I went in thinking the install was the hard part. It was NOT!
The real learning was everything after: carving the disk into a root volume and a thin pool so VMs get snapshots for free, giving the host two network paths with wireless as the fallback, and building a NAT bridge so guests share the host's connection while a second isolated bridge stays walled off for a security lab.