Anyway, assuming that works, the system has an intial snapshot and the kernel is preserved (hopefully), so I can roll it back in the future, including the kernel, while retaining logs and user data in /home.
Now let’s continue configuring the system.
# Repo config
sudo sed -i 's/installonly_limit=3/installonly_limit=10/' /etc/dnf/dnf.conf
echo "deltarpm=1" | sudo tee -a /etc/dnf/dnf.conf
echo "repo_gpgcheck=1" | sudo tee -a /etc/dnf/dnf.conf
sudo dnf -y update
sudo dnf - install dnf-automatic
sudo sed -i 's/apply_updates = no/apply_updates = yes/' /etc/dnf/automatic.conf
sudo sed -i 's/upgrade_type = default/upgrade_type = security/' /etc/dnf/automatic.conf
sudo systemctl enable dnf-automatic.timer
sudo systemctl start dnf-automatic.timer
# SMART config
sudo dnf -y install smartmontools
read -a SMART_DRIVES -d $"\n" <<< "$(smartctl --scan | awk '{ print $1 }' | grep -o "/[a-z]*$")"
echo "DEVICESCAN" | sudo tee -a /etc/smartmontools/smartd.conf
for DRIVE in "${SMART_DRIVES[@]}"; do ls -ld /dev/disk/by-id/* | grep -m 1 "${DRIVE}" | awk '{ print $9" -a -o on -S on -n standby,q -s (S/../.././01|L/../../6/03) -W 4,35,40" }' | sudo tee -a /etc/smartmontools/smartd.conf; done
unset SMART_DRIVES
unset DRIVE
sudo systemctl start smartd
sudo systemctl enable smartd
# MD config
printf '#!/usr/bin/env bash\n\nfor MD in /sys/block/md*/md/sync_action; do echo "check" > "${MD}"; done' | sudo tee /etc/cron.weekly/md_scrub.sh
sudo chmod +x /etc/cron.weekly/md_scrub.sh