa 2>/dev/null | grep -q "iscsi-initiator-utils" && packages_to_remove+=("iscsi-initiator-utils") && ISCSI_REMOVED+=("iscsi-initiator-utils")
+            
+            if [ ${#packages_to_remove[@]} -gt 0 ]; then
+                print_info "Removing packages: ${packages_to_remove[*]}"
+                ${SUDO_CMD} systemctl stop multipathd iscsid 2>/dev/null || true
+                [[ "$pm" == "dnf" ]] && ${SUDO_CMD} dnf remove -y "${packages_to_remove[@]}" 2>/dev/null || ${SUDO_CMD} yum remove -y "${packages_to_remove[@]}" 2>/dev/null || true
+            else
+                print_info "No multipath or iSCSI packages found"
+            fi
+            ;;
+        *)
+            print_info "No multipath or iSCSI packages found"
+            ;;
+    esac
+}
+
+map_package_name() {
+    local pm=$1
+    local pkg=$2
+    
+    case $pm in
+        apt)
+            case $pkg in
+                scsitools) echo "sg3-utils" ;;
+                elfutils-libelf-devel) echo "libelf-dev" ;;
+                *) echo "$pkg" ;;
+            esac
+            ;;
+        dnf|yum)
+            case $pkg in
+                scsitools) echo "sg3_utils" ;;
+                *) echo "$pkg" ;;
+            esac
+            ;;
+        zypper)
+            case $pkg in
+                scsitools) echo "sg3_utils" ;;
+                net-tools) echo "net-tools-deprecated" ;;
+                elfutils-libelf-devel) echo "libelf-devel" ;;
+                *) echo "$pkg" ;;
+            esac
+            ;;
+        pacman)
+            case $pkg in
+                scsitools) echo "sg3_utils" ;;
+                elfutils-libelf-devel) echo "libelf" ;;
+                python3) echo "python" ;;
+                *) echo "$pkg" ;;
+            esac
+            ;;
+        apk)
+            case $pkg in
+                scsitools) echo "sg3_utils" ;;
+                elfutils-libelf-devel) echo "elfutils-dev" ;;
+                *) echo "$pkg" ;;
+            esac
+            ;;
+        *) echo "$pkg" ;;
+    esac
+}
+
+install_packages() {
+    local pm=$1
+    shift
+    local packages=("$@")
+    local mapped_packages=()
+    
+    for pkg in "${packages[@]}"; do
+        mapped_packages+=("$(map_package_name "$pm" "$pkg")")
+    done
+    
+    PACKAGES_INSTALLED=("${mapped_packages[@]}")
+    
+    print_info "Using package manager: $pm"
+    print_info "Installing packages: ${mapped_packages[*]}"
+    
+    case $pm in
+        apt)
+            ${SUDO_CMD} apt-get update
+            ${SUDO_CMD} apt-get install -y "${mapped_packages[@]}"
+            ;;
+        dnf) ${SUDO_CMD} dnf install -y "${mapped_packages[@]}" ;;
+        yum) ${SUDO_CMD} yum install -y "${mapped_packages[@]}" ;;
+        zypper)
+            ${SUDO_CMD} zypper refresh
+            ${SUDO_CMD} zypper install -y "${mapped_packages[@]}"
+            ;;
+        pacman) ${SUDO_CMD} pacman -Sy --noconfirm "${mapped_packages[@]}" ;;
+        apk)
+            ${SUDO_CMD} apk update
+            ${SUDO_CMD} apk add "${mapped_packages[@]}"
+            ;;
+        *)
+            print_error "Unknown package manager. Cannot install packages."
+            exit 1
+            ;;
+    esac
+}
+
+run_package_installation() {
+    print_section "STEP 6: Package Installation"
+    
+    PM=$(detect_package_manager)
+    
+    if [[ "$PM" == "unknown" ]]; then
+        print_error "Could not detect package manager."
+        exit 1
+    fi
+    
+    remove_multipath_iscsi "$PM"
+    install_kernel_headers "$PM"
+    
+    PACKAGES=("curl" "wget" "git" "vim" "perl" "gdb" "scsitools" "net-tools" "parted" "fio" "ca-certificates" "python3" "elfutils-libelf-devel")
+    
+    install_packages "$PM" "${PACKAGES[@]}"
+    
+    print_info "Package installation completed"
+    PACKAGE_INSTALL_COMPLETED=true
+}
+
+#==============================================================================
+# SECTION 4: UBUNTU AUTO-UPGRADE DISABLE
+#==============================================================================
+
+disable_ubuntu_auto_upgrades() {
+    print_section "STEP 5: Ubuntu Auto Upgrade Configuration"
+
+    if [[ "$DISTRO" != "ubuntu" ]]; then
+        print_info "Auto-upgrade configuration is only applied on Ubuntu"
+        return 0
+    fi
+
+    local auto_upgrade_file="/etc/apt/apt.conf.d/20auto-upgrades"
+
+    print_info "Disabling Ubuntu periodic package list updates and unattended upgrades..."
+
+    local backup_dir="/var/backups/atvm"
+    local backup_file="${backup_dir}/20auto-upgrades.backup.$(date +%Y%m%d_%H%M%S)"
+
+    if [ -f "$auto_upgrade_file" ]; then
+        ${SUDO_CMD} mkdir -p "$backup_dir"
+        ${SUDO_CMD} cp "$auto_upgrade_file" "$backup_file"
+        print_info "Backup created: ${backup_file}"
+    fi
+
+    ${SUDO_CMD} bash -c "cat > '$auto_upgrade_file' <<'EOF'
+APT::Periodic::Update-Package-Lists \"0\";
+APT::Periodic::Unattended-Upgrade \"0\";
+EOF"
+
+    print_info "Updated auto-upgrade settings:"
+    echo -e "${CYAN}----------------------------------------${NC}"
+    ${SUDO_CMD} cat "$auto_upgrade_file"
+    echo -e "${CYAN}----------------------------------------${NC}"
+
+    AUTO_UPGRADES_DISABLED=true
+}
+
+#==============================================================================
+# SECTION 5: ORACLE KERNEL DEFAULT (NON-UEK)
+#==============================================================================
+
+configure_oracle_non_uek_kernel() {
+    print_section "STEP 3: Oracle Kernel Default Configuration"
+
+    if [[ "$DISTRO" != "ol" ]]; then
+        print_info "Oracle kernel configuration only applies to Oracle Linux"
+        return 0
+    fi
+
+    if ! command -v grubby &> /dev/null; then
+        print_warning "grubby not found - cannot change default kernel"
+        return 0
+    fi
+
+    ORACLE_KERNEL_DEFAULT_BEFORE=$(grubby --default-kernel 2>/dev/null || true)
+
+    ORACLE_KERNEL_TARGET=$(grubby --info=ALL 2>/dev/null \
+        | awk -F'"' '/^kernel=/{print $2}' \
+        | grep -v 'uek' \
+        | head -n 1 || true)
+
+    if [[ -z "${ORACLE_KERNEL_TARGET:-}" ]]; then
+        print_warning "No non-UEK kernel found in boot entries - leaving current default"
+        return 0
+    fi
+
+    ORACLE_TARGET_KERNEL_VERSION=$(basename "$ORACLE_KERNEL_TARGET" | sed 's/^vmlinuz-//')
+    print_info "Current default kernel: ${ORACLE_KERNEL_DEFAULT_BEFORE:-unknown}"
+    print_info "Target non-UEK kernel: $ORACLE_KERNEL_TARGET"
+
+    if [[ "$ORACLE_KERNEL_DEFAULT_BEFORE" != "$ORACLE_KERNEL_TARGET" ]]; then
+        print_info "Setting non-UEK kernel as default boot entry..."
+        ${SUDO_CMD} grubby --set-default "$ORACLE_KERNEL_TARGET"
+        ORACLE_KERNEL_DEFAULT_CHANGED=true
+    else
+        print_info "Default kernel is already set to non-UEK"
+    fi
+
+    ORACLE_KERNEL_DEFAULT_AFTER=$(grubby --default-kernel 2>/dev/null || true)
+    print_info "New default kernel: ${ORACLE_KERNEL_DEFAULT_AFTER:-unknown}"
+
+    if [[ "$ORACLE_KERNEL_DEFAULT_AFTER" == "$ORACLE_KERNEL_TARGET" ]] && \
+       [[ "$ORACLE_KERNEL_DEFAULT_AFTER" != "/boot/vmlinuz-$(uname -r)" ]]; then
+        ORACLE_KERNEL_REBOOT_REQUIRED=true
+        print_warning "Kernel default changed but running kernel is still $(uname -r)"
+        print_warning "Reboot required to boot into non-UEK kernel"
+    fi
+
+    ORACLE_KERNEL_STEP_COMPLETED=true
+}
+
+#==============================================================================
+# SECTION 6: SELINUX DISABLE
+#==============================================================================
+
+disable_selinux() {
+    print_section "STEP 7: SELinux Configuration"
+    
+    if [[ "$DISTRO" != "rhel" && "$DISTRO" != "centos" && "$DISTRO" != "rocky" && "$DISTRO" != "almalinux" && "$DISTRO" != "fedora" && "$DISTRO" != "ol" ]]; then
+        print_info "SELinux configuration is only applicable to Red Hat-based systems"
+        return 0
+    fi
+    
+    if ! command -v getenforce &> /dev/null; then
+        print_warning "SELinux tools not found"
+        return 0
+    fi
+    
+    print_info "Checking current SELinux status..."
+    CURRENT_SELINUX=$(getenforce)
+    print_info "Current SELinux status: $CURRENT_SELINUX"
+    echo ""
+    
+    if [[ "$CURRENT_SELINUX" == "Disabled" ]]; then
+        print_info "SELinux is already disabled"
+        return 0
+    fi
+    
+    [[ "$CURRENT_SELINUX" == "Enforcing" ]] && SELINUX_WAS_ENFORCING=true
+    
+    if [ ! -f /etc/selinux/config ]; then
+        print_warning "SELinux config file not found"
+        return 0
+    fi
+    
+    print_info "Disabling SELinux..."
+    ${SUDO_CMD} cp /etc/selinux/config /etc/selinux/config.backup.$(date +%Y%m%d_%H%M%S)
+    ${SUDO_CMD} sed -i 's/=enforcing/=disabled/g; s/=permissive/=disabled/g' /etc/selinux/config
+    
+    echo ""
+    print_info "Updated SELinux configuration:"
+    echo -e "${CYAN}----------------------------------------${NC}"
+    ${SUDO_CMD} grep "^SELINUX=" /etc/selinux/config
+    echo -e "${CYAN}----------------------------------------${NC}"
+    echo ""
+    
+    print_warning "SELinux disabled - REBOOT REQUIRED"
+    SELINUX_DISABLED=true
+}
+
+#==============================================================================
+# FINAL SUMMARY
+#==============================================================================
+
+print_final_summary() {
+    local summary_hostname summary_safe_hostname summary_ts
+    local local_copy_target local_copy_cmd local_hash_cmd
+    summary_hostname="$(hostname)"
+    summary_safe_hostname="$(echo "$summary_hostname" | sed 's/[^A-Za-z0-9._-]/_/g')"
+    summary_ts="$(date +%Y%m%d_%H%M%S)"
+    local_copy_target="/home/aw/code/atvm/log/atvm_configuration_${summary_safe_hostname}_${summary_ts}.log"
+    local_copy_cmd="scp root@<client-ip>:${LOG_FILE} ${local_copy_target}"
+    local_hash_cmd="sha256sum ${local_copy_target}"
+
+    local summary_output=""
+    
+    summary_output+="
+"
+    summary_output+="========================================
+"
+    summary_output+="    FINAL INSTALLATION SUMMARY
+"
+    summary_output+="========================================
+"
+    summary_output+="
+"
+    summary_output+="*** System Information ***
+"
+    summary_output+="  * Distribution: $DISTRO
+"
+    summary_output+="  * Package Manager: $PM
+"
+    summary_output+="  * Kernel: $(uname -r)
+"
+    summary_output+="  * Hostname: $(hostname)
+"
+    summary_output+="
+"
+    summary_output+="*** Actions Performed ***
+"
+    summary_output+="
+"
+
+    if [[ "$HOST_IDENTITY_VALIDATED" == true ]]; then
+        summary_output+="[OK] Step 0: Target Host Identity Validation
+"
+        summary_output+="    * Expected IP matched: ${EXPECTED_IP}
+"
+        summary_output+="    * Expected hostname matched: ${EXPECTED_HOSTNAME}
+"
+    else
+        summary_output+="[SKIP] Step 0: Target Host Identity Validation
+"
+    fi
+    summary_output+="
+"
+    
+    if [[ "$REPO_FIX_COMPLETED" == true ]]; then
+        summary_output+="[OK] Step 1: Repository Configuration
+"
+        summary_output+="    * CD-ROM/DVD repository entries commented out
+"
+        summary_output+="    * Package lists updated
+"
+        summary_output+="    * Backup files created with timestamps
+"
+    else
+        summary_output+="[SKIP] Step 1: Repository Configuration
+"
+    fi
+    summary_output+="
+"
+    
+    if [[ "$NETWORKMANAGER_COMPLETED" == true ]]; then
+        summary_output+="[OK] Step 8: Static IP Configuration
+"
+        summary_output+="    * Interface: ${INTERFACE:-unknown}
+"
+        summary_output+="    * IP Address: 192.168.3.191/22
+"
+        summary_output+="    * Gateway: 192.168.0.1
+"
+        summary_output+="    * DNS: 8.8.8.8, 8.8.4.4
+"
+        summary_output+="    * Method: ${STATIC_IP_METHOD}
+"
+    else
+        summary_output+="[SKIP] Step 8: Static IP Configuration
+"
+        summary_output+="    * No network manager found or interface not available
+"
+    fi
+    summary_output+="
+"
+    
+    if [[ "$SUDO_INSTALLED" == true ]]; then
+        summary_output+="[OK] sudo Installation
+"
+        summary_output+="    * sudo package installed successfully
+"
+        summary_output+="
+"
+    fi
+    
+    if [[ "$PACKAGE_INSTALL_COMPLETED" == true ]]; then
+        summary_output+="[OK] Step 6: Package Management
+"
+        if [ ${#MULTIPATH_REMOVED[@]} -gt 0 ]; then
+            summary_output+="    * Removed multipath: ${MULTIPATH_REMOVED[*]}
+"
+        fi
+        if [ ${#ISCSI_REMOVED[@]} -gt 0 ]; then
+            summary_output+="    * Removed iSCSI: ${ISCSI_REMOVED[*]}
+"
+        fi
+        summary_output+="    * Kernel headers installed: $(uname -r)
+"
+        summary_output+="    * Installed ${#PACKAGES_INSTALLED[@]} packages
+"
+    else
+        summary_output+="[SKIP] Step 6: Package Management
+"
+    fi
+    summary_output+="
+"
+
+    if [[ "$DISTRO" == "ol" ]]; then
+        if [[ "$ORACLE_KERNEL_STEP_COMPLETED" == true ]]; then
+            summary_output+="[OK] Step 3: Oracle Kernel Default Configuration
+"
+            summary_output+="    * Previous default: ${ORACLE_KERNEL_DEFAULT_BEFORE:-unknown}
+"
+            summary_output+="    * Target non-UEK kernel: ${ORACLE_KERNEL_TARGET}
+"
+            summary_output+="    * Active default: ${ORACLE_KERNEL_DEFAULT_AFTER:-unknown}
+"
+            if [[ "$ORACLE_KERNEL_DEFAULT_CHANGED" == true ]]; then
+                summary_output+="    * Default kernel was changed during this run
+"
+            else
+                summary_output+="    * Default kernel was already non-UEK
+"
+            fi
+            if [[ "$ORACLE_KERNEL_REBOOT_REQUIRED" == true ]]; then
+                summary_output+="    * REBOOT REQUIRED to boot into non-UEK kernel
+"
+            fi
+        else
+            summary_output+="[SKIP] Step 3: Oracle Kernel Default Configuration
+"
+            summary_output+="    * Not applicable or non-UEK kernel not available
+"
+        fi
+        summary_output+="
+"
+    fi
+
+    if [[ "$DISTRO" == "ubuntu" ]]; then
+        if [[ "$ROOT_SSH_CONFIGURED" == true ]]; then
+            summary_output+="[OK] Step 2: Ubuntu Root SSH Access Configuration
+"
+            summary_output+="    * Root password set to workflow value
+"
+            summary_output+="    * PermitRootLogin enabled
+"
+            summary_output+="    * PasswordAuthentication enabled
+"
+            summary_output+="    * Reconnect as root/cdsi2012 for root-only workflow
+"
+        else
+            summary_output+="[SKIP] Step 2: Ubuntu Root SSH Access Configuration
+"
+            summary_output+="    * Not applied
+"
+        fi
+        summary_output+="
+"
+
+        if [[ "$AUTO_UPGRADES_DISABLED" == true ]]; then
+            summary_output+="[OK] Step 5: Ubuntu Auto Upgrade Configuration
+"
+            summary_output+="    * Updated /etc/apt/apt.conf.d/20auto-upgrades
+"
+            summary_output+="    * APT::Periodic::Update-Package-Lists set to 0
+"
+            summary_output+="    * APT::Periodic::Unattended-Upgrade set to 0
+"
+        else
+            summary_output+="[SKIP] Step 5: Ubuntu Auto Upgrade Configuration
+"
+            summary_output+="    * Not applied
+"
+        fi
+        summary_output+="
+"
+    fi
+    
+    if [[ "$DISTRO" == "rhel" || "$DISTRO" == "centos" || "$DISTRO" == "rocky" || "$DISTRO" == "almalinux" || "$DISTRO" == "fedora" || "$DISTRO" == "ol" ]]; then
+        if [[ "$SELINUX_DISABLED" == true ]]; then
+            summary_output+="[OK] Step 7: SELinux Configuration
+"
+            [[ "$SELINUX_WAS_ENFORCING" == true ]] && summary_output+="    * Previous status: Enforcing
+"
+            summary_output+="    * SELinux disabled in configuration
+"
+            summary_output+="    * Backup: /etc/selinux/config.backup.*
+"
+            summary_output+="    * REBOOT REQUIRED for changes to take effect
+"
+        else
+            summary_output+="[SKIP] Step 7: SELinux Configuration
+"
+            summary_output+="    * Already disabled or not applicable
+"
+        fi
+        summary_output+="
+"
+    fi
+
+    if is_selinux_distro; then
+        if [[ "$SELINUX_DISABLED" == true ]]; then
+            summary_output+="[OK] Step 9: SELinux Reboot And Verification
+"
+            summary_output+="    * Automatic reboot will be triggered at end of script
+"
+            summary_output+="    * Post-reboot verification service configured
+"
+        else
+            summary_output+="[SKIP] Step 9: SELinux Reboot And Verification
+"
+            summary_output+="    * SELinux change not pending reboot
+"
+        fi
+        summary_output+="
+"
+    fi
+
+    if setup_completed_without_errors; then
+        summary_output+="[OK] Step 10: Final Power State
+"
+        summary_output+="    * Client remains powered on for controller log collection
+"
+        summary_output+="    * Required: power off from controller only after log copy + SHA256 verification succeeds
+"
+    else
+        summary_output+="[WARNING] Step 10: Final Power State
+"
+        summary_output+="    * Client will remain powered on because errors were encountered
+"
+    fi
+    summary_output+="
+"
+    
+    summary_output+="========================================
+"
+    if setup_completed_without_errors; then
+        summary_output+="  SUCCESS: ATVM VM Setup Complete!
+"
+    else
+        summary_output+="  WARNING: Setup completed with issues
+"
+    fi
+    summary_output+="========================================
+"
+    
+    if [[ "$SELINUX_DISABLED" == true ]] || [[ "$NETWORKMANAGER_COMPLETED" == true ]] || [[ "$ORACLE_KERNEL_REBOOT_REQUIRED" == true ]]; then
+        summary_output+="
+"
+        summary_output+="========================================
+"
+        summary_output+="       REBOOT RECOMMENDED
+"
+        summary_output+="========================================
+"
+        summary_output+="
+"
+        [[ "$SELINUX_DISABLED" == true ]] && summary_output+="  * SELinux changes require reboot
+"
+        [[ "$NETWORKMANAGER_COMPLETED" == true ]] && summary_output+="  * Network changes may benefit from reboot
+"
+        [[ "$ORACLE_KERNEL_REBOOT_REQUIRED" == true ]] && summary_output+="  * Oracle default kernel changed to non-UEK
+"
+        summary_output+="
+"
+        summary_output+="To reboot: sudo reboot
+"
+        summary_output+="
+"
+    fi
+    
+    summary_output+="
+"
+    summary_output+="Log saved to: $LOG_FILE
+"
+    summary_output+="Note: this script runs on the client VM and cannot directly write files to controller filesystem paths.
+"
+    summary_output+="
+Controller-side required step (run from controller host):
+"
+    summary_output+="  Preferred: /home/aw/code/atvm/run_atvm_setup_and_collect_log.sh --collect-after-complete
+"
+    summary_output+="  If a prior run-and-collect session was interrupted, run --collect-after-complete only (do not rerun setup).
+"
+    summary_output+="  (Wrapper checks REMOTE_IP_PRIMARY and REMOTE_IP_SECONDARY; defaults are 192.168.0.121 and 192.168.3.191)
+"
+    summary_output+="  ${local_copy_cmd}
+"
+    summary_output+="
+Optional integrity check:
+"
+    summary_output+="  ssh root@<client-ip> 'sha256sum ${LOG_FILE}'
+"
+    summary_output+="  ${local_hash_cmd}
+"
+    summary_output+="
+After hash match is confirmed on controller:
+"
+    summary_output+="  Preferred: run_atvm_setup_and_collect_log.sh handles automatic power-off when no [ERROR] is present
+"
+    summary_output+="  Manual fallback: ssh root@<client-ip> 'shutdown -h now'
+"
+    
+    # Print to screen with colors
+    echo ""
+    echo -e "${CYAN}========================================${NC}"
+    echo -e "${CYAN}    FINAL INSTALLATION SUMMARY${NC}"
+    echo -e "${CYAN}========================================${NC}"
+    echo ""
+    echo -e "${BLUE}*** System Information ***${NC}"
+    echo "  * Distribution: $DISTRO"
+    echo "  * Package Manager: $PM"
+    echo "  * Kernel: $(uname -r)"
+    echo "  * Hostname: $(hostname)"
+    echo ""
+    echo -e "${BLUE}*** Actions Performed ***${NC}"
+    echo ""
+
+    if [[ "$HOST_IDENTITY_VALIDATED" == true ]]; then
+        echo -e "${GREEN}[OK] Step 0: Target Host Identity Validation${NC}"
+        echo "    * Expected IP matched: ${EXPECTED_IP}"
+        echo "    * Expected hostname matched: ${EXPECTED_HOSTNAME}"
+    else
+        echo -e "${YELLOW}[SKIP] Step 0: Target Host Identity Validation${NC}"
+    fi
+    echo ""
+    
+    if [[ "$REPO_FIX_COMPLETED" == true ]]; then
+        echo -e "${GREEN}[OK] Step 1: Repository Configuration${NC}"
+        echo "    * CD-ROM/DVD repository entries commented out"
+        echo "    * Package lists updated"
+        echo "    * Backup files created with timestamps"
+    else
+        echo -e "${YELLOW}[SKIP] Step 1: Repository Configuration${NC}"
+    fi
+    echo ""
+    
+    if [[ "$NETWORKMANAGER_COMPLETED" == true ]]; then
+        echo -e "${GREEN}[OK] Step 8: Static IP Configuration${NC}"
+        echo "    * Interface: ${INTERFACE:-unknown}"
+        echo "    * IP Address: 192.168.3.191/22"
+        echo "    * Gateway: 192.168.0.1"
+        echo "    * DNS: 8.8.8.8, 8.8.4.4"
+        echo "    * Method: ${STATIC_IP_METHOD}"
+    else
+        echo -e "${YELLOW}[SKIP] Step 8: Static IP Configuration${NC}"
+        echo "    * No network manager found or interface not available"
+    fi
+    echo ""
+    
+    if [[ "$SUDO_INSTALLED" == true ]]; then
+        echo -e "${GREEN}[OK] sudo Installation${NC}"
+        echo "    * sudo package installed successfully"
+        echo ""
+    fi
+    
+    if [[ "$PACKAGE_INSTALL_COMPLETED" == true ]]; then
+        echo -e "${GREEN}[OK] Step 6: Package Management${NC}"
+        [ ${#MULTIPATH_REMOVED[@]} -gt 0 ] && echo "    * Removed multipath: ${MULTIPATH_REMOVED[*]}"
+        [ ${#ISCSI_REMOVED[@]} -gt 0 ] && echo "    * Removed iSCSI: ${ISCSI_REMOVED[*]}"
+        echo "    * Kernel headers installed: $(uname -r)"
+        echo "    * Installed ${#PACKAGES_INSTALLED[@]} packages"
+    else
+        echo -e "${YELLOW}[SKIP] Step 6: Package Management${NC}"
+    fi
+    echo ""
+
+    if [[ "$DISTRO" == "ol" ]]; then
+        if [[ "$ORACLE_KERNEL_STEP_COMPLETED" == true ]]; then
+            echo -e "${GREEN}[OK] Step 3: Oracle Kernel Default Configuration${NC}"
+            echo "    * Previous default: ${ORACLE_KERNEL_DEFAULT_BEFORE:-unknown}"
+            echo "    * Target non-UEK kernel: ${ORACLE_KERNEL_TARGET}"
+            echo "    * Active default: ${ORACLE_KERNEL_DEFAULT_AFTER:-unknown}"
+            if [[ "$ORACLE_KERNEL_DEFAULT_CHANGED" == true ]]; then
+                echo "    * Default kernel was changed during this run"
+            else
+                echo "    * Default kernel was already non-UEK"
+            fi
+            [[ "$ORACLE_KERNEL_REBOOT_REQUIRED" == true ]] && echo -e "    ${YELLOW}* REBOOT REQUIRED to boot into non-UEK kernel${NC}"
+        else
+            echo -e "${YELLOW}[SKIP] Step 3: Oracle Kernel Default Configuration${NC}"
+            echo "    * Not applicable or non-UEK kernel not available"
+        fi
+        echo ""
+    fi
+
+    if [[ "$DISTRO" == "ubuntu" ]]; then
+        if [[ "$ROOT_SSH_CONFIGURED" == true ]]; then
+            echo -e "${GREEN}[OK] Step 2: Ubuntu Root SSH Access Configuration${NC}"
+            echo "    * Root password set to workflow value"
+            echo "    * PermitRootLogin enabled"
+            echo "    * PasswordAuthentication enabled"
+            echo "    * Reconnect as root/cdsi2012 for root-only workflow"
+        else
+            echo -e "${YELLOW}[SKIP] Step 2: Ubuntu Root SSH Access Configuration${NC}"
+            echo "    * Not applied"
+        fi
+        echo ""
+
+        if [[ "$AUTO_UPGRADES_DISABLED" == true ]]; then
+            echo -e "${GREEN}[OK] Step 5: Ubuntu Auto Upgrade Configuration${NC}"
+            echo "    * Updated /etc/apt/apt.conf.d/20auto-upgrades"
+            echo "    * APT::Periodic::Update-Package-Lists \"0\""
+            echo "    * APT::Periodic::Unattended-Upgrade \"0\""
+        else
+            echo -e "${YELLOW}[SKIP] Step 5: Ubuntu Auto Upgrade Configuration${NC}"
+            echo "    * Not applied"
+        fi
+        echo ""
+    fi
+    
+    if [[ "$DISTRO" == "rhel" || "$DISTRO" == "centos" || "$DISTRO" == "rocky" || "$DISTRO" == "almalinux" || "$DISTRO" == "fedora" || "$DISTRO" == "ol" ]]; then
+        if [[ "$SELINUX_DISABLED" == true ]]; then
+            echo -e "${GREEN}[OK] Step 7: SELinux Configuration${NC}"
+            [[ "$SELINUX_WAS_ENFORCING" == true ]] && echo "    * Previous status: Enforcing"
+            echo "    * SELinux disabled in configuration"
+            echo "    * Backup: /etc/selinux/config.backup.*"
+            echo -e "    ${YELLOW}* REBOOT REQUIRED for changes to take effect${NC}"
+        else
+            echo -e "${YELLOW}[SKIP] Step 7: SELinux Configuration${NC}"
+            echo "    * Already disabled or not applicable"
+        fi
+        echo ""
+    fi
+
+    if is_selinux_distro; then
+        if [[ "$SELINUX_DISABLED" == true ]]; then
+            echo -e "${GREEN}[OK] Step 9: SELinux Reboot And Verification${NC}"
+            echo "    * Automatic reboot will be triggered at end of script"
+            echo "    * Post-reboot verification service configured"
+        else
+            echo -e "${YELLOW}[SKIP] Step 9: SELinux Reboot And Verification${NC}"
+            echo "    * SELinux change not pending reboot"
+        fi
+        echo ""
+    fi
+
+    if setup_completed_without_errors; then
+        echo -e "${GREEN}[OK] Step 10: Final Power State${NC}"
+        echo "    * Client remains powered on for controller log collection"
+        echo "    * Required: power off from controller only after log copy + SHA256 verification succeeds"
+    else
+        echo -e "${YELLOW}[WARNING] Step 10: Final Power State${NC}"
+        echo "    * Client will remain powered on because errors were encountered"
+    fi
+    echo ""
+    
+    echo -e "${CYAN}========================================${NC}"
+    if setup_completed_without_errors; then
+        echo -e "${GREEN}  SUCCESS: ATVM VM Setup Complete!${NC}"
+    else
+        echo -e "${YELLOW}  WARNING: Setup completed with issues${NC}"
+    fi
+    echo -e "${CYAN}========================================${NC}"
+    
+    if [[ "$SELINUX_DISABLED" == true ]] || [[ "$NETWORKMANAGER_COMPLETED" == true ]] || [[ "$ORACLE_KERNEL_REBOOT_REQUIRED" == true ]]; then
+        echo ""
+        echo -e "${YELLOW}========================================${NC}"
+        echo -e "${YELLOW}       REBOOT RECOMMENDED${NC}"
+        echo -e "${YELLOW}========================================${NC}"
+        echo ""
+        [[ "$SELINUX_DISABLED" == true ]] && echo -e "${YELLOW}  * SELinux changes require reboot${NC}"
+        [[ "$NETWORKMANAGER_COMPLETED" == true ]] && echo -e "${YELLOW}  * Network changes may benefit from reboot${NC}"
+        [[ "$ORACLE_KERNEL_REBOOT_REQUIRED" == true ]] && echo -e "${YELLOW}  * Oracle default kernel changed to non-UEK${NC}"
+        echo ""
+        echo -e "${YELLOW}To reboot: sudo reboot${NC}"
+        echo ""
+    fi
+    
+    echo ""
+    echo -e "${GREEN}Log saved to: $LOG_FILE${NC}"
+    echo -e "${YELLOW}Note:${NC} this script runs on the client VM and cannot directly write to controller filesystem paths."
+    echo -e "${GREEN}Create local identical copy on controller:${NC}"
+    echo "  Preferred: /home/aw/code/atvm/run_atvm_setup_and_collect_log.sh --collect-after-complete"
+    echo "  If a prior run-and-collect session was interrupted, run --collect-after-complete only (do not rerun setup)."
+    echo "  (Wrapper checks REMOTE_IP_PRIMARY and REMOTE_IP_SECONDARY; defaults are 192.168.0.121 and 192.168.3.191)"
+    echo "  ${local_copy_cmd}"
+    echo -e "${GREEN}Optional integrity check:${NC}"
+    echo "  ssh root@<client-ip> 'sha256sum ${LOG_FILE}'"
+    echo "  ${local_hash_cmd}"
+    echo ""
+    echo -e "${GREEN}After hash match is confirmed on controller:${NC}"
+    echo "  Preferred: run_atvm_setup_and_collect_log.sh handles automatic power-off when no [ERROR] is present"
+    echo "  Manual fallback: ssh root@<client-ip> 'shutdown -h now'"
+    
+    # Write to log file (without colors)
+    echo "$summary_output" >> "$LOG_FILE"
+}
+
+#==============================================================================
+# MAIN
+#==============================================================================
+
+main() {
+    ATVM_SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+    if [[ $EUID -eq 0 ]]; then
+        LOG_FILE="/root/atvm_setup_script.log"
+    else
+        LOG_FILE="${ATVM_SCRIPT_DIR}/atvm_setup_script.log"
+    fi
+    echo "ATVM VM Setup Script - $(date)" > "$LOG_FILE"
+    echo "========================================" >> "$LOG_FILE"
+    
+    echo -e "${CYAN}========================================${NC}"
+    echo -e "${CYAN}      ATVM VM Setup Script${NC}"
+    echo -e "${CYAN}========================================${NC}"
+    echo ""
+
+    parse_args "$@"
+    validate_target_host_identity
+    
+    # Initial privilege check - verify we can run (as root or with sudo)
+    check_sudo
+    
+    # Step 1: Fix repositories FIRST (before installing anything including sudo)
+    fix_repositories
+
+    # Step 2: Ubuntu-specific root SSH/password workflow
+    configure_ubuntu_root_ssh_access
+    
+    # Step 3: Install sudo if needed (after repos are fixed)
+    if ! command -v sudo &> /dev/null; then
+        print_section "Installing sudo"
+        install_sudo_if_needed
+        
+        # Verify sudo is now available
+        if ! command -v sudo &> /dev/null && [[ $EUID -ne 0 ]]; then
+            print_error "CRITICAL: sudo installation failed"
+            exit 1
+        fi
+        print_info "sudo is now available - proceeding with setup"
+        echo ""
+    fi
+    
+    # Step 4: On Oracle Linux, set default boot kernel to non-UEK if available
+    configure_oracle_non_uek_kernel
+
+    # Step 5: Disable Ubuntu unattended auto-upgrades
+    disable_ubuntu_auto_upgrades
+
+    # Step 6: Install packages
+    run_package_installation
+
+    # Step 7: Disable SELinux
+    disable_selinux
+
+    # Step 8: Configure static IP at the very end (can interrupt SSH session)
+    configure_static_ip
+    
+    # Final summary
+    print_final_summary
+
+    # Step 9: On SELinux distros, reboot and verify SELinux runtime state after boot
+    reboot_and_verify_selinux_if_needed
+
+    # Step 10: Keep client on so controller can collect/verify logs before manual power-off
+    poweroff_client_if_successful
+}
+
+main "$@"
diff --git a/atvm/cypress-automation-for-cmc.md b/atvm/cypress-automation-for-cmc.md
new file mode 100644
index 0000000..0b4fa44
--- /dev/null
+++ b/atvm/cypress-automation-for-cmc.md
@@ -0,0 +1,1319 @@
+# Cypress Automation for CMC
+
+# Summary
+
+This document outlines the equipement, hardware, vm inventory and any tips to configure the vms for the cmc cypress automation.  The vms were initially configured manually but as of 2026, are now being configured via AI tools to make configuration more automated and efficient.  The 
+
+# Equipment/Hardware
+
+
+## __Storage Array/Appliance__
+
+
+1. Primary DGS Phoenix Server: 192.168.1.172  (Web GUI login: **admin** / **cdsi2012DGS172**)
+
+   ***Note:*** For SSH login, use **root** and the password needs to be obtained from <https://callcenter.cdsi.us.com/main/phoenix/>
+
+   ESX Assigned Volumes:  
+   * AutomatedTest-Install-ISO (1 TB) - contains the OS ISOs used for the ATVM environment
+   * AutomatedTest-Install-ISO-2 (1TB) - contains the OS ISOs used for the ATVM environment
+   * AutomatedTest-VMBootImg-Gold (3 TB) - contains the VMs created for the ATVM environment
+   * AutomatedTest-VMBootImg-Gold-2 (3 TB) - contains the VMs created for the ATVM environment
+   * AutomatedTest-Cypress (512 GB) - contains the cypress machine to run the automated scripts for the ATVM environment
+   * AutomatedTest-VMBootImgComputeMigration-Gold (512GB) - contains the vmware, ovirt, openshift compute migrate destinations
+   * Internal-DVD-Offline-Linux-Repository (1TB) - This is a DVD offline repository for the QA Test Lab. It is not mirrored and packages are not updated or maintained. Created and provided are AS IS.
+2. Replica DGS Phoenix Server: 192.168.1.89 (Web GUI login: \[Wayne Lam's DGS Server - Anthony Wen has access at this time\])
+
+
+## __VMware Hosts__
+
+### vSphere vCenter Environment 1
+
+
+1. vCenter Server Appliance: 192.168.0.201  (vSphere login: **administrator@qalab.cdsi.local** / **CDSi101!**)
+
+   ***Note:*** For SSH login, **administrator@qalab.cdsi.local** / **CDSi101!** (can also use **root** with the same password?)
+
+   
+   1. ESX Server 165: 192.168.1.165 (ssh: root / CDSi101! / IPMI: admin / cdsi2012) - License: 1Y2RU-DWK14-H81E0-UH8Z6-0Y2J4
+
+      
+      1. VMware ESXi, 7.0.3, 19193900
+      2. Assigned AutomatedTest-VMBootImg-Gold (3 TB)
+   2. ESX Server 166: 192.168.1.166 (ssh: root / CDSi101! / IPMI: admin / cdsi2012) - License: 1Y2RU-DWK14-H81E0-UH8Z6-0Y2J4
+
+      
+      1. VMware ESXi, 7.0.3, 19193900
+      2. Assigned AutomatedTest-VMBootImg-Gold-2 (3 TB)
+
+
+### ==OLD vSphere vCenter Environment==
+
+
+1. ==vCenter Server Appliance: 192.168.0.200  (vSphere login: **administrator@qa.cdsi.local** / **CDSi101!**)==
+
+   ***==Note:==*** ==For SSH login, use **root** with the same password==
+
+   ==\[VM name: **CDS1-VSCA6.7-200**.    Location: ESXi 6.0.0, 192.168.0.43, root/CDSi101\]== 
+
+   \
+2. ==ESXi Server **CDS1-H011**: 192.168.1.11  (SSH login: **root** / **cdsi2012**)==
+
+   ==iDRAC: 192.168.2.11  (login: **admin** / **cdsi2012**)==
+
+   ==S/W: ESXi 6.5.x.    H/W: Dell R720, 160 GB RAM, 18 x 8Gb FC HBA Ports (*14* passthrough-enabled)== 
+
+   \
+3. ==ESXi Server **CDS1-H018**: 192.168.1.18  (SSH login: **root**/**CDSi2012**)==
+
+   ==iDRAC: 192.168.2.18  (login: **admin** / **cdsi2012**)==
+
+   ==S/W: ESXi 6.7.x.    H/W: Dell R720, 192 GB RAM, 12 x 8Gb FC HBA Ports (*8* passthrough-enabled)== 
+
+
+## __ATVM Cypress Host__
+
+Used to run cypress script and to initiate other scripts related to the automation testing process.
+
+
+1.  atvm-cypress-vm: 192.168.3.190 (ip); 255.255.252.0 (broadcast); 192.168.0.1 (gateway) -  (ssh and RDP login: root / atvmcdsi2012 ; cypressuser / atvmcypress)
+
+Located on AutomatedTest-Cypress
+
+OS: Rocky 8.8 - 4.18.0-477.10.1.el8_8.x86_64
+
+CPU: 8
+
+Memory 64GB
+
+Disk Space: 128GB
+
+
+2. atvm-cypress-vm-1: 192.168.3.190 (ip); 255.255.252.0 (broadcast); 192.168.0.1 (gateway) -  (ssh and RDP login: root / atvmcdsi2012 ; cypressuser / atvmcypress)
+
+Located on AutomatedTest-Cypress
+
+OS: Rocky 9.6 - 
+
+CPU: 8
+
+Memory 64GB
+
+Disk Space: 128GB
+
+
+## __Offline DVD Linux Repository__
+
+VM used to host offline DVD Linux Repository.  This will not be mirrorred or updated.  It is purely created for internal purposes to help create and configure the atvm clients (especially RHEL).  Created and provided AS IS. ==\[As of 08/28/2024 - Looks like you can use the free account to link to the RedHat repositories to install and update the system.  Tried it for Redhat9.4.  Redhat9.4+ probably won't have Full DVD ISO's (only boot ISOs).  May not need the offline DVD repository but I have not updated the previous OS versions\].  SEE REDHAT FREE ACCOUNT SUBSCRIPTION SECTION OF THIS DOCUMENT.==
+
+
+1. linux-repo-vm: 192.168.3.199 (ssh login: root / cdsi2012)
+
+Located on Internal-DVD-Offline-Linux-Repository
+
+OS: Rocky 9.2 - 5.14.0-284.11.1.el9_2.x86_64
+
+CPU: 4
+
+Memory 8GB
+
+Disk Space: 50G
+
+Data Disk: Internal-DVD-Offline-Linux-Repository (1TiB)
+
+
+2. Repository Content: 
+
+   
+   1. RedHat 6.0-6.10, 7.0-7.9, 8.0-8.7, 9.1-9.3
+   2. Debian 9.0.0-9.9.0, 9.11.0-9.13.0, 10.0.0-10.13.0
+   3. Suse 11.4, 12.0-12.5, 15.0-15.6
+
+
+## __CMC ATVM Test Account Information__
+
+This account is specifically used for the CMC automation test environment.  The account was created because the cypress script currently needs this information hardcoded.  This avoids others from using their own personal cmc accounts for the cmc atvm testing environment and absolving us from poor personal account practices.
+
+**CMC gcstage:** <https://ui.gcstage.cloud.nonprod.cirrusdata.com/>
+
+
+1. **User:** qatest.atvm@cirrusdata.com (alias email currently linked with anthony.wen@cirrusdata.com. (Ask administrator to switch alias to whoever takes over this environment).  This is used to run through the automation.
+
+   \
+   **Password:** fEMQ9N4KEfYyFnS
+
+   \
+   **2FA Registration Code:** C7FIIZV6SGZ67XGATFN7YQHEJI6BHGPL
+
+   \
+   **CMC API Token:** lNSrdRkqJWJlxierQTcoIiZppmORigyZiXQsHhGiJtmnGKCGAJTwMpRsqKSLgKdSHTXDpYPtPyszDZTvOvGEoXuBZFdkTkxyvNTlSxYKLsBcEpTbRkRQkQppdwBhaUyauPZxolHmOTeZOVIAZCnyGBTQjVxsSaaJXwaguIgeFbYctONcCBhayNTruJOtYJGYbLBESrRkDMuHZBCpZoMeKgeNjifqdROMYhKCyUFhVhaOvFSWizFNlQZYRInscFw
+
+   \
+   **ATVM Xray locations for failed tests:** ../cdc-e2e/cypress/cmcXray
+
+   \
+2. **User:** qatestuser.atvm@cirrusdata.com (alias email currently linked with anthony.wen@cirrusdata.com).  (Ask administrator to switch alias to whoever takes over this environment).  This is used to test user administration with the automation scripts.
+
+   \
+   **Password:** fEMQ9N4KEfYyFnS#1
+
+   \
+   **2FA Registration Code:** WQ6F6NIDSIY57BLHMTTVBMIXZI44G5F7
+
+   \
+   **CMC API Tokens:**
+
+   DQYjVaDFbsFDcfVEoIZNbiiWLkoMOMSzoFyVKkFxwvribCrLiUqEwVVVZDurapQTiJEuGYcJVOvFnXSmcIpwXIJDzPGiidaQwMfbPGirmpKsVZrPQeHAgbABpyNjiDxSOzmGWvDpBEHdrnYceSxtkvYkhSGPOolWOUYdblCuzfnFCuwLtOklRZGsZRAEbBfeJPyrfnZCSMcGBRoVkMRXttYcJKEwOqzlKKKXWtyKKirfyOpSpTlnREUQlgwjGSB
+
+   \
+3. REDHAT FREE SUBSCRIPTION ACCOUNT - This account is used to access the redhat repos.  The only caveat is that free subscriptions expire in 1 year and need be manually renewed.  The clients will need to be unregistered and re-registered again after the account is renewed.  The automation scripts automatically re-register every time the scripts are ran just for simplicity sake.
+
+   \
+   * Registration: 
+
+   \
+   You may register the redhat vm during installation via the wizard or you can registrer via the following command: `subscription-manager register --username qatest.atvm@cirrusdata.com --password rh@CDSi101cdsi2012`
+
+   \
+   * Re-Register:
+
+   \
+   ```none
+   # subscription-manager remove --all
+   # subscription-manager unregister
+   # subscription-manager clean
+   # subscription-manager register --username qatest.atvm@cirrusdata.com --password rh@CDSi101cdsi2012
+   ```
+
+   \
+   * REDHAT renewal link:
+
+   \
+   <https://developers.redhat.com/products/rhel/download#publicandprivatecloudreadyrhelimages>
+
+   \
+   * REDHAT LOGIN: qatest.atvm@cirrusdata.com / rh@CDSi101cdsi2012 (alias email currently linked with anthony.wen@cirrusdata.com).  (Ask administrator to switch alias to whoever takes over this environment). 
+
+   \
+   ==Note: EOL OSes might not be allowed to register.  In those cases, offline DVD repo needs to be used.==
+
+
+## __Reserved IP Address__
+
+Reserved static ip address for atvm environment:
+
+**__192.168.3.190 - 199:__** used for atvm infrastructure (may release some ips down the road if we determine we don't need this many)
+
+
+ 1. **192.168.3.190**: atvm-cypress-vm / atvm-cypress-vm-1
+
+    
+    1. AutomatedTest-Cypress (512GB) Datastore
+ 2. **192.168.3.191**: atvm\[#\]-\[os version\] (all atvm source machines will use the same static ip)
+
+    
+    1. AutomatedTest-VMBootImg-Gold (3 TB) Datastore
+ 3. **192.168.3.192**: atvm-linux-h2h / atvm-win-h2h (all atvm H2H remote destination machines will use the same static ip).  H2H VMs should periodically be remade (cloned) to use the latest OS version?
+
+    
+    1. AutomatedTest-VMBootImg-Gold (3 TB) Datastore
+    2. atvm-linux-h2h - redhat 9.4 5.14.0-427.13.1.el9_4.x86_64
+    3. atvm-win-h2h - Microsoft Windows Server 2022 Standard Evaluation Version: 10.0.20438 Build 20348
+ 4. **192.168.3.193**: atvm\[#\]-\[os version\] (all atvm source machines will use the same static ip)
+
+    
+    1. AutomatedTest-VMBootImg-Gold-2 (3 TB) Datastore
+ 5. **192.168.3.194**: atvm-linux-h2h-2 / atvm-win-h2h-2 (all atvm H2H remote destination machines will use the same static ip).  H2H VMs should periodically be remade (cloned) to use the latest OS version?
+
+    
+    1. AutomatedTest-VMBootImg-Gold-2 (3 TB) Datastore
+    2. atvm-linux-h2h - redhat 9.4 5.14.0-427.13.1.el9_4.x86_64
+    3. atvm-win-h2h - Microsoft Windows Server 2022 Standard Evaluation Version: 10.0.20438 Build 20348
+ 6. 192.168.3.195: cmc-helper for compute migration ops
+ 7. 192.168.3.196:
+ 8. 192.168.3.197:
+ 9. 192.168.3.198:
+10. 192.168.3.199**:** linux-repo-vm:
+
+**__192.168.3.180 - 189:__** used for unit testing atvm clones (may release some ips down the road if we determine we don't need this many)
+
+
+ 1. 192.168.3.180: aw-redhat8.10-disks - testing 100 disks migration
+
+    
+    1. CDS1_ESX166_vmhba16_671538 21:00:00:24:ff:67:15:38 (0000:0e:00.0)
+    2. CDS1_ESX166_vmhba17_671539 21:00:00:24:ff:67:15:39 (0000:0e:00.1)
+    3. (The following ports were used by aw-redhat8.10-disks but are now used by atvmxxx-w2k25 192.168.0.97)
+
+       
+       1. CDS1_ESX166_vmhba4_688d48 21:00:00:24:ff:68:8d:48 (0000:44:00.0)
+       2. CDS1_ESX166_vmhba5_688d49 21:00:00:24:ff:68:8d:49 (0000:44:00.1)
+ 2. 192.168.3.181:  aw999-redhat9.6 (cdssync - aw 01/20/2026)
+ 3. 192.168.3.182:  aw-del-w2k16 (test ovirt controller issue - aw 01/30/2026)
+ 4. 192.168.3.183: atvmxxx-w2k22-uefi (anthony 01/02/2026)
+ 5. 192.168.3.184: atvm999-redhat9.6 (anthony 01/12/2026 - 5.14.0-570.39.1.el9_6.x86_64 nvm vmdks and pure fc 100 disks from 2.8)
+
+    
+    1. CDS1_ESX166_vmhba18_67153a 21:00:00:24:ff:67:15:3a (0000:0f:00.0)
+    2. CDS1_ESX166_vmhba19_67153b 21:00:00:24:ff:67:15:3b (0000:0f:00.1)
+ 6. 192.168.3.185: atvm999-oracle8.10 (aw install test 03/03/2026)
+ 7. 192.168.3.186: 
+ 8. 192.168.3.187:
+ 9. 192.168.3.188:
+10. 192.168.3.189:
+
+**__192.1168.3.176 - 179:__** used for atvm infrastructure
+
+
+1. 192.168.3.176: atvm-ovirtengine (ssh: root / ovirtcdsi2012; web portal: admin / ovirtcdsi2012) - sometimes after a reboot the kvm shows as down but it really isn't.  Seems like a glitch. Putting it in maintenance mode and activating it seemed to get working again for whatever reason.
+
+   
+   1. AutomatedTest-VMBootImgComputeMigration-Gold (512 GB)
+   2. atvm-ovirtengine.cds.lab.com
+   3. Cluster Name: atvm-kvm01-QACL
+   4. Data Center: atvm-kvm01-Local
+   5. VM Storage Domain: atvm-kvm01-LocalStorage
+   6. Network: ovirtmgmt
+   7. CMC Helper: cmchelper-vm (default name)
+   8. CMC Disk Image: cmchelper-vm
+   9. 4 cpu, 8GB memory, 60GB disk space
+2. 192.168.3.177: atvm-kvm01 (ssh: root / ovirtcdsi2012)
+
+   
+   1. AutomatedTest-VMBootImgComputeMigration-Gold (512 GB)
+   2. atvm-kvm01.cds.lab.com
+   3. 8 cpu, 16GB memory, 70GB disk space
+3. 192.168.3.178: atvm-proxmox (ssh: root / promoxcdsi2012)
+
+   
+   1. https://192.168.3.178:8006/
+   2. email used for alerts: qatestuser.atvm@cirrusdata.com (alias email currently linked with anthony.wen@cirrusdata.com)
+   3. hostname (FQDN): atvm-proxmox.cdsi.us.local
+   4. AutomatedTest-VMBootImgComputeMigration-Gold (512 GB)
+   5. 8 cpu, 16GB memory, 132GB disk space
+4. 192.168.3.179
+
+
+## __Zoning__
+
+All Automated Testing Virtual Machines will be using the same FC adapter.  Currently, we will only be powering 1 at a time for testing, so there should be no conflicts when using the same FC adapter on all these vm clients.
+
+VM's FC Passthrough Adapter Zoning to Pure 192.168.2.8  and Infinidat 192.168.2.65 on vCenter 192.168.0.201 (ESX165 192.168.1.165 / ESX166 192.168.1.166)
+
+
+**__Switch Information:__**
+
+Brocade 192.168.2.240 admin / password
+
+
+**__CDS1_ESX165 Passthrough Ports (==In-Use==):__**
+
+**__PURE 192.168.2.8:__**
+
+* ==zone1: Pure1_TA1_deee01_To_CDS1_ESX165_vmhba7_654a1a==
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01==
+  * ==CDS1_ESX165_vmhba7_654a1a 21:00:00:24:ff:65:4a:1a (0000:85:00.0)==
+* ==zone2: Pure1_TB1_deee11_To_CDS1_ESX165_vmhba8_654a1b==
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11==
+  * ==CDS1_ESX165_vmhba8_654a1b 21:00:00:24:ff:65:4a:1b (0000:85:00.1)==
+* zone3: Pure1_TA1_deee01_To_CDS1_ESX165_vmhba5_654a18
+  * Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01
+  * CDS1_ESX165_vmhba5_654a18 21:00:00:24:ff:65:4a:18 (0000:84:00.0)
+* zone4: Pure1_TB1_deee11_To_CDS1_ESX165_vmhba5_654a18
+  * Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11
+  * CDS1_ESX165_vmhba5_654a18 21:00:00:24:ff:65:4a:18 (0000:84:00.0)
+* zone5: Pure1_TA1_deee01_To_CDS1_ESX165_vmhba6_654a19
+  * Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01
+  * CDS1_ESX165_vmhba6_654a19 21:00:00:24:ff:65:4a:19 (0000:84:00.1)
+* zone6: Pure1_TB1_deee11_To_CDS1_ESX165_vmhba6_654a19
+  * Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11
+  * CDS1_ESX165_vmhba6_654a19 21:00:00:24:ff:65:4a:19 (0000:84:00.1)
+* zone7: Pure1_TA1_deee01_To_CDS1_ESX165_vmhba9_653d1c
+  * Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01
+  * CDS1_ESX165_vmhba9_653d1c 21:00:00:24:ff:65:3d:1c (0000:0e:00.0)
+* zone8: Pure1_TB1_deee11_To_CDS1_ESX165_vmhba9_653d1c
+  * Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11
+  * CDS1_ESX165_vmhba9_653d1c 21:00:00:24:ff:65:3d:1c (0000:0e:00.0)
+* zone9: Pure1_TA1_deee01_To_CDS1_ESX165_vmhba10_653d1d
+  * Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01
+  * CDS1_ESX165_vmhba10_653d1d 21:00:00:24:ff:65:3d:1d (0000:0e:00.1)
+* zone10: Pure1_TB1_deee11_To_CDS1_ESX165_vmhba10_653d1d
+  * Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11
+  * CDS1_ESX165_vmhba10_653d1d 21:00:00:24:ff:65:3d:1d (0000:0e:00.1)
+* zone11: Pure1_TA1_deee01_To_CDS1_ESX165_vmhba11_653d1e
+  * Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01
+  * CDS1_ESX165_vmhba11_653d1e 21:00:00:24:ff:65:3d:1e (0000:0f:00.0)
+* zone12: Pure1_TB1_deee11_To_CDS1_ESX165_vmhba11_653d1e
+  * Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11
+  * CDS1_ESX165_vmhba11_653d1e 21:00:00:24:ff:65:3d:1e (0000:0f:00.0)
+* zone13: Pure1_TA1_deee01_To_CDS1_ESX165_vmhba12_653d1f
+  * Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01
+  *  CDS1_ESX165_vmhba12_653d1f 21:00:00:24:ff:65:3d:1f (0000:0f:00.1)
+* zone14: Pure1_TB1_deee11_To_CDS1_ESX165_vmhba12_653d1f
+  * Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11
+  * CDS1_ESX165_vmhba12_653d1f 21:00:00:24:ff:65:3d:1f (0000:0f:00.1)
+
+**__INFINIDAT 192.168.2.65:__**
+
+* zone1: InfiniBox_N2FC5_c425_To_CDS1_ESX165_vmhba7_654a1a
+  *  InfiniBox_N2FC5_c425 57:42:b0:f0:00:10:c4:25
+  * CDS1_ESX165_vmhba7_654a1a 21:00:00:24:ff:65:4a:1a (0000:85:00.0)
+* zone2: InfiniBox_N3FC5_c435_To_CDS1_ESX165_vmhba8_654a1b 
+  * InfiniBox_N3FC5_c435 57:42:b0:f0:00:10:c4:35 
+  * CDS1_ESX165_vmhba8_654a1b 21:00:00:24:ff:65:4a:1b (0000:85:00.1)
+
+**__CDS1_ESX166 Passthrough Ports (==In-Use==):__**
+
+**__PURE 192.168.2.8:__**
+
+* ==zone1: Pure1_TA1_deee01_To_CDS1_ESX166_vmhba6_688d4a== 
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01== 
+  * ==CDS1_ESX166_vmhba6_688d4a 21:00:00:24:ff:68:8d:4a (0000:45:00.0)==
+* ==zone2: Pure1_TB1_deee11_To_CDS1_ESX166_vmhba7_688d4b== 
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11== 
+  * ==CDS1_ESX166_vmhba7_688d4b 21:00:00:24:ff:68:8d:4b (0000:45:00.1)==
+* ==zone3: Pure1_TA1_deee01_To_CDS1_ESX166_vmhba4_688d48==
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01==
+  * ==CDS1_ESX166_vmhba4_688d48 21:00:00:24:ff:68:8d:48 (0000:44:00.0)==
+* ==zone4: Pure1_TB1_deee11_To_CDS1_ESX166_vmhba4_688d48==
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11==
+  * ==CDS1_ESX166_vmhba4_688d48 21:00:00:24:ff:68:8d:48 (0000:44:00.0)==
+* ==zone5: Pure1_TA1_deee01_To_CDS1_ESX166_vmhba5_688d49==
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01==
+  * ==CDS1_ESX166_vmhba5_688d49 21:00:00:24:ff:68:8d:49 (0000:44:00.1)==
+* ==zone6: Pure1_TB1_deee11_To_CDS1_ESX166_vmhba5_688d49==
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11==
+  * ==CDS1_ESX166_vmhba5_688d49 21:00:00:24:ff:68:8d:49 (0000:44:00.1)==
+* ==zone7: Pure1_TA1_deee01_To_CDS1_ESX166_vmhba16_671538==
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01==
+  * ==CDS1_ESX166_vmhba16_671538 21:00:00:24:ff:67:15:38 (0000:0e:00.0)==
+* ==zone8: Pure1_TB1_deee11_To_CDS1_ESX166_vmhba16_671538==
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11==
+  * ==CDS1_ESX166_vmhba16_671538 21:00:00:24:ff:67:15:38 (0000:0e:00.0)==
+* ==zone9: Pure1_TA1_deee01_To_CDS1_ESX166_vmhba17_671539==
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01==
+  * ==CDS1_ESX166_vmhba17_671539 21:00:00:24:ff:67:15:39 (0000:0e:00.1)==
+* ==zone10: Pure1_TB1_deee11_To_CDS1_ESX166_vmhba17_671539==
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11==
+  * ==CDS1_ESX166_vmhba17_671539 21:00:00:24:ff:67:15:39 (0000:0e:00.1)==
+* ==zone11: Pure1_TA1_deee01_To_CDS1_ESX166_vmhba18_67153a==
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01==
+  * ==CDS1_ESX166_vmhba18_67153a 21:00:00:24:ff:67:15:3a (0000:0f:00.0)==
+* ==zone12: Pure1_TB1_deee11_To_CDS1_ESX166_vmhba18_67153a==
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11==
+  * ==CDS1_ESX166_vmhba18_67153a 21:00:00:24:ff:67:15:3a (0000:0f:00.0)==
+* ==zone13: Pure1_TA1_deee01_To_CDS1_ESX166_vmhba19_67153b==
+  * ==Pure1_TA1_deee01 52:4a:93:71:98:de:ee:01==
+  * ==CDS1_ESX166_vmhba19_67153b 21:00:00:24:ff:67:15:3b (0000:0f:00.1)==
+* ==zone14: Pure1_TB1_deee11_To_CDS1_ESX166_vmhba19_67153b==
+  * ==Pure1_TB1_deee11 52:4a:93:71:98:de:ee:11==
+  * ==CDS1_ESX166_vmhba19_67153b 21:00:00:24:ff:67:15:3b (0000:0f:00.1)==
+
+**__INFINIDAT 192.168.2.65:__**
+
+* zone1: InfiniBox_N2FC5_c425_To_CDS1_ESX166_vmhba6_688d4a
+  *  InfiniBox_N2FC5_c425 57:42:b0:f0:00:10:c4:25
+  * CDS1_ESX166_vmhba6_688d4a 21:00:00:24:ff:68:8d:4a (0000:45:00.0)
+* zone2: InfiniBox_N3FC5_c435_To_CDS1_ESX166_vmhba7_688d4b
+  * InfiniBox_N3FC5_c435 57:42:b0:f0:00:10:c4:35
+  * CDS1_ESX166_vmhba7_688d4b 21:00:00:24:ff:68:8d:4b (0000:45:00.1)
+
+**__Storage Port Connections to Infinidat 192.168.2.65__**
+
+* ESX165 (192.168.1.165): 
+  * zone1:  InfiniBox_N2FC5_c425_To_ESX165_I_871e 
+    * 57:42:b0:f0:00:10:c4:25
+    * 21:00:00:24:ff:46:87:1e (vmhba3)
+  * zone2:  InfiniBox_N3FC5_c435_To_ESX165_I_871f
+    * 57:42:b0:f0:00:10:c4:35
+    * 21:00:00:24:ff:46:87:1f (vmhba4)
+* ESX166 (192.168.1.166): 
+  * zone1:  InfiniBox_N2FC5_c425_To_ESX166_I_8888 
+    * 57:42:b0:f0:00:10:c4:25
+    * 21:00:00:24:ff:46:88:88 (vmhba2)
+  * zone2:  InfiniBox_N3FC5_c435_To_ESX166_I_8889
+    * 57:42:b0:f0:00:10:c4:35
+    * 21:00:00:24:ff:46:88:89 (vmhba3
+
+**__Storage Port Connections from ESX165 and ESX166 to DGS172__**
+
+* zone1: CDS1_DGS172_T100_821098_To_CDS1_ESX165_vmhba3_46871e 
+  * CDS1_DGS172_T100_821098 53:a5:e0:30:01:82:10:98
+  * CDS1_ESX165_vmhba3_46871e 21:00:00:24:ff:46:87:1e
+* zone2: CDS1_DGS172_T101_82109a_To_CDS1_ESX165_vmhba4_46871f
+  * CDS1_DGS172_T101_82109a 53:a5:e0:30:01:82:10:9a
+  * CDS1_ESX165_vmhba4_46871f 21:00:00:24:ff:46:87:1f
+* zone3: CDS1_DGS172_T100_821098_To_CDS1_ESX166_vmhba2_46888
+  * CDS1_DGS172_T100_821098 53:a5:e0:30:01:82:10:98
+  * CDS1_ESX166_vmhba2_46888 21:00:00:24:ff:46:88:88
+* zone4: CDS1_DGS172_T101_82109a_To_CDS1_ESX166_vmhba3_46889
+  * CDS1_DGS172_T101_82109a 53:a5:e0:30:01:82:10:9a
+  * CDS1_ESX166_vmhba3_46889 21:00:00:24:ff:46:88:89
+
+
+## VM Guest OS ISO Inventory
+
+**Datastores:**
+
+* AutomatedTest-Install-ISO (for Installation ISOs)
+* AutomatedTest-Install-ISO-2 (for Installation ISOs)
+
+  \
+
+## List of Available VM Guest OS Images:
+
+### WINDOWS
+
+* ==Windows 2008 R2==
+* ==Windows 2016==
+* ==Windows 2019==
+* ==Windows 2022==
+* ==Windows 2025==
+
+### REDHAT
+
+<https://access.redhat.com/downloads/content/479/ver=/rhel---9/9.1/x86_64/product-software>
+
+<https://developers.redhat.com/products/rhel/download#rhelforsap896>
+
+* RHEL 6.0 - cmc doen't compile
+* ==RHEL 6.1==
+* ==RHEL 6.2==
+* ==RHEL 6.3==
+* ==RHEL 6.4==
+* ==RHEL 6.5==
+* ==RHEL 6.6==
+* ==RHEL 6.7==
+* ==RHEL 6.8==
+* ==RHEL 6.9==
+* ==RHEL 6.10==
+* ==RHEL 7.0==
+* ==RHEL 7.1==
+* ==RHEL 7.2==
+* ==RHEL 7.3==
+* ==RHEL 7.4==
+* ==RHEL 7.5==
+* ==RHEL 7.6==
+* ==RHEL 7.7==
+* ==RHEL 7.8==
+* ==RHEL 7.9==
+* ==RHEL 8.0==
+* ==RHEL 8.1==
+* ==RHEL 8.2==
+* ==RHEL 8.3==
+* ==RHEL 8.4==
+* ==RHEL 8.5==
+* ==RHEL 8.6==
+* ==RHEL 8.7==
+* ==RHEL 8.8==
+* ==RHEL 8.9==
+* ==RHEL 8.10==
+* ==RHEL 9.0==
+* ==RHEL 9.1==
+* ==RHEL 9.2==
+* ==RHEL 9.3==
+* ==RHEL 9.4==
+* ==RHEL 9.5==
+* ==RHEL 9.6==
+* ==RHEL 9.7==
+* ==RHEL 10.0==
+* ==RHEL 10.1==
+
+### AMAZON
+
+<https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/amazon-linux-2-virtual-machine.html><https://cdn.amazonlinux.com/os-images/2.0.20230221.0/>
+
+* ==Amazon Linux 2==
+
+
+<https://docs.aws.amazon.com/linux/al2023/ug/outside-ec2-download.html>
+
+* ==Amazon Linux 2023==
+
+### ROCKY
+
+<https://download.rockylinux.org/pub/rocky/>
+
+<https://dl.rockylinux.org/vault/rocky/>
+
+* ==Rocky 8.3 #Pre-Release / Testing Version==
+* ==Rocky 8.4==
+* ==Rocky 8.5==
+* ==Rocky 8.6==
+* ==Rocky 8.7==
+* ==Rocky 8.8==
+* ==Rocky 8.9==
+* ==Rocky 8.10==
+* ==Rocky 9.0==
+* ==Rocky 9.1==
+* ==Rocky 9.2==
+* ==Rocky 9.3==
+* ==Rocky 9.4==
+* ==Rocky 9.5==
+* ==Rocky 9.6==
+* Rocky 9.7
+* ==Rocky 10.0==
+* Rocky 10.1
+
+### UBUNTU
+
+<https://ubuntu.com/#download>
+
+<https://old-releases.ubuntu.com/releases/>
+
+* ==Ubuntu 16.04==
+* ==Ubuntu 18.04==
+* ==Ubuntu 20.04==
+* ==Ubuntu 22.04== 
+* ==Ubuntu 24.04==
+
+### FEDORA
+
+<https://download-ib01.fedoraproject.org/pub/fedora/linux/releases/>
+
+<http://archives.fedoraproject.org/pub/archive/fedora/>
+
+* ==Fedora 27==
+* ==Fedora 28==
+* ==Fedora 33==
+* ==Fedora 34==
+* Fedora 35
+* Fedora 36
+* Fedora 37
+* Fedora 38
+* Fedora 39
+* Fedora 40
+* Fedora 41
+* Fedora 42\nFedora 43
+
+### DEBIAN
+
+<http://ftp.debian.org/debian/dists/ >(http://ftp.debian.org/debian/dists/<dist name>/main/installer-amd64/current/images/netboot/mini.iso)
+
+<https://cdimage.debian.org/cdimage/archive/>
+
+<https://en.wikipedia.org/wiki/Debian_version_history>
+
+NOTES:
+
+
+1. Debian seems to use "strict" by default for their mulitipath configuration.  This prevents new multipath disks to be seen by the OS when disks are assigned.  Need to make sure to add the following in the multipath.conf to allow for the multipath disks to be found during auto allocation.
+
+   ```javascript
+   defaults {
+           find_multipaths "yes"
+   }
+   ```
+
+* ==Debian 9.0.0==
+* ==Debian 9.1.0==
+* ==Debian 9.2.0==
+* ==Debian 9.3.0==
+* Debian 9.4.0
+* Debian 9.5.0
+* Debian 9.6.0
+* Debian 9.7.0
+* Debian 9.8.0
+* Debian 9.9.0
+* ==Debian 9.10.0 - Broken: Can't Get==
+* Debian 9.11.0
+* Debian 9.12.0
+* Debian 9.13.0
+* Debian 10.0.0
+* Debian 10.1.0
+* Debian 10.2.0
+* Debian 10.3.0
+* Debian 10.4.0
+* Debian 10.5.0
+* Debian 10.6.0
+* Debian 10.7.0
+* Debian 10.8.0
+* Debian 10.9.0
+* Debian 10.10.0
+* Debian 10.11.0
+* Debian 10.12.0
+* Debian 10.13.0
+* Debian 11.0.0
+* Debian 11.1.0
+* Debian 11.2.0
+* Debian 11.3.0
+* Debian 11.4.0
+* Debian 11.5.0
+* Debian 11.6.0
+* Debian 11.7.0
+* Debian 11.8.0
+* Debian 11.9.0
+* Debian 11.10.0
+* Debian 11.11.0
+* Debian 12.0.0
+* Debian 12.1.0
+* Debian 12.2.0
+* ==Debian 12.3.0 (NEVER RELEASED)==
+* Debian 124.0
+* Debian 12.5.0
+* Debian 12.6.0
+* Debian 12.7.0
+* Debian 12.8.0
+* Debian 12.9.0
+* ==Debian 12.10.0==
+* ==Debian 13.0.0==
+* ==Debian 13.1.0==
+* ==Debian 13.2.0==
+
+### ORACLE
+
+<https://yum.oracle.com/oracle-linux-isos.html>
+
+<https://mirrors.kernel.org/oracle/>
+
+* Oracle 6.0 - cmc doen't compile
+* ==Oracle 6.1==
+* ==Oracle 6.2==
+* ==Oracle 6.3==
+* ==Oracle 6.4==
+* ==Oracle 6.5==
+* ==Oracle 6.6==
+* ==Oracle 6.7==
+* ==Oracle 6.8==
+* ==Oracle 6.9==
+* ==Oracle 6.10==
+* ==Oracle 7.0==
+* ==Oracle 7.1==
+* ==Oracle 7.2==
+* ==Oracle 7.3==
+* ==Oracle 7.4==
+* ==Oracle 7.5==
+* ==Oracle 7.6==
+* ==Oracle 7.7==
+* ==Oracle 7.8==
+* ==Oracle 7.9==
+* ==Oracle 8.0==
+* ==Oracle 8.1==
+* ==Oracle 8.2==
+* ==Oracle 8.3==
+* ==Oracle 8.4==
+* ==Oracle 8.5==
+* ==Oracle 8.6==
+* ==Oracle 8.7==
+* ==Oracle 8.8==
+* ==Oracle 8.9==
+* ==Oracle 8.10==
+* ==Oracle 9.0==
+* ==Oracle 9.1==
+* ==Oracle 9.2==
+* ==Oracle 9.3==
+* ==Oracle 9.4==
+* ==Oracle 9.5==
+* ==Oracle 9.6==
+* Oracle 9.7
+* ==Oracle 10.0==
+* Oracle 10.1
+
+### CENTOS
+
+<http://mirror.centos.org/centos/>
+
+Note: Centos is doing streams now so there are no set version releases after 8.5 (01/08/2026)
+
+* Centos 6.0 - cmc doen't compile
+* ==Centos 6.1==
+* ==Centos 6.2==
+* ==Centos 6.3==
+* ==Centos 6.4==
+* ==Centos 6.5==
+* ==Centos 6.6==
+* ==Centos 6.7==
+* ==Centos 6.8==
+* ==Centos 6.9==
+* ==Centos 6.10==
+* ==Centos 7.0==
+* ==Centos 7.1==
+* ==Centos 7.2==
+* ==Centos 7.3==
+* ==Centos 7.4==
+* ==Centos 7.5==
+* ==Centos 7.6==
+* ==Centos 7.7==
+* ==Centos 7.8==
+* ==Centos 7.9==
+* ==Centos 8.0==
+* ==Centos 8.1==
+* ==Centos 8.2==
+* ==Centos 8.3==
+* ==Centos 8.4==
+* ==Centos 8.5==
+
+### SuSe
+
+<https://www.suse.com/download/sles/>
+
+Need a paid subscription to access the repo.  Only made up to 15.2 before having issues with installing packages for 15.1.  Looking into switching over to OpenSuse
+
+* Suse 11.4
+* Suse 12.0
+* Suse 12.1
+* Suse 12.2
+* Suse 12.3
+* Suse 12.4
+* Suse 12.5
+* ==Suse 15.0==
+* ==Suse 15.1==
+* ==Suse 15.2==
+* ==Suse 15.3==
+* ==Suse 15.4==
+* ==Suse 15.5==
+* ==Suse 15.6==
+* ==Suse 15.7==
+
+
+## VM Guest OS Configuration - Linux
+
+VM's will be powered on and tested 1 at a time.  So the shared resources should not conflict with each other (ex. FC passthrough adapter and data disks. NOTE: esx prevents you from powering on multiple vm's sharing the same FC passthrough adapter and shared disks)
+
+
+ 1. Name the VM on ESX: 
+
+    
+    1. "atvm\[#\]-\[os \]\[major\].\[minor\]" (ex. atvm2-Ubuntu16.04)
+ 2. Install OS
+
+    
+    1. 4 CPU, 8GB Memory, \[minimum disk size for specific distribution - as of 02/25/2025, atvm currently uses 16GB for linux, 40GB for windows but need to check distros and adjust accordingly\]
+    2. Name the VM hostname (OS won't like "." and sometimes "_" so replace with "-"): "atvm\[#\]-\[os \]\[major\]-\[minor\]" (ex. atvm2-Ubuntu16-04)
+    3. Non-root user creation: cirrus / cdsi2012 (if required)
+    4. root account: root / cdsi2012
+    5. Install using minimal installation
+    6. Set network as static with 192.168.3.191 / 255.255.252.0 \[broadcast\] / 192.168.0.1 \[gateway\]
+ 3. Assign SCSI Controller
+ 4. Assign VM Network
+
+    
+    1. vmxnet3
+    2. Oracle: assign e1000 (can't use vmxnet3 for all or most?)
+ 5. Assign 2 disks to be used for FC and iSCSI migration
+
+    
+    1. atvm-DISK_1.vmdk
+    2. atvm-DISK_2.vmdk 
+ 6. Assign FC adapter
+
+    
+    1. 85.00.0  / 85.00.1 (esx 1.165)
+    2. 45:00.0 / 45:00.1 (esx 1.166)
+ 7. Select Boot Option (under VM Options → Boot Options): Turn off Secure Boot if using EFI
+ 8. Enable ssh / root
+
+    
+    1. May need to install openssh-server
+    2. Edit /etc/ssh/sshd_config and set "PermitRootLogin" to "yes"
+    3. Restart sshd
+ 9. Disable auto OS updates (like Ubuntu)
+
+    
+    1. Ubuntu:  vim /etc/apt/apt.conf.d/20auto-upgrades and set the following to 0 to disable
+
+       
+       1. APT::Periodic::Update-Package-Lists "0";
+       2. APT::Periodic::Unattended-Upgrade "0";
+10. Change default boot order to base kernel instead of UEK kernel (like Oracle Linux) - as of 05/2024, we support UEK and SEL.  By default, ATVM environment has it off but we can make a handful of UEK / SEL versions on a case by case basis.
+11. May need to update repositories for eol versions: Find repo related files in "AutomatedTest-Install-ISO/Updating EoL Packages  - CentOS RHEL/Repo Config" folder
+
+    
+    1. CentOS 6.10 and below - point repo to centos vault 6.10 release
+    2. Redhat 6.10 and below - Sometimes had issues when pointing to centos vault repo so created an internal offline DVD inux repo.  Point repo to redhat vault 6.10 internal offline DVD linux repository on 192.168.3.199/redhat-vault. 
+    3. Oracle 6.10 and below - point repo to latest 6 repo
+    4. Debian - point to the archive repo
+
+       
+       1. Edit: `/etc/apt/sources.list` and add `deb http://archive.debian.org/debian/ stretch main`
+       2. Create and edit: `/etc/apt/apt.conf.d/99no-check-valid-until` and add the following lines:
+
+          
+          1. `Acquire::Check-Valid-Until "true";`
+          2. `Acquire::Check-Date "true";`
+       3.  Run `apt update`
+       4. Install packages
+12. Point RHEL to the internal offline DVD linux repository on 192.168.3.199/redhat-vault (for RHEL 7.0 and above)… Sometimes had issues when pointing to centos vault repo so created an internal offline DVD inux repo. ==\[As of 08/28/2024 - Looks like you can use the free account to link to the RedHat repositories to install and update the system.  Tried it for Redhat9.4.  Redhat9.4+ probably won't have Full DVD ISO's (only boot ISOs).  May not need the offline DVD repository but I have not updated the previous OS versions\]==
+13. Point OEL 7.0-7.1 to the internal offline DVD linux repository to update curl, then switched back to the default OEL repo to perform the rest of the updates
+14. Point SUSE Linux to the internal offline DVD linux repository.  Suse requires an active paid subscription to get updates.
+15. May need to "hack" eol os versions to update the ssl in order to perform yum installs (CentOS/RHEL/OEL 6.10 and below)
+
+    
+    1. File Location: "AutomatedTest-Install-ISO/Updating EoL Packages  - CentOS RHEL OEL"
+    2. Download and install kernel header / devel packages for OS version: 
+       * rpm -Uvh kernel-devel\* kernel-headers\* --force
+    3. Download and install the 38 rpm packages from the root of "Updating EoL Packages  - CentOS RHEL" folder:
+       * rpm -Uvh perl-5.10.1-144.el6.x86_64.rpm perl-Module-Pluggable-3.90-144.el6.x86_64.rpm perl-Pod-Simple-3.13-144.el6.x86_64.rpm perl-version-0.77-144.el6.x86_64.rpm perl-libs-5.10.1-144.el6.x86_64.rpm perl-Pod-Escapes-1.04-144.el6.x86_64.rpm ; rpm -Uvh libgcc-4.4.7-23.el6.x86_64.rpm ; rpm -Uvh tzdata-2018e-3.el6.noarch.rpm ; rpm -Uvh glibc-2.12-1.212.el6.x86_64.rpm glibc-common-2.12-1.212.el6.x86_64.rpm glibc-devel-2.12-1.212.el6.x86_64.rpm glibc-headers-2.12-1.212.el6.x86_64.rpm ; rpm -Uvh cpp-4.4.7-23.el6.x86_64.rpm mpfr-2.4.1-6.el6.x86_64.rpm ppl-0.10.2-11.el6.x86_64.rpm ; rpm -Uvh gcc-4.4.7-23.el6.x86_64.rpm cloog-ppl-0.15.7-1.2.el6.x86_64.rpm libgomp-4.4.7-23.el6.x86_64.rpm ; rpm -Uvh make-3.81-23.el6.x86_64.rpm ; rpm -Uvh openssl-1.0.1e-57.el6.x86_64.rpm ; rpm -Uvh curl-7.19.7-53.el6_9.x86_64.rpm libcurl-7.19.7-53.el6_9.x86_64.rpm libssh2-1.4.2-2.el6_7.1.x86_64.rpm nss-3.36.0-8.el6.x86_64.rpm nss-util-3.36.0-1.el6.x86_64.rpm nspr-4.19.0-1.el6.x86_64.rpm nss-softokn-3.14.3-23.3.el6_8.x86_64.rpm nss-softokn-freebl-3.14.3-23.3.el6_8.x86_64.rpm nss-sysinit-3.36.0-8.el6.x86_64.rpm nss-tools-3.36.0-8.el6.x86_64.rpm ; rpm -Uvh ca-certificates-2018.2.22-65.1.el6.noarch.rpm p11-kit-0.18.5-2.el6_5.2.x86_64.rpm p11-kit-trust-0.18.5-2.el6_5.2.x86_64.rpm libtasn1-2.3-6.el6_5.x86_64.rpm ; rpm -Uvh zlib-1.2.3-29.el6.x86_64.rpm --force
+16. Install linux headers (Perform if step 9 was skipped. May need to install manually. Make sure the kernel versions match)
+
+    
+    1. apt install linux-headers-$(uname -r)
+    2. yum install kernel-devel (yum install "kernel-devel-$(uname -r)") / yum install kernel-headers (yum install "kernel-headers-$(uname -r)")
+    3. zypper install -n -y --type pattern devel_basis ; zypper install -n -y -f kernel-devel kernel-source libselinux-devel
+17. Install vim
+
+    
+    1. apt -y install vim
+    2. yum -y install vim
+    3. zypper install -n -y vim
+18. Install perl
+
+    
+    1. apt -y install perl
+    2. yum -y install perl
+    3. zypper install -n -y perl
+19. Install gdb
+
+    
+    1. apt -y install gdb
+    2. yum -y install gdb
+    3. zypper install -n -y gdb
+20. Install for rescan-scsi-bus
+
+    
+    1. apt -y install scsitools
+    2. yum -y install sg3_utils
+    3. zypper install -n -y sg3_utils
+21. Install net-tools
+
+    
+    1. apt -y install net-tools
+    2. yum -y install net-tools
+    3. zypper install -n -y net-tools
+22. Install parted
+
+    
+    1. apt -y install parted
+    2. yum -y install parted
+    3. zypper install -n -y parted
+23. Install FIO (can get a version from "AutomatedTest-Install-ISO/Updating EoL Packages  - CentOS RHEL")
+
+    
+    1. apt -y install fio
+    2. yum -y install fio
+    3. zypper install -n -y fio
+    4. Install from source code - copy of fio-3.20.tar.gz with installation notes should be in "AutomatedTest-Install-ISO" datastore
+24. Install ssl / ca-certificates
+
+    
+    1. apt -y install ca-certificates
+    2. yum -y install ca-certificates
+    3. zypper install -n -y ca-certificates
+25. May need to update curl
+
+    
+    1. apt -y install curl
+    2. yum -y install curl
+    3. zypper install -n -y curl
+26. Install python (3.6.6?)
+
+    
+    1. apt -y install python3
+    2. yum -y install python3
+    3. zypper install -n -y python3
+27. Might need to install elfutils-libelf-devel to compile cmc (Centos8.0 - 8.3, Redhat 8.0 - 8.6, Oracle 8.0-8.6, Rocky8.9)
+
+    
+    1. yum -y install elfutils-libelf-devel
+28. Make sure vmtools are installed (might need to manually install vmtools for older OS versions)
+
+    
+    1. Click "Click VMware Tools" on ESX UI
+    2. From the client, mount the cdrom
+    3. Extract: tar -zxvf  /mnt/cdrom/VMwareTools-10.2.1-8267844.tar.gz -C /tmp/
+    4. cd /tmp/
+    5. Run: "./vmware-install.pl"
+    6. Refresh the ESX UI and confirm ip address of client is now displayed 
+29. May need to remake the boot image for some versions and include the vmw_pvscsi drivers in the image (for compute migration). Older versions of CentOS and RHEL don't seem to need to have the images remade despite not listing the driver there (lsinitrd |grep vmw_pvscsi).  However, Oracle 7.3+, CentOS 7.3+, Rocky8.9-8.10, 9.3+ and RHEL 7.0+ do need to have their boot images remade.
+
+    
+    1. backup the boot image:
+
+       cp /boot/initramfs-$(uname -r).img /boot/initramfs-$(uname -r).img.orig ; ll /boot/initramfs-$(uname -r).img\*
+    2. vim /etc/dracut.conf.d/cmc-compute-migration.conf and add "add_drivers+="vmw_pvscsi"":
+
+       echo "add_drivers+=\\"vmw_pvscsi\\"" >> /etc/dracut.conf.d/cmc-compute-migration.conf; cat /etc/dracut.conf.d/cmc-compute-migration.conf
+    3. perform dracut to remake the image:
+
+       /usr/sbin/dracut -f -v --no-hostonly /boot/initramfs-$(uname -r).img
+    4. check the image includes the driver: 
+
+       lsinitrd |grep vmw_pvscsi
+30. Make sure SEL is disabled - as of 05/14/2024 we can install cmc successfully with SEL enabled.  However, the atvm environment will have it off by default on the gold disk image.  We can subsequently switch SEL to enforcing if we want to specifically test with SEL set to enforcing.  Please see the following section to switch SEL to enforcing [Switch from SEL=disabled to SEL=enforcing](https://docs.cdsi.us.com/doc/cypress-automation-for-cmc-Wbisze4vGs#h-switch-from-seldisabled-to-selenforcing)
+
+    
+    1. "getenforce" or "setatus"
+    2. edit "etc/selinux/config", change "SELINUX=enforcing" to "disabled" and reboot:
+
+       sed -i 's/=enforcing/=disabled/g' /etc/selinux/config ; cat /etc/selinux/config
+31. SUSE / Debian- by default it installs multipath.  Some later versions of RHEL might install it by default.  Remove it so we can test cmc installing it for us
+
+    
+    1. SUSE
+
+       
+       1. zypper remove -n -y multipath-tools
+       2. zypper remove -n -y libmpath0
+    2. Debian
+
+       
+       1. apt remove multipath-tools
+       2. dpkg --purge multipath-tools
+       3. apt remove open-iscsi
+       4. dpkg --purge open-iscsi
+    3. RedHat
+
+       
+       1. yum remove -y device-mapper-multipath
+32. Check if a network manager is installed.  MIght need to install one that is supported by migrateops (ex. Debian 13 doesn't have one installed by default)
+
+    
+    1. apt install network-manager
+33. SUSE - Might need to install the following (needed by: SUSE15.3)
+
+    
+    1. zypper install -n -y libopenssl-devel
+34. Might need to install sudo
+
+    
+    1. apt install sudo
+    2. zypper install -n -y sudo
+35. Note the kernel and add to inventory in this doc as well as the "notes" field on the VM
+
+    
+    1. uname -r
+36. Power off the vm
+37. Take a snapshot before verifying cmc can be installed
+38. If packages need to installed / updated or system needs to be adjusted to get cmc installed, make notes to perform these on the gold atvm.
+39. Verify you can create 
+
+    
+    1. local migration
+    2. compute migration
+40. Revert back to the snapshot before cmc was installed
+41. Delete the snapshot
+42. Prepare to create next atvm
+43. After creating a bunch of vms, unregister all the atvm vms
+44. From DGS, take a snapshot of the **AutomatedTest-VMBootImg-Gold\[-#\] disk**
+
+
+## Switch from SEL=disabled to SEL=enforcing
+
+If the system has been up and running with SEL=disabled, you cannot just swtich the config from "disabled" to "enforcing" or you may experience hanging issues when you reboot.  The proper way to switch is to to the following.
+
+
+1. Edit "etc/selinux/config" and change "SELINUX=enforcing" to "disabled"
+
+   sed -i 's/=disabled/=permissive/g' /etc/selinux/config ; cat /etc/selinux/config
+2. Perform the following to force relabel: "touch ./autorelabel"
+3. Reboot the system
+4. When the system is back up, edit the "etc/selinux/config" and change "SELINUX=permissive" to "enforcing"
+
+   sed -i 's/=permissive/=enforcing/g' /etc/selinux/config ; cat /etc/selinux/config
+5. Reboot the system again
+6. Check SEL is enforcing: "getenforce"
+7. Might have to install the following packag: yum install policycoreutils-python-utils
+8. Install CMC and it should install successfully now with SEL set to enforcing
+
+
+## __VM Guest OS Gold Images__
+
+Notes: 
+
+
+1. Supported Versions: <https://customer.cirrusdata.com/cdc/kb/articles/cirrus-migrate-cloud-oskernel-requirements-o3F2UdKnds>
+
+
+### VM Inventory on Datastore: AutomatedTest-VMBootImg-Gold
+
+* Amazon Linux 2 \[atvm1-amazonlinux2\] - 4.14.301-224.520.amzn2.x86_64
+  * Currently can't figure out how to get FC to work with Amazon Linux
+* Ubuntu 16.04 \[atvm2-ubuntu16.04\] - 4.4.0-21-generic
+  * (11/27/2023 need to use -no-check-certificate and --insecure to install cmc)
+  * Seems to have a problem with powering off at the end when using iscsi for the test (no problem with fc)
+* Ubuntu 18.04 \[atvm3-ubuntu18.04\] - 4.15.0-20-generic
+* Ubuntu 20.04 \[atvm4-ubuntu20.04\] - 5.4.0-144-generic
+* Ubuntu 22.04 \[atvm5-ubuntu22.04\] - 5.15.0-25-generic
+  * Problem with the rescan-scsi-bus.sh.  It will either remove all devices from the system or change the sd mapping, thus making the OS read-only.  Updated the packages for the kernel and that fixed it.
+    * apt-get update
+    * apt-mark hold linux-image\* linux-headers\* linux-modules\* 
+    * apt-get upgrade
+* *==CentOS 6.0 \[atvm6-centos6.0\] - 2.6.32-71.el6.x86_64==*
+  * *==couldn't compile and install cmc but keeping in case there is a way (as of 04/19/2023). Will reuse atvm6 in future if it's not possible==*
+* CentOS 6.1 \[atvm7-centos6.1\] - 2.6.32-131.0.15.el6.x86_64
+* CentOS 6.2 \[atvm8-centos6.2\] - 2.6.32-220.el6.x86_64
+* CentOS 6.3 \[atvm9-centos6.3\] - 2.6.32-279.el6.x86_64
+* CentOS 6.4 \[atvm10-centos6.4\] - 2.6.32-358.el6.x86_64
+* CentOS 6.5 \[atvm11-centos6.5\] - 2.6.32-431.el6.x86_64
+* CentOS 6.6 \[atvm12-centos6.6\] - 2.6.32-504.el6.x86_64
+* CentOS 6.7 \[atvm13-centos6.7\] - 2.6.32-573.el6.x86_64
+* CentOS 6.8 \[atvm14-centos6.8\] - 2.6.32-642.el6.x86_64
+* CentOS 6.9 \[atvm15-centos6.9\] - 2.6.32-696.el6.x86_64
+* CentOS 6.10 \[atvm16-centos6.10\] - 2.6.32-754.el6.x86_64
+* CentOS 7.0 \[atvm17-centos7.0\] - 3.10.0-123.el7.x86_64
+* CentOS 7.1 \[atvm18-centos7.1\] - 3.10.0-229.el7.x86_64
+* CentOS 7.2 \[atvm19-centos7.2\] - 3.10.0-327.el7.x86_64
+  * \[07/29/2024\] - updated lvm2 package to fix duplicate disk issue where system switches to destination disk upon final cutover over for boot disk (ie. migration corruption) - lvm2-2.02.187-6.el7_9.5.x86_64
+* CentOS 7.3 \[atvm20-centos7.3\] - 3.10.0-514.el7.x86_64
+* CentOS 7.4 \[atvm21-centos7.4\] - 3.10.0-693.el7.x86_64
+* CentOS 7.5 \[atvm22-centos7.5\] - 3.10.0-862.el7.x86_64
+* CentOS 7.6 \[atvm23-centos7.6\] - 3.10.0-957.el7.x86_64
+* CentOS 7.7 \[atvm24-centos7.7\] - 3.10.0-1062.el7.x86_64
+* CentOS 7.8 \[atvm25-centos7.8\] - 3.10.0-1127.el7.x86_64
+* CentOS 7.9 \[atvm26-centos7.9\] - 3.10.0-1160.el7.x86_64
+* CentOS 8.0 \[atvm27-centos8.0\] - 4.18.0-80.el8.x86_64
+* CentOS 8.1 \[atvm28-centos8.1\] - 4.18.0-147.el8.x86_64 
+  * Based kernel compatibility issues with ESX PCI Passthrough with QLogic QLE25xx HBA. Needed to be updated.  Works about 90% of the time.
+  * Over time need to multipath service becomes masked for some reason: unmask the service (systemctl unmask multipathd.service) or reinstall (yum -y remove device-mapper-multipath ; yum -y install device-mapper-multipath)
+* CentOS 8.2 \[atvm29-centos8.2\] - 4.18.0-193.el8.x86_64
+* CentOS 8.3 \[atvm30-centos8.3\] - 4.18.0-240.el8.x86_64
+* CentOS 8.4 \[atvm31-centos8.4\] - 4.18.0-305.3.1.el8.x86_64
+* CentOS 8.5 \[atvm32-centos8.5\] - 4.18.0-348.el8.x86_64
+* Rocky Linux 8.4 \[atvm33-rocky8.4\] - 4.18.0-305.3.1.el8_4.x86_64
+* Rocky Linux 8.5 \[atvm34-rocky8-5\] - 4.18.0-348.el8.0.2.x86_64
+* Rocky Linux 8.6 \[atvm35-rocky8.6\] - 4.18.0-372.9.1.el8.x86_64
+* Rocky Linux 8.7 \[atvm36-rocky8.7\] - 4.18.0-425.3.1.el8.x86_64
+* Rocky Linux 8.8 \[atvm37-rocky8.8\] - 4.18.0-477.10.1.el8_8.x86_64
+* Rocky Linux 9.0 \[atvm38-rocky9.0\] - 5.14.0-70.13.1.el9_0.x86_64 
+* Rocky Linux 9.1 \[atvm39-rocky9.1\] - 5.14.0-162.6.1.el9_1.x86_64
+* Rocky Linux 9.2 \[atvm40-rocky9.2\] -  5.14.0-284.11.1.el9_2.x86_64
+* *==RedHat Linux 6.0 \[atvm41-redhat6.0\] - 2.6.32-71.el6.x86_64==* 
+  * *==couldn't compile and install cmc but keeping in case there is a way (as of 07/28/2023). Will reuse atvm41 in future if it's not possible==*
+* RedHat Linux 6.1 \[atvm42-redhat6.1\] - 2.6.32-131.0.15.el6.x86_64
+* RedHat Linux 6.2 \[atvm43-redhat6.2\] - 2.6.32-220.el6.x86_64
+* RedHat Linux 6.3 \[atvm44-redhat6.3\] - 2.6.32-279.el6.x86_64
+* RedHat Linux 6.4 \[atvm45-redhat6.4\] - 2.6.32-358.el6.x86_64
+* RedHat Linux 6.5 \[atvm46-redhat6.5\] - 2.6.32-431.el6.x86_64
+* RedHat Linux 6.6 \[atvm47-redhat6.6\] - 2.6.32-504.el6.x86_64
+* RedHat Linux 6.7 \[atvm48-redhat6.7\] - 2.6.32-573.el6.x86_64
+* RedHat Linux 6.8 \[atvm49-redhat6.8\] - 2.6.32-642.el6.x86_64
+* RedHat Linux 6.9 \[atvm50-redhat6.9\] - 2.6.32-696.el6.x86_64
+* RedHat Linux 6.10 \[atvm51-redhat6.10\] - 2.6.32-754.el6.x86_64
+* RedHat Linux 7.0 \[atvm52-redhat7.0\] - 3.10.0-123.el7.x86_64
+* RedHat Linux 7.1 \[atvm53-redhat7.1\] - 3.10.0-229.el7.x86_64
+* RedHat Linux 7.2 \]atvm54-redhat7.2\] - 3.10.0-327.el7.x86_64
+  * \[07/29/2024\] - updated lvm2 package to fix duplicate disk issue where system switches to destination disk upon final cutover over for boot disk (ie. migration corruption) - lvm2-2.02.187-6.el7.x86_64
+* RedHat Linux 7.3 \[atvm55-redhat7.3\] - 3.10.0-514.el7.x86_64
+* RedHat Linux 7.4 \[atvm56-redhat7.4\] - 3.10.0-693.el7.x86_64
+* RedHat Linux 7.5 \[atvm57-redhat7.5\] - 3.10.0-862.el7.x86_64
+* RedHat Linux 7.6 \[atvm58-redhat7.6\] - 3.10.0-957.el7.x86_64
+* RedHat Linux 7.7 \[atvm59-redhat7.7\] - 3.10.0-1062.el7.x86_64
+* RedHat Linux 7.8 \[atvm60-redhat7.8\] - 3.10.0-1127.el7.x86_64
+* RedHat Linux 7.9 \[atvm61-redhat7.9\] - 3.10.0-1160.el7.x86_64
+* RedHat Linux 8.0 \[atvm62-redhat8.0\] - 4.18.0-80.el8.x86_64
+* RedHat Linux 8.1 \[atvm63-redhat8.1\] - 4.18.0-147.el8.x86_64 
+  * Based kernel compatibility issues with ESX PCI Passthrough with QLogic QLE25xx HBA. Needed to be updated. Works about 60-70% of the time
+* RedHat Linux 8.2 \[atvm64-redhat8.2\] - 4.18.0-193.el8.x86_64
+* RedHat Linux 8.3 \[atvm65-redhat8.3\] - 4.18.0-240.el8.x86_64
+* RedHat Linux 8.4 \[atvm66-redhat8.4\] - 4.18.0-305.el8.x86_64
+* RedHat Linux 8.5 \[atvm67-redhat8.5\] - 4.18.0-348.el8.x86_64
+* RedHat Linux 8.6 \[atvm68-redhat8.6\] - 4.18.0-372.9.1.el8.x86_64
+* RedHat Linux 8.7 \[atvm69-redhat8.7\] - 4.18.0-425.3.1.el8.x86_64
+* RedHat Linux 9.0 \[atvm70-redhat9.0\] - 5.14.0-70.22.1.el9_0.x86_64
+* RedHat Linux 9.1 \[atvm71-redhat9.1\] - 5.14.0-162.6.1.el9_1.x86_64
+* RedHat Linux 9.2 \[atvm72-redhat9.2\] - 5.14.0-284.11.1.el9_2.x86_64
+* *==Oracle Linux 6.0 \[atvm73-oracle6.0\] - 2.6.32-71.el6.x86_64==* 
+  * *==couldn't compile and install cmc but keeping in case there is a way (as of 07/28/2023). Will reuse atvm73 in future if it's not possible.==*
+* Oracle Linux 6.1 \[atvm74-oracle6.1\] - 2.6.32-131.0.15.el6.x86_64
+* Oracle Linux 6.2 \[atvm75-oracle6.2\] - 2.6.32-220.el6.x86_64
+* Oracle Linux 6.3 \[atvm76-oracle6.3\] - 2.6.32-279.el6.x86_64 
+* Oracle Linux 6.4 \[atvm77-oracle6.4\] - 2.6.32-358.el6.x86_64
+* Oracle Linux 6.5 \[atvm78-oracle6.5\] - 2.6.32-431.el6.x86_64
+* Oracle Linux 6.6 \[atvm79-oracle6.6\] - 2.6.32-504.el6.x86_64
+* Oracle Linux 6.7 \[atvm80-oracle6.7\] - 2.6.32-573.el6.x86_64
+* Oracle Linux 6.8 \[atvm81-oracle6.8\] - 2.6.32-642.el6.x86_64
+* Oracle Linux 6.9 \[atvm82-oracle6.9\] - 2.6.32-696.el6.x86_64
+* Oracle Linux 6.10 \[atvm83-oracle6.10\] - 2.6.32-754.el6.x86_64
+* Oracle Linux 7.0 \[atvm84-oracle7.0\] - 3.10.0-123.el7.x86_64
+* Oracle Linux 7.1 \[atvm85-oracle7.1\] - 3.10.0-229.el7.x86_64
+* Oracle Linux 7.2 \[atvm86-oracle7.2\] - 3.10.0-327.el7.x86_64
+  * \[07/29/2024\] - updated lvm2 package to fix duplicate disk issue where system switches to destination disk upon final cutover over for boot disk (ie. migration corruption) - lvm2-2.02.187-6.0.5.el7_9.5.x86_64
+* Oracle Linux 7.3 \[atvm87-oracle7.3\] - 3.10.0-514.el7.x86_64
+* Oracle Linux 7.4 \[atvm88-oracle7.4\] - 3.10.0-693.el7.x86_64
+* Oracle Linux 7.5 \[atvm89-oracle7.5\] - 3.10.0-862.el7.x86_64fc
+* Oracle Linux 7.6 \[atvm90-oracle7.6\] - 3.10.0-957.el7.x86_64
+* Oracle Linux 7.7 \[atvm91-oracle7.7\] - 3.10.0-1062.el7.x86_64
+* Oracle Linux 7.8 \[atvm92-oracle7.8\] - 3.10.0-1127.el7.x86_64
+* Oracle Linux 7.9 \[atvm93-oracle7.9\] - 3.10.0-1160.el7.x86_64
+* Oracle Linux 8.0 \[atvm94-oracle8.0\] - 4.18.0-80.el8.x86_64
+* Oracle Linux 8.1 \[atvm95-oracle8.1\] - 4.18.0-147.el8.x86_64
+  * Over time need to multipath service becomes masked for some reason: unmask the service (systemctl unmask multipathd.service) or reinstall (yum -y remove device-mapper-multipath ; yum -y install device-mapper-multipath)
+* Oracle Linux 8.2 \[atvm96-oracle8.2\] - 4.18.0-193.el8.x86_64 
+* Oracle Linux 8.3 \[atvm97-oracle8.3\] - 4.18.0-240.el8.x86_64 
+* Oracle Linux 8.4 \[atvm98-oracle8.4\] - 4.18.0-305.el8.x86_64
+* Oracle Linux 8.5 \[atvm99-oracle8.5\] - 4.18.0-348.el8.x86_64
+* Oracle Linux 8.6 \[atvm100-oracle8.6\] - 4.18.0-372.9.1.el8.x86_64 
+* Oracle Linux 8.7 \[atvm101-oracle8.7\] - 4.18.0-425.3.1.el8.x86_64
+* Oracle Linux 9.0  \[atvm102-oracle9.0\] - 5.14.0-70.13.1.0.3.el9_0.x86_64
+* Oracle Linux 9.1 \[atvm103-oracle9.1\] - 5.14.0-162.6.1.el9_1.x86_64
+* Fedora 27 \[atvm104-fedora27\] - 4.13.9-300.fc27.x86_64
+* Fedora 28 \[atvm105-fedora28 - 4.16.3-301.fc28.x86_64 
+* Fedora 33 \[atvm106-fedora33\] - 5.8.15-301.fc33.x86_64 (default kernel); 5.14.18-100.fc33.x86_64
+* Fedora 34 \[atvm107-fedora34\] - 5.11.12-300.fc34.x86_64 
+  * ==local boot migration will boot into a blank unresponsive screen after choosing kernel to boot into.  There is no issue when doing remote boot migration.==
+* ==Windows Server 2008R2 \[atvm108-w2k8r2\] - 6.1.7601 Service Pack 1 Build 7601==
+  * ==Lower priority - still needs to be worked on since it's older and is lacking support/==
+* Windows Server 2012 \[atvm109-w2k12R2\] - 6.3.9600 Build 9600
+* Windows Server 2016 \[atvm110-w2k16\] - 10.0.14393 Build 14393
+  * ==mtdi usually causes power off to take a long time… eventually does==
+* Windows Server 2019 \[atvm111-w2k19\] - 10.0.17763 Build 17763
+* Windows Server 2022 \[atvm112-w2k22\] - 10.0.20438 Build 20348
+* **==#Waiting for request to support: Debian 9.0.0 \[atvm113-debian9.0.0\] - 4.9.0-3-amd64 (11/28/2023 - need to use -no-check-certificate and --insecure to install cmc)==**
+  * **==snapshot==**
+  * **==test==**
+  * **==change ip from 3.196 to 3.191==**
+  * **==add data disks==**
+  * **==add FC adapters==**
+  * **==delete snapshot==**
+* Amazon Linux 2023 \[atvm114-amazonlinux2023\] - 6.1.61-85.141.amzn2023.x86_64
+  * ==Currently can't figure out how to get FC to work with Amazon Linux==
+  * ==Reboot template (cmc-automated-pure-allocation-reboot-test-template.py) won't work well because mtdi service starts up before the iscsi service starts (07/16/2024 - script was updated to resync when specific error was encountered.==
+* **==#Waiting for request to support: Debian 9.1.0 \[atvm115-debian9.1.0\] - 4.9.0-3-amd64 (12/14/2023 need to use -no-check-certificate and --insecure to install cmc)==**  
+  * **==snapshot==**
+  * **==test==**
+  * **==change ip to 3.191==**
+  * **==add data disks==**
+  * **==add FC adapters==**
+  * **==delete snapshot==**
+* **==#Waiting for request to support: Debian 9.2.0 \[atvm116-debian9.2.0\] - 4.9.0-4-amd64==**
+  * **==snapshot==**
+  * **==test==**
+  * **==change ip 3.191==**
+  * **==add data disks==**
+  * **==add FC adapters==**
+  * **==delete snapshot==**
+* Oracle 9.2 \[atvm117-oracle9.2\] - 5.14.0-284.11.1.el9_2.x86_64 
+* Oracle 9.3 \[atvm118-oracle9.3\] - 5.14.0-362.8.1.el9_3.x86_64
+* Rocky Linux 9.3 \[atvm119-rocky9.3\] - 5.14.0-362.8.1.el9_3.x86_64
+* RedHat Linux 9.3 \[atvm120-redhat9.3\] - 5.14.0-362.8.1.el9_3.x86_64
+* Ubuntu 24.04 \[atvm121-ubuntu24.04\] - 6.8.0-31-generic
+* RedHat Linux 9.4 \[atvm122-redhat9.4\] - 5.14.0-427.33.1.el9_4.x86_64
+* Rocky Linux 9.4 \[atvm123-rocky9.4\] - 5.14.0-427.13.1.el9_4.x86_64
+* RedHat Linux 8.8 \[atvm124-redhat8.8\] - 4.18.0-477.27.1.el8_8.x86_64
+* RedHat Linux 8.9 \[atvm125-redhat8.9\] - 4.18.0-513.24.1.el8_9.x86_64
+* RedHat LInux 8.10 \[atvm126-redhat8.10\] - 4.18.0-553.16.1.el8_10.x86_64
+* Rocky Linux 8.9 \[atvm127-rocky8.9\] - 4.18.0-513.5.1.el8_9.x86_64
+* Rocky Linux 8.10 \[atvm128-rock8.10\] - 4.18.0-553.el8_10.x86_64
+* Oracle Linux 8.8 \[atvm129-oracle8.8\] - 4.18.0-477.10.1.el8_8.x86_64
+* Oracle Linux 8.9 \[atvm130-oracle8.9\] - 4.18.0-513.5.1.el8_9.x86_64
+* Oracle Linux 8.10 \[atvm131-oracle8.10\] - 4.18.0-553.el8_10.x86_64
+* Suse Linux 15.5 \[atvm132-suse15.5\] - 5.14.21-150500.53-default
+  *  Hanging issue if doing "rescan-scsi-bus.sh -a -r" if done after cmotion → reboot… used updated version of sg3_utils.  Doesn't seem to our issue.  Skipping rescan for SUSE
+  * lsblk issue - can use redhat 8.8 lsblk to replace system one
+* Oracle Linux 7.9 UEK / SEL \[atvm133-oracle7.9-us\] - 5.4.17-2102.201.3.el7uek.x86_64
+* Oracle Linux 8.10 UEK / SEL \[atvm134-oracle8.10-us\] - 5.15.0-206.153.7.1.el8uek.x86_64
+* Oracle Linux 9.3 UEK / SEL \[atvm135-oracle9.3-us\] - 5.15.0-200.131.27.el9uek.x86_64
+* Oracle Linux 9.4 \[atvm136-oracle9.4\] - 5.14.0-427.13.1.el9_4.x86_64
+* Suse Linux 15.4 \[atvm137-suse15.4\] - 5.14.21-150400.22-default
+  * Hanging issue if doing "rescan-scsi-bus.sh -a -r" if done after cmotion → reboot… used updated version of sg3_utils.  Doesn't seem to be our issue.  Skipping rescan for SUSE
+  * lsblk issue - can use redhat 8.8 lsblk to replace system one
+* Oracle Linux 9.4 OPT \[atvm138-oracle9.4-opt\] - 5.14.0-427.13.1.el9_4.x86_64
+* Redhat Linux 9.5 \[atvm139-redhat9.5\] - 5.14.0-503.14.1.el9_5.x86_64
+* Suse Linux 15.6  \[atvm140-suse15.6\] - 6.4.0-150600.21-default
+  *  Hanging issue if doing "rescan-scsi-bus.sh -a -r" if done after cmotion → reboot… used updated version of sg3_utils.  Doesn't seem to our issue.  Skipping rescan for SUSE
+  * lsblk issue - can use redhat 8.8 lsblk to replace system one
+* Suse Linux 15.3 \[atvm141-suse15.3\] - 5.14.21-150400.22-default 
+  * Couldn't make with base kernel 5.3.18-57-default for some reason?
+  *  Hanging issue if doing "rescan-scsi-bus.sh -a -r" if done after cmotion → reboot… used updated version of sg3_utils.  Doesn't seem to be our issue.  Skipping rescan for SUSE
+  * lsblk issue - can use redhat 8.8 lsblk to replace system one
+* Suse Linux 15.2 \[atvm142-suse15.2\] - 5.3.18-22-default
+  * Hanging issue if doing "rescan-scsi-bus.sh -a -r" if done after cmotion → reboot… used updated version of sg3_utils.  Doesn't seem to be our issue.  Skipping rescan for SUSE
+  * lsblk issue - can use redhat 7.8 lsblk to replace system one
+* Suse Linux 15.1 \[atvm143-suse15.1\] - 4.12.14-195-default
+  *  Hanging issue if doing "rescan-scsi-bus.sh -a -r" if done after cmotion → reboot… used updated version of sg3_utils.  Doesn't seem to be our issue.  Skipping rescan for SUSE
+  * lsblk issue - can use redhat 7.8 lsblk to replace system one
+* Suse Linux 15.0 \[atvm144-suse15.0\] - 4.12.14-23-default
+  * ==Currently crashes when session is created.. skip this for automation for now== 
+  * Hanging issue if doing "rescan-scsi-bus.sh -a -r" if done after cmotion → reboot… used updated version of sg3_utils.  Doesn't seem to be our issue.  Skipping rescan for SUSE
+  * lsblk issue - can use redhat 7.8 lsblk to replace system one
+* Windows Server 2025 \[atvm145-w2k25\] - 10.0.26100 Build 26100
+  * install wmic optional feature - ==wmic is being depreciated so will need cmc to figure out how to use alt methods.  For now we can still install wmic as an optional feature in windows 2025==
+* Debian 12.10.0 \[atvm146-debian12.10.0\] - 6.1.0-34-amd64
+* Redhat Linux 9.6 \[atvm147-redhat9.6\] - 5.14.0-570.12.1.el9_6.x86_64
+* Redhat Linux 10 \[atvm148-redhat10.0\] - 6.12.0-55.9.1.el10_0.x86_64
+  * Can only be installed and booted on esx with cpu v3 and above
+* Oracle Linux 9.6 \[atvm149-oracle9.6\] - 5.14.0-570.12.1.0.1.el9_6.x86_64
+
+### VM Inventory on Datastore: AutomatedTest-VMBootImg-Gold-2
+
+* Oracle Linux 9.5 \[atvm150-oracle9.5\] - 5.14.0-503.11.1.el9_5.x86_64
+* Rocky Linux 9.5 \[atvm151-rocky9.5\] - 5.14.0-503.14.1.el9_5.x86_64
+* Rocky Linux 9.6 \[atvm152-rocky9.6\] - 5.14.0-570.17.1.el9_6.x86_64
+* Rocky Linux 10.0 \[atvm153-rocky10.0\] - 6.12.0-55.12.1.el10_0.x86_64
+* Oracle Linux 10.0 \[atvm154-oracle10.0\] UEFI - 6.12.0-55.9.1.0.1.el10_0.x86_64
+* Suse Linux 15.7 \[atvm155-suse15.7\] UEFI - 6.4.0-150700.51-default
+* **==#Waiting for request to support - currently insertion has issues:==** ==Debian 9.3 \[atvm156-debian9.3.0\] - 4.9.0-4-amd64==
+  * **==test==**
+  * ==NEED TO REMAKE THIS - doesn't turn on== 
+* Debian 13.0.0 \[atvm157-debian13.0.0\] - 6.12.38+deb13-amd64 # need to set the multipath.conf
+
+  ```none
+  defaults {
+          find_multipaths "yes"
+  }
+  
+  ```
+* Debian 13.1.0 \[atvm158-debian13.1.0\] - 6.12.43+deb13-amd64 # need to set the multipath.conf
+
+  ```none
+  defaults {
+          find_multipaths "yes"
+  }
+  
+  ```
+* Debian 13.2.0 \[atvm159-debian13.2.0\] - 6.12.57+deb13-amd64 \* RETEST - used setup script \* # need to set the multipath.conf
+
+  ```none
+  defaults {
+          find_multipaths "yes"
+  }
+  
+  ```
+* Redhat 9.7 \[atvm160-redhat9.7\] - 5.14.0-611.16.1.el9_7.x86_64 \* used setup script \*
+* Redhat 10.1 \[atvm161-redhat10.1\] - 6.12.0-124.8.1.el10_1.x86_64 \* used setup script \*
+* Oracle 9.7 \[atvm162-oracle9.7\] - 5.14.0-611.5.1.el9_7.x86_64
+  * **==move to gold disk==**
+  * **==add data disks==**
+  * **==add FC adapters==**
+  * **==delete snapshot==**
+* Oracle 10.1 \[atvm163-oracle10.1\] - 6.12.0-124.8.1.el10_1.x86_64
+  * **==test==**
+  * **==move to gold disk==**
+  * **==add data disks==**
+  * **==add FC adapters==**
+  * **==delete snapshot==**
+* Rocky 9.7 \[atvm164-rocky9.7\] - 5.14.0-611.5.1.el9_7.x86_64
+  * **==test==**
+  * **==move to gold disk==**
+  * **==add data disks==**
+  * **==add FC adapters==**
+  * **==delete snapshot==**
+* Rocky 10.1 \[atvm165-rocky10.1\] - 6.12.0-124.8.1.el10_1.x86_64
+  * **==test==**
+  * **==move to gold disk==**
+  * **==add data disks==**
+  * **==add FC adapters==**
+  * **==delete snapshot==**
+
+==========
+
+**==VM Creation Notes:==**
+
+* **==configure==**
+* **==snapshot==**
+* **==test==**
+* **==move to gold disk==**
+* **==change ip 3.191==**
+* **==add data disks==**
+* **==add FC adapters==**
+* **==delete snapshot==**
+
+  \
+
+## Temporary Unit Test Clients 
+
+These clients are created for other QA but on a temporary basis to help them unit test certain issues
+
+
+1. atvmxxx-w2k25 192.168.0.75 - 100 disk migration.  (Tomasz - as of 06/02/2025)
+2. aw-ubuntu24.04 192.168.0.71 (cmc general - carolina 02/18/2026)
\ No newline at end of file
diff --git a/atvm/cypress-automation-for-cmc.md:Zone.Identifier b/atvm/cypress-automation-for-cmc.md:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/atvm/cypress-automation-for-cmc.md:Zone.Identifier differ
diff --git a/atvm/run-atvm-setup-and-collect-log.sh b/atvm/run-atvm-setup-and-collect-log.sh
new file mode 100755
index 0000000..8bee59d
--- /dev/null
+++ b/atvm/run-atvm-setup-and-collect-log.sh
@@ -0,0 +1,228 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+REMOTE_IP_PRIMARY="${REMOTE_IP_PRIMARY:-192.168.0.121}"
+REMOTE_IP_SECONDARY="${REMOTE_IP_SECONDARY:-192.168.3.191}"
+REMOTE_USER="${REMOTE_USER:-root}"
+PROJECT_DIR="${PROJECT_DIR:-/home/aw/code/atvm}"
+LOCAL_LOG_DIR="${LOCAL_LOG_DIR:-$PROJECT_DIR/log}"
+LOCAL_SETUP_SCRIPT="${LOCAL_SETUP_SCRIPT:-$PROJECT_DIR/atvm_setup_script.sh}"
+REMOTE_SETUP_SCRIPT="${REMOTE_SETUP_SCRIPT:-/root/atvm_setup_script.sh}"
+REMOTE_LOG_FILE="${REMOTE_LOG_FILE:-/root/atvm_setup_script.log}"
+WAIT_TIMEOUT_SECONDS="${WAIT_TIMEOUT_SECONDS:-600}"
+MODE="${1:-run-and-collect}"
+EXPECTED_IP_ARG="${EXPECTED_IP_ARG:-}"
+EXPECTED_HOSTNAME_ARG="${EXPECTED_HOSTNAME_ARG:-}"
+
+SSH_OPTS=(-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ConnectTimeout=5)
+
+if [[ ! -f "$LOCAL_SETUP_SCRIPT" ]]; then
+    echo "ERROR: Local setup script not found: $LOCAL_SETUP_SCRIPT" >&2
+    exit 1
+fi
+
+mkdir -p "$LOCAL_LOG_DIR"
+
+if ! command -v ssh >/dev/null 2>&1 || ! command -v scp >/dev/null 2>&1; then
+    echo "ERROR: ssh/scp is required." >&2
+    exit 1
+fi
+
+SSH_CMD=(ssh "${SSH_OPTS[@]}")
+SCP_CMD=(scp "${SSH_OPTS[@]}")
+
+if [[ -n "${ATVM_PASSWORD:-}" ]]; then
+    if command -v sshpass >/dev/null 2>&1; then
+        SSH_CMD=(sshpass -p "$ATVM_PASSWORD" ssh "${SSH_OPTS[@]}")
+        SCP_CMD=(sshpass -p "$ATVM_PASSWORD" scp "${SSH_OPTS[@]}")
+    else
+        echo "WARNING: ATVM_PASSWORD is set, but sshpass is not installed. Falling back to interactive password prompts."
+    fi
+fi
+
+run_ssh() {
+    local host="$1"
+    shift
+    "${SSH_CMD[@]}" "${REMOTE_USER}@${host}" "$@"
+}
+
+run_scp_to_remote() {
+    local src="$1"
+    local host="$2"
+    local dst="$3"
+    "${SCP_CMD[@]}" "$src" "${REMOTE_USER}@${host}:${dst}"
+}
+
+run_scp_from_remote() {
+    local host="$1"
+    local src="$2"
+    local dst="$3"
+    "${SCP_CMD[@]}" "${REMOTE_USER}@${host}:${src}" "$dst"
+}
+
+wait_for_reachable_host() {
+    local start_ts current_ts elapsed
+    start_ts="$(date +%s)"
+
+    while true; do
+        for host in "$REMOTE_IP_PRIMARY" "$REMOTE_IP_SECONDARY"; do
+            if run_ssh "$host" "echo ready" >/dev/null 2>&1; then
+                echo "$host"
+                return 0
+            fi
+        done
+
+        current_ts="$(date +%s)"
+        elapsed=$((current_ts - start_ts))
+        if (( elapsed >= WAIT_TIMEOUT_SECONDS )); then
+            return 1
+        fi
+        sleep 5
+    done
+}
+
+pick_initial_host() {
+    for host in "$REMOTE_IP_PRIMARY" "$REMOTE_IP_SECONDARY"; do
+        if run_ssh "$host" "echo ready" >/dev/null 2>&1; then
+            echo "$host"
+            return 0
+        fi
+    done
+    return 1
+}
+
+wait_for_completed_task() {
+    local start_ts current_ts elapsed
+    start_ts="$(date +%s)"
+
+    while true; do
+        for host in "$REMOTE_IP_PRIMARY" "$REMOTE_IP_SECONDARY"; do
+            if run_ssh "$host" "test -f '$REMOTE_LOG_FILE' && grep -q 'SUCCESS: ATVM VM Setup Complete!' '$REMOTE_LOG_FILE'" >/dev/null 2>&1; then
+                echo "$host"
+                return 0
+            fi
+        done
+
+        current_ts="$(date +%s)"
+        elapsed=$((current_ts - start_ts))
+        if (( elapsed >= WAIT_TIMEOUT_SECONDS )); then
+            return 1
+        fi
+        sleep 5
+    done
+}
+
+wait_for_host_offline() {
+    local host="$1"
+    local start_ts current_ts elapsed
+    start_ts="$(date +%s)"
+
+    while true; do
+        if ! run_ssh "$host" "echo still-up" >/dev/null 2>&1; then
+            return 0
+        fi
+
+        current_ts="$(date +%s)"
+        elapsed=$((current_ts - start_ts))
+        if (( elapsed >= WAIT_TIMEOUT_SECONDS )); then
+            return 1
+        fi
+        sleep 5
+    done
+}
+
+if [[ "$MODE" != "run-and-collect" && "$MODE" != "--collect-after-complete" ]]; then
+    echo "Usage:"
+    echo "  $0                      # run setup on client, then collect log"
+    echo "  $0 --collect-after-complete  # wait for completed client task, then collect log only"
+    exit 1
+fi
+
+if [[ "$MODE" == "run-and-collect" ]]; then
+    if [[ -z "$EXPECTED_IP_ARG" || -z "$EXPECTED_HOSTNAME_ARG" ]]; then
+        echo "ERROR: run-and-collect requires EXPECTED_IP_ARG and EXPECTED_HOSTNAME_ARG." >&2
+        echo "Example:" >&2
+        echo "  EXPECTED_IP_ARG=192.168.0.121 EXPECTED_HOSTNAME_ARG=atvm-codextest-vm $0" >&2
+        exit 1
+    fi
+
+    INITIAL_HOST="$(pick_initial_host)" || {
+        echo "ERROR: Could not reach ${REMOTE_IP_PRIMARY} or ${REMOTE_IP_SECONDARY} for initial setup." >&2
+        exit 1
+    }
+
+    echo "Copying setup script to ${REMOTE_USER}@${INITIAL_HOST}:${REMOTE_SETUP_SCRIPT}"
+    run_scp_to_remote "$LOCAL_SETUP_SCRIPT" "$INITIAL_HOST" "$REMOTE_SETUP_SCRIPT"
+
+    echo "Running remote setup script on ${INITIAL_HOST} (disconnect is expected during IP/reboot steps)"
+    set +e
+    run_ssh "$INITIAL_HOST" "chmod +x '$REMOTE_SETUP_SCRIPT' && bash '$REMOTE_SETUP_SCRIPT' --expected-ip '$EXPECTED_IP_ARG' --expected-hostname '$EXPECTED_HOSTNAME_ARG'"
+    run_status=$?
+    set -e
+    if (( run_status != 0 )); then
+        echo "INFO: Remote run returned non-zero (${run_status}). Continuing because network reconfiguration/reboot can interrupt SSH."
+    fi
+
+    echo "Waiting for completed client task marker in ${REMOTE_LOG_FILE} (timeout: ${WAIT_TIMEOUT_SECONDS}s)"
+    ACTIVE_HOST="$(wait_for_completed_task)" || {
+        echo "ERROR: Could not detect completed task marker in remote log within timeout." >&2
+        exit 1
+    }
+else
+    echo "Waiting for completed client task marker in ${REMOTE_LOG_FILE} (timeout: ${WAIT_TIMEOUT_SECONDS}s)"
+    ACTIVE_HOST="$(wait_for_completed_task)" || {
+        echo "ERROR: Could not detect completed task marker in remote log within timeout." >&2
+        exit 1
+    }
+fi
+
+echo "Host reachable at: ${ACTIVE_HOST}"
+
+REMOTE_HOSTNAME="$(run_ssh "$ACTIVE_HOST" "hostname" | tr -d '\r' | tail -n1)"
+RUN_TS="$(date +%Y%m%d_%H%M%S)"
+LOCAL_LOG_FILE="${LOCAL_LOG_DIR}/atvm_configuration_${REMOTE_HOSTNAME}_${RUN_TS}.log"
+
+echo "Collecting remote log: ${REMOTE_LOG_FILE}"
+run_scp_from_remote "$ACTIVE_HOST" "$REMOTE_LOG_FILE" "$LOCAL_LOG_FILE"
+
+REMOTE_HASH="$(run_ssh "$ACTIVE_HOST" "sha256sum '$REMOTE_LOG_FILE' | awk '{print \$1}'" | tr -d '\r' | tail -n1)"
+LOCAL_HASH="$(sha256sum "$LOCAL_LOG_FILE" | awk '{print $1}')"
+
+if [[ "$REMOTE_HASH" != "$LOCAL_HASH" ]]; then
+    echo "ERROR: Hash mismatch after log copy." >&2
+    echo "Remote: $REMOTE_HASH" >&2
+    echo "Local:  $LOCAL_HASH" >&2
+    exit 1
+fi
+
+HAS_ERRORS_IN_LOG=false
+# Match only real error log records. Do not match instructional text that mentions "[ERROR]".
+if run_ssh "$ACTIVE_HOST" "grep -Eq '^\\[ERROR\\]' '$REMOTE_LOG_FILE'"; then
+    HAS_ERRORS_IN_LOG=true
+fi
+
+if [[ "$HAS_ERRORS_IN_LOG" == true ]]; then
+    echo "WARNING: [ERROR] entries detected in remote log. VM will remain powered on for manual inspection."
+else
+    echo "Log indicates success with no [ERROR] entries. Powering off ${ACTIVE_HOST}."
+    set +e
+    run_ssh "$ACTIVE_HOST" "shutdown -h now"
+    shutdown_status=$?
+    set -e
+    if (( shutdown_status != 0 )); then
+        echo "INFO: Shutdown command returned non-zero (${shutdown_status}); this can occur if SSH disconnects during shutdown."
+    fi
+
+    echo "Waiting for ${ACTIVE_HOST} to go offline (timeout: ${WAIT_TIMEOUT_SECONDS}s)"
+    if wait_for_host_offline "$ACTIVE_HOST"; then
+        echo "Power-off confirmed: ${ACTIVE_HOST} is offline."
+    else
+        echo "WARNING: Could not confirm ${ACTIVE_HOST} offline within timeout."
+    fi
+fi
+
+echo "Success"
+echo "Active host: ${ACTIVE_HOST}"
+echo "Local log: ${LOCAL_LOG_FILE}"
+echo "SHA256: ${LOCAL_HASH}"
diff --git a/cdsmcp/AGENTS.md b/cdsmcp/AGENTS.md
new file mode 100644
index 0000000..474b66b
--- /dev/null
+++ b/cdsmcp/AGENTS.md
@@ -0,0 +1,42 @@
+# AGENTS.md
+
+This folder contains the VMware/vCenter + MigrateOps runbook for CDS MCP workflows.
+
+## Files
+- `esxvm.md`: index file only; points to guide and run-learnings docs.
+- `esxvm-guide.md`: authoritative workflow/rules/checklists/default behavior.
+- `esxvm-runs.md`: run-specific learnings, only when a run adds new information.
+- `vmw.yaml`: base template for `MIGRATEOPS_VMWARE_COMPUTE` operations.
+
+## Source Of Truth
+- Use `esxvm-guide.md` for how to execute runs.
+- Use `vmw.yaml` as the starting operation template.
+- Treat `esxvm-runs.md` as evidence/history, not baseline procedure.
+
+## Required Run Pattern
+1. Confirm source VM in vCenter and power state before IP/SSH actions.
+2. Prepare source host (CDC cleanup + CMC reinstall/registration) and verify source is connected in CDC.
+3. Validate preflight requirements from `esxvm-guide.md` (integration, access node, destination name, datastore/host/network, source NIC).
+4. Create MigrateOps from `vmw.yaml` with request-specific replacements.
+5. Monitor continuously and auto-approve cutover unless user requests manual approval.
+6. After terminal state:
+- validate destination login (poll guest IP if needed),
+- archive operation,
+- run offline-host cleanup loop until source/helper cleanup conditions are satisfied,
+- provide final read-only status listing for source/destination/access/helper across CDC and vCenter.
+7. Ask user explicitly before deleting destination VM; never delete without same-run confirmation.
+
+## VM Lookup Requirement
+- Unless user explicitly asks otherwise, scope VM lookup/list responses to cluster `QACL-ATVMCypressONLY`.
+- For vCenter VM lookup requests, always include datastore name and VM notes/annotation in the response.
+
+## Update Rules
+- Update `esxvm-guide.md` only when workflow/rules/default behavior changes.
+- Update `esxvm-runs.md` only when a run reveals a new learning/failure pattern/required check.
+- Keep `esxvm.md` as a lightweight index.
+
+## Environment Defaults
+- vCenter: `192.168.0.201`
+- Cluster scope: `QACL-ATVMCypressONLY` unless user overrides.
+- Default CDC project: `Skidamarink`
+- Default access node: `atvm-linux-h2h`
diff --git a/cdsmcp/esxvm-guide.md b/cdsmcp/esxvm-guide.md
new file mode 100644
index 0000000..8b2a4e0
--- /dev/null
+++ b/cdsmcp/esxvm-guide.md
@@ -0,0 +1,154 @@
+# ESX / vCenter Guide
+
+This file is for workflow guidance only. Do not add specific run examples here.
+
+## Update Rule
+- After every run, update this file only when a workflow rule/checklist/default behavior changed.
+- Add run-specific examples and evidence to `esxvm-runs.md` only when that run produced a new learning.
+
+## vCenter Access
+- Address: `192.168.0.201`
+- Username: `administrator@qalab.cdsi.local`
+- Password: `CDSi101!`
+- Standard CLI path: `/home/aw/.local/bin/govc`
+- Use only this standard vCenter login for vCenter actions unless explicitly instructed otherwise.
+- Do not use `192.168.3.190` for vCenter actions; that machine is reserved for Cypress ATVM automation.
+
+## IP And Power-State Policy (Mandatory)
+- Before finding guest IP or attempting SSH, confirm VM power state in vCenter and power on if needed.
+- Treat only these as stable references:
+- `192.168.0.201` for vCenter login only
+- `192.168.3.190` for ATVM Cypress automation only
+- `192.168.3.191` as default ATVM target reference
+- Any other VM IP must be obtained live from vCenter for that run only.
+- Do not carry forward ad-hoc VM IPs from previous runs in runbooks.
+
+## Cluster Scope Rule
+- Only work under cluster `QACL-ATVMCypressONLY` unless explicitly told otherwise.
+
+## Ignore VMs
+- `vCLS-bf0ec6f6-c7e2-4383-b11e-9c97cec7ed44`
+- `vCLS-e5b3c60e-6a1c-46a6-8357-191fc0ab8e14`
+
+## IP Lookup Rule
+- If asked about an IP address, only check powered-on VMs.
+
+## VM Lookup Response Rule
+- Unless user explicitly asks otherwise, return VM lookup/list results only from cluster `QACL-ATVMCypressONLY`.
+- For vCenter VM lookup requests (for example name/contains filters), always report:
+- VM name
+- datastore name
+- VM notes/annotation
+- include power state and IP when available
+
+## Common VM Credentials
+- Username: `root`
+- Password: `cdsi2012`
+
+## CMC Install/Uninstall Commands
+
+### Default Project Rule
+- Default project: `Skidamarink`
+- Default registration code: `BZHKABCODZLIOK6RTAJ4`
+- Default endpoint: `portal.gcstage.cloud.nonprod.cirrusdata.com:443`
+- Use a different project code only when user explicitly requests it in that run.
+
+### Skidamarink Install (Linux)
+```bash
+curl https://get.cirrusdata.cloud/install-cmc | bash -s -- -rgc BZHKABCODZLIOK6RTAJ4 -gce portal.gcstage.cloud.nonprod.cirrusdata.com:443 -pkg-mode PRE_RELEASE
+```
+
+### Skidamarink Install (Windows)
+```powershell
+iex "& { $(irm https://get.cirrusdata.cloud/install-cmc-win) } -rgc BZHKABCODZLIOK6RTAJ4 -gce portal.gcstage.cloud.nonprod.cirrusdata.com:443 -pkg-mode PRE_RELEASE"
+```
+
+### Uninstall (Linux)
+```bash
+curl https://get.cirrusdata.cloud/install-cmc | bash -s -- -uninstall
+```
+
+### Uninstall (Windows)
+```powershell
+iex "& { $(irm https://get.cirrusdata.cloud/install-cmc-win) } -uninstall"
+```
+
+### CMC Reinstall Fallback (RHEL 10)
+- If installer-based reinstall fails due repo metadata/download errors, use cached local `mtdi-daemon` and `galaxy-migrate` RPMs, start services, enforce `galaxy_complete_endpoint`, then manually register.
+- Do not continue migrateops create until source host is visible as connected in CDC.
+
+## Status Output Format (Power-Off/Revert/Power-On)
+- `VM [vm name] was poweredOn, so I powered it off` (or `already poweredOff`)
+- `Snapshot rollback completed`
+- `VM [vm name] powered back on successfully`
+- `Current IP: <ip>`
+
+## VMware Compute MigrateOps Defaults
+- Use `/home/aw/code/cds/cdsmcp/vmw.yaml` as the starting template.
+- Default sequence for requested source machine:
+- clean CDC state for that machine
+- reinstall CMC Linux on that machine
+- perform migration preflight and operation create
+- If user provides a client name, replace consistently:
+- `config.system_name`
+- `migrateops_vmware_compute.compute.vm_name`
+- operation `name`
+- Validate `integration_name` is active in target project before create.
+- Default access node: `atvm-linux-h2h` (must be powered on in vCenter and connected in CDC).
+- Always discover `source_nic` from live source host networking.
+
+## Approval and Monitoring Defaults
+- Auto-approve cutover by default.
+- Start monitoring immediately after operation create.
+- Approve as soon as `final-synchronization` requests input.
+- Skip auto-approval only if user explicitly asks for manual approval.
+- Patience rule:
+- if heartbeat/progress is advancing, keep waiting
+- allow longer waits for helper deployment/registration steps
+- intervene only for terminal failure, confirmed blocker, or prolonged no-progress
+
+## Preflight Checklist
+- Source host connected in CDC.
+- Integration exists and is active in same project.
+- `atvm-linux-h2h` powered on in vCenter.
+- `atvm-linux-h2h` connected in same CDC project.
+- Destination VM name does not already exist in vCenter.
+- Destination datastore/host/network resolve in vCenter.
+- `source_nic` discovered via SSH from source host.
+
+## Post-Migration Validation and Cleanup Pattern
+- Validate destination login before cleanup:
+- get destination guest IP from vCenter
+- verify SSH/login works
+- if guest IP empty, keep polling and do not skip validation
+- do not mark run complete before validation result is recorded
+- Before deleting destination VM:
+- always prompt user for explicit confirmation
+- never delete destination VM without that confirmation in the same run
+- For delete path:
+- resolve source VM ID and destination VM ID separately
+- abort if IDs match
+- power off destination if needed
+- delete destination by explicit VM ID
+- verify destination removed and source still exists
+- Always run project cleanup after terminal migration state:
+- archive completed operation
+- run global offline-host cleanup
+- cleanup must target source VM named in current request only
+- if source/helper entries still connected, force-disconnect conditions and rerun cleanup
+- if stale connected state persists after VM removal/power-off, wait heartbeat timeout and rerun cleanup until removed
+- verify helper entry from this run (`migrateops-<opid>-<source-system-name>`) is removed
+- Completion gate:
+- do not report run complete until archive + cleanup verification are done
+- always provide read-only final listing for source, destination, access node, helper:
+- CDC status (`present` or `cleaned up`)
+- vCenter status (`present` or `cleaned up`, and if present include power state + IP)
+
+## Default Behavior Contract
+- Perform automatically on every VMware compute run:
+- destination login validation
+- operation archive
+- offline-host cleanup and source/helper stale verification
+- Still require explicit user confirmation before destination delete:
+- always prompt
+- if no confirmation, keep destination and record `deletion skipped by user`
diff --git a/cdsmcp/esxvm-runs.md b/cdsmcp/esxvm-runs.md
new file mode 100644
index 0000000..ed38c22
--- /dev/null
+++ b/cdsmcp/esxvm-runs.md
@@ -0,0 +1,47 @@
+# ESX / vCenter Run Learnings
+
+This file stores run-specific examples only when a run produced a new learning relevant to future tasks.
+
+## Entry Rule
+- Add an entry only when the run changed workflow behavior, uncovered a new failure pattern, or confirmed a new required check.
+- Do not add routine successful runs with no new learning.
+
+## Run Learning: Operation 14208
+- Learning: `wait-for-vm-registration` helper registration can be the longest early-stage step.
+- Action for future runs: if step 6/7 is slow, verify helper VM existence in vCenter before remediation.
+
+## Run Learning: Operation 14213
+- Learning: completion response was sent before destination delete prompt, operation archive, and offline-host cleanup.
+- Action for future runs: completion must be gated on delete prompt handling, archive, and cleanup verification.
+
+## Run Learning: Operation 14214
+- Learning: stale helper/source entries can remain and require explicit offline-host cleanup reruns.
+- Action for future runs: rerun cleanup until stale entries are actually removed.
+
+## Run Learning: Operation 14215
+- Learning: helper creation can fail with vSphere `ReconfigVM` errors and recover via controlled retries.
+- Action for future runs:
+- remove leftover helper artifacts before retry
+- avoid manual helper power actions during active task execution
+- keep waiting while heartbeats/progress still advance
+
+## Run Learning: Operation 14216
+- Learning: destination login validation and post-run cleanup were missed before completion reporting.
+- Action for future runs: always perform destination login validation + archive + cleanup automatically before declaring completion.
+
+## Run Learning: Operation 14218
+- Learning: source/helper entries can remain `connected` with stale `last_checkin` after migration.
+- Action for future runs: enforce heartbeat-timeout waits and rerun cleanup until source/helper entries are removed.
+
+## Run Learning: Operation 14221
+- Learning: source/helper CDC entries for the current request can be removed cleanly by timeout-based cleanup loop after archive, and final 4-entity status listing is effective for closure.
+- Action for future runs:
+- always provide final source/destination/access/helper listing across CDC and vCenter
+- keep destination delete as explicit user-confirmed step only
+
+## Run Learning: Operation 14223
+- Learning: on RHEL 10, CMC reinstall via installer script can fail when repo metadata is unavailable; local RPM install + explicit CDC endpoint config + manual register can recover the source in-place.
+- Action for future runs:
+- if Linux installer fails on repo metadata, check cached `mtdi-daemon` and `galaxy-migrate` RPMs and install directly
+- enforce `galaxy_complete_endpoint` before manual register
+- proceed with migrateops only after source host is confirmed connected in CDC
diff --git a/cdsmcp/esxvm.md b/cdsmcp/esxvm.md
new file mode 100644
index 0000000..fc285ca
--- /dev/null
+++ b/cdsmcp/esxvm.md
@@ -0,0 +1,10 @@
+# ESX / vCenter Notes Index
+
+This file is now an index only.
+
+- Guide-only workflow and rules: `/home/aw/code/cds/cdsmcp/esxvm-guide.md`
+- Run-specific learnings log: `/home/aw/code/cds/cdsmcp/esxvm-runs.md`
+
+Update policy:
+- After each run, update `esxvm-guide.md` only for guide/rule changes.
+- After each run, update `esxvm-runs.md` only if the run produced a new learning.
diff --git a/cdsmcp/vmw.yaml b/cdsmcp/vmw.yaml
new file mode 100644
index 0000000..5d82422
--- /dev/null
+++ b/cdsmcp/vmw.yaml
@@ -0,0 +1,109 @@
+#
+# VMware Compute MigrateOps template
+# Rules:
+# 1) Replace all client references consistently:
+#    - config.system_name
+#    - migrateops_vmware_compute.compute.vm_name
+#    - operations[].name
+#    - cleanup targeting must use the source VM from the current user request only
+# 1a) Default CMC migration sequence for any specified machine:
+#    - clean up CDC project state for that machine (remove stale/offline registration context)
+#    - reinstall CMC Linux on that machine
+#    - then perform migration setup/create
+# 2) Verify integration_name is valid in the target CDC project before creating operation.
+# 3) Default access node is "atvm-linux-h2h":
+#    - VM must be powered on in vCenter
+#    - CMC must be installed/connected in the same CDC project
+# 4) Source NIC must be discovered from the source client (do not assume ens192).
+# 5) Preflight checks before create:
+#    - confirm source VM power state in vCenter first; power on before IP discovery/SSH steps
+#    - destination vm_name must not already exist
+#    - datastore/host/network names must resolve in vCenter
+#    - source client + access node must both be connected in same CDC project
+#    - use only standard vCenter credentials/session for vCenter actions
+#      (do not use 192.168.3.190 for vCenter actions; reserved for Cypress ATVM automation)
+#    - IP handling policy:
+#      * 192.168.0.201 is vCenter only
+#      * 192.168.3.190 is ATVM automation only
+#      * 192.168.3.191 is default ATVM target reference
+#      * any other VM IP must be read live from vCenter for the current run only
+#        and must not be retained/reused as a future default
+# 6) Post-submit approval behavior (default):
+#    - start monitoring as soon as operation create succeeds
+#    - auto-approve cutover immediately when final-synchronization requests approval
+#    - only use manual approval if explicitly requested by user
+#    - patience rule while monitoring:
+#      * if heartbeat/progress is advancing, keep waiting and do not intervene
+#      * allow longer wait windows for helper VM deploy/registration-related steps
+#      * intervene only on terminal failure, confirmed blocker, or prolonged no-progress
+# 7) Post-migration validation and cleanup behavior (default):
+#    - verify SSH login to the newly migrated VM first (using vCenter guest IP)
+#    - if vCenter guest IP is initially empty, keep polling until available; do not skip login validation
+#    - never report run completion before destination login validation is recorded
+#    - only target the newly migrated VM for cleanup, never the source VM
+#    - resolve and compare source/destination VM IDs; abort cleanup if IDs match
+#    - prompt user for confirmation before power-off + delete of migrated VM
+#    - prompt user even if they did not explicitly ask for deletion in same request
+#    - never delete destination VM without explicit user confirmation in that run
+#    - archive the completed MigrateOps operation after migration reaches terminal state
+#    - mandatory: run global offline-host cleanup at end of successful runbook
+#      even if source host is offline (remove all offline CMC host records)
+#    - if source/helper entries are still connected in CDC, disconnect first
+#      (for example uninstall CMC on source/helper or power off/delete helper VM),
+#      then rerun offline-host cleanup until source/helper entries are removed
+#    - if CDC still shows source/helper as connected but last_checkin is stale after
+#      source/helper are already powered off/deleted, wait for heartbeat timeout and
+#      rerun offline-host cleanup in a loop until those entries are removed
+#    - verify source host + helper host stale/offline duplicates from this run are removed
+#    - verify helper CMC host entries from the run are removed
+#      (e.g. migrateops-<operation-id>-<source-system-name>)
+#    - if helper entry remains, ensure helper VM is absent/powered off and rerun offline cleanup
+#    - mandatory: remove the source VM from the current request from CDC host list during cleanup
+#      (do not reuse source VM names from prior runs)
+#    - mandatory post-run reporting: always include a read-only status listing for
+#      source VM, destination VM, access node, and helper VM across both CDC and vCenter
+#      with explicit present/cleaned-up state
+#    - do not report run completion until cleanup verification is done and destination VM
+#      deletion is either completed or explicitly skipped by user decision
+#    - default autonomous behavior for every run:
+#      * always perform login validation + archive + offline-host cleanup automatically
+#      * always prompt user before deleting destination VM and record explicit keep/delete decision
+#
+operations:
+  - recipe: "MIGRATEOPS_VMWARE_COMPUTE"
+    config:
+      migrateops_vmware_compute:
+        access_node:
+          system_name: "atvm-linux-h2h"
+        compute:
+          datastore: "AutomatedTest-VMBootImgComputeMigration-Gold"
+          host: "192.168.1.165"
+          datacenter: "CDSHQ-Eng"
+          vm_name: "atvm-codextest-vm-migrated"
+        migration:
+          qos_level: "RELENTLESS"
+          auto_resync_interval: "600s"
+        cmchelper:
+          network: "VM Network"
+          ip_config:
+            use_static_ip: true
+            address: "192.168.3.195/22"
+            dns_servers:
+              - "8.8.8.8"
+            gateway: "192.168.0.1"
+          content_library: "vc-cmchelper"
+          template_name: "vc-cmchelper-vm"
+          install_via_access_node: true
+        network:
+          adapters:
+          - network: "VM Network"
+            # Must be discovered from source host via SSH before create.
+            source_nic: "REPLACE_WITH_SOURCE_NIC"
+            transfer_ip: true
+            transfer_mac: false
+            adapter_type: "VMXNET3"
+        keep_source_powered_on: false
+      system_name: "atvm-codextest-vm"
+      integration_name: "vCenter201"
+    name: "atvm-codextest-vm"
+    notes: ""