Commit Graph
17 Commits
Author SHA1 Message Date
sandwich ce8640af9b fix(configuration): tolerate missing units, gate Secure Boot to supported OSes, fix clevis install per family 2026-05-30 09:25:34 +02:00
sandwich c2269d7443 feat(configuration): generic FDE with systemd-cryptenroll, clevis fallback, and configurable initramfs 2026-04-01 15:07:58 +02:00
sandwich 0be7bf4aba refactor(partitioning): remove unused register variables 2026-03-12 12:24:59 +01:00
sandwich a76573ff21 fix(configuration): replace fail+ignore_errors with debug for TPM2 fallback warning 2026-03-12 12:12:27 +01:00
sandwich 81d26eb715 refactor(configuration): split encryption.yml into crypttab, dracut, grub, and initramfs subtasks 2026-03-12 09:40:40 +01:00
sandwich 3f2f4055f0 fix(cleanup,config): xen tmp cleanup, tpm2 fallback warning, add code comments 2026-02-22 01:59:01 +01:00
sandwich 4c8021fc2e fix(configuration): add explicit LUKS auto-decrypt fallback state tracking and logging 2026-02-20 22:26:47 +01:00
sandwich 33d46274bd fix(encryption): add warning before silent TPM2-to-keyfile fallback 2026-02-20 21:51:12 +01:00
sandwich bbf83f7050 fix(configuration): disambiguate BLS task names and clean up misc noise 2026-02-20 20:17:05 +01:00
sandwich 7a76f58384 refactor(luks): use system_cfg.luks directly across roles 2026-02-11 19:26:51 +01:00
sandwich 469d89641e refactor(configuration): reduce LUKS runtime temporary facts 2026-02-11 05:37:18 +01:00
sandwich b8c672507f refactor(vars): simplify normalization and remove effective intermediates 2026-02-11 05:37:18 +01:00
sandwich fc05708466 refactor(vars): add system/hypervisor dict inputs 2026-02-11 05:37:18 +01:00
sandwich c62de8bf4a Make chroot command configurable 2026-01-02 18:53:55 +01:00
sandwich 52c67c5a39 Move derived vars into role defaults 2026-01-02 11:25:51 +01:00
sandwich e7c5166128 Normalize user-facing defaults 2025-12-28 16:41:11 +01:00
sandwich 7323781046 LUKS enrollment and RHEL cmdline/BLS 2025-12-26 22:09:08 +01:00