Day Zero and Rescue

Day-Zero and Rescue

Cheat sheet only. Full tables: fix-plans.md.

Plan generate (offline, no inspect pass)

guestkit plan generate win.qcow2 -p windows-rdp -o rdp.yaml
guestkit plan generate win.qcow2 -p windows-hostname --hostname NEWNAME
guestkit plan generate win.qcow2 -p windows-winrm
guestkit plan generate win.qcow2 -p windows-domain-leave --workgroup WORKGROUP
guestkit plan generate win.qcow2 -p windows-timezone --timezone UTC
guestkit plan generate win.qcow2 -p windows-dhcp
guestkit plan generate win.qcow2 -p windows-dns --dns 8.8.8.8
guestkit plan generate win.qcow2 -p windows-static-ip \
  --interface-guid '{GUID}' --ip 10.0.0.10 --mask 255.255.255.0

guestkit plan generate disk.qcow2 -p linux-ssh --user ubuntu --key-file ~/.ssh/id_ed25519.pub
guestkit plan generate disk.qcow2 -p linux-hostname --hostname web01
guestkit plan generate disk.qcow2 -p linux-grub --grub-timeout 5

guestkit plan apply rdp.yaml --vm win.qcow2 --yes --skip-backup

Domain-leave writes Tcpip/Winlogon markers and a first-boot RunOnce Add-Computer -WorkGroupName. Deleting the computer account on a DC still needs live AD credentials.

Rescue shortcuts (no plan file)

Op	Notes
enable-ssh	Linux; --force also PermitRootLogin
inject-ssh-key	--user + --key / --key-file
set-hostname	Linux or Windows
reset-password	Linux shadow; Windows AES/RC4 SAM (needs registry-write) or blank + RunOnce
fix-fstab	Linux
check-grub	Diagnose only
fix-grub	Chroot mkconfig; --force BIOS grub-install or UEFI ESP path
enable-rdp / enable-winrm	Windows
set-timezone	Windows

guestkit rescue disk.qcow2 -o enable-ssh
guestkit rescue disk.qcow2 -o fix-grub
guestkit rescue disk.qcow2 -o fix-grub --force
guestkit rescue win.qcow2 -o reset-password --user Administrator --password '…'
guestkit rescue disk.qcow2 -o enable-ssh --export-plan ssh.yaml

Also see

• Offline Packages and Services
• Cutover Cookbook