Editing Wiki.tetrain.com Runbook (section)

== Phase 1 — Target server base setup <code><nowiki>[reconstructed — standard equivalents]</nowiki></code> ==

Run on the fresh Rocky Linux 9 box (<code><nowiki>wiki-new.tetrain.com</nowiki></code>, provided by client with DNS already pointed at it).

<pre>
<nowiki>
hostnamectl set-hostname wiki-new.tetrain.com
dnf update -y
# kernel gets bumped by this update; a reboot is needed later to actually run it (Phase 8 covers
# the reboot that happened, driven by other work — if doing this fresh, reboot here instead)

systemctl enable --now firewalld
firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --reload

# Docker CE (official repo, not the distro's own docker package)
dnf install -y dnf-plugins-core
dnf config-manager --add-repo https://download.docker.com/linux/rhel/docker-ce.repo
dnf install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
systemctl enable --now docker
</nowiki>
</pre>

'''Verify''': <code><nowiki>docker ps</nowiki></code> runs without error; <code><nowiki>firewall-cmd --list-services</nowiki></code> shows <code><nowiki>http https ssh</nowiki></code> (confirmed live state — <code><nowiki>dhcpv6-client</nowiki></code> and <code><nowiki>cockpit</nowiki></code> are also present on the real box, likely Rocky defaults, harmless).

----