 sandwich
|
1232484b40
|
refactor(users): change system.users from list to dict keyed by username
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
d03179844a
|
fix(configuration): make root password, user keys, and sudo all optional
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
321fc79467
|
fix(cloud-init): handle missing keys and make sudo conditional
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
17c55c7c5c
|
fix(cleanup): remove ansible_become override that blocks swapoff/umount
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
21a31795aa
|
feat(global_defaults): add system.features.aur schema for validation passthrough
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
4336d864b3
|
refactor(virtualization): extract shared Xen disk definitions
|
2026-03-12 12:27:18 +01:00 |
|
|
sandwich
|
62e50c19ff
|
refactor: remove unnecessary changed_when from set_fact tasks
|
2026-03-12 12:25:45 +01:00 |
|
|
sandwich
|
b7cf1b10a9
|
refactor(partitioning): remove redundant blockdev --rereadpt calls
|
2026-03-12 12:25:15 +01:00 |
|
|
sandwich
|
fc2d924349
|
refactor(partitioning): remove unused register variables
|
2026-03-12 12:24:59 +01:00 |
|
|
sandwich
|
67e3753ece
|
chore: suppress args[module] false positives from variable-based module_defaults
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
da9e287e56
|
fix(cleanup): add no_log to Proxmox VM restart task
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
a8ea4f0962
|
fix(virtualization): add missing changed_when to Xen VM stop task
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
754668b734
|
fix(configuration): replace fail+ignore_errors with debug for TPM2 fallback warning
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
5b3076d9e1
|
refactor(configuration): split encryption.yml into crypttab, dracut, grub, and initramfs subtasks
|
2026-03-12 09:40:40 +01:00 |
|
|
sandwich
|
1f778a7aaa
|
feat(bootstrap): add rescue block with VM cleanup on failure
|
2026-03-12 07:43:51 +01:00 |
|
|
sandwich
|
54ffe5ff91
|
feat(environment): VMware network config, DNS resolvers, and SSH switchover
|
2026-03-12 07:43:46 +01:00 |
|
|
sandwich
|
335534176f
|
fix(global_defaults): populate flat network fields from interfaces in pre-computed path
|
2026-03-12 07:43:39 +01:00 |
|
|
sandwich
|
79227b4391
|
feat(vmware): add VMware hypervisor support (node field, connection vars, validation)
|
2026-03-12 07:43:34 +01:00 |
|
|
sandwich
|
13faf33296
|
fix(bootstrap): exclude tldr from Ubuntu rolling extra packages
|
2026-02-22 20:40:46 +01:00 |
|
|
sandwich
|
de451be77b
|
fix(global_defaults): use archive.ubuntu.com instead of mirror redirector
|
2026-02-22 16:26:35 +01:00 |
|
|
sandwich
|
af9f264cd3
|
fix(global_defaults): apply mirror default in pre-computed system_cfg path
|
2026-02-22 14:20:12 +01:00 |
|
|
sandwich
|
750a085e19
|
feat(configuration): add Debian/Ubuntu repository and apt configuration
|
2026-02-22 10:47:47 +01:00 |
|
|
sandwich
|
f2eb9f2c8e
|
feat(bootstrap): use configurable mirror and write proper sources.list
|
2026-02-22 10:47:43 +01:00 |
|
|
sandwich
|
79988619c6
|
feat(global_defaults): add system.mirror to schema and normalization
|
2026-02-22 10:47:40 +01:00 |
|
|
sandwich
|
fb69c96e4a
|
chore(bootstrap): update ubuntu non-lts codename to questing (25.10)
|
2026-02-22 03:08:54 +01:00 |
|
|
sandwich
|
d586c087f8
|
fix(global_defaults): add missing ssh.enabled validation assertion
|
2026-02-22 03:08:31 +01:00 |
|
|
sandwich
|
9dd71b2559
|
fix(global_defaults): correct fedora version upper bound to 43
|
2026-02-22 03:08:23 +01:00 |
|
|
sandwich
|
35f1702447
|
feat(global_defaults): add root.shell to system schema and normalization
|
2026-02-22 03:07:30 +01:00 |
|
|
sandwich
|
8b18fbdb4c
|
refactor(cleanup): remove duplicated libvirt path vars, reuse virtualization defaults
|
2026-02-22 03:07:04 +01:00 |
|
|
sandwich
|
909a0a6021
|
refactor(bootstrap,configuration): rename validation-only _normalize.yml files
|
2026-02-22 03:06:34 +01:00 |
|
|
sandwich
|
2f3fce42b5
|
fix(partitioning): add | bool to all system_cfg.features.cis.enabled checks
|
2026-02-22 03:06:13 +01:00 |
|
|
sandwich
|
b72816e985
|
fix(partitioning): add partition separator for NVMe/mmcblk device paths
|
2026-02-22 02:39:36 +01:00 |
|
|
sandwich
|
ac0b5caf83
|
refactor(configuration): centralize DNS list variables in network dispatch
|
2026-02-22 02:39:32 +01:00 |
|
|
sandwich
|
3ddc3c72ed
|
refactor(configuration): extract shared BLS update task to reduce duplication
|
2026-02-22 02:39:28 +01:00 |
|
|
sandwich
|
f1af7ccbca
|
fix(bootstrap): add missing --best flag to RHEL dnf commands
|
2026-02-22 02:39:23 +01:00 |
|
|
sandwich
|
51ca969ff4
|
refactor(global_defaults): consolidate hypervisor auth into shared credential dicts
|
2026-02-22 02:35:04 +01:00 |
|
|
sandwich
|
1221249546
|
refactor(bootstrap,configuration,environment): add defaults/main.yml and extract hardcoded values
|
2026-02-22 02:32:36 +01:00 |
|
|
sandwich
|
87fd69b825
|
refactor(bootstrap,configuration): add per-role _normalize.yml for platform resolution
|
2026-02-22 02:27:46 +01:00 |
|
|
sandwich
|
3deb3ea751
|
refactor(configuration): add platform_config dict and replace is_rhel/is_debian with os_family lookups
|
2026-02-22 02:26:54 +01:00 |
|
|
sandwich
|
cc30637f09
|
feat(global_defaults): add os_family_map and os_family fact for platform config lookups
|
2026-02-22 02:23:05 +01:00 |
|
|
sandwich
|
23721aac96
|
fix(virtualization): add vTPM2 result validation before VMware power-on
|
2026-02-22 02:22:37 +01:00 |
|
|
sandwich
|
5a9b346d72
|
feat(global_defaults): add semantic validations for IP, hostname, LUKS method, and interface prefix
|
2026-02-22 02:22:05 +01:00 |
|
|
sandwich
|
75267e5140
|
refactor(global_defaults): extract physical_default_os to configurable default
|
2026-02-22 02:21:34 +01:00 |
|
|
sandwich
|
f0fb68992d
|
fix(global_defaults): normalize system.type 'vm' to 'virtual' for main project compatibility
|
2026-02-22 02:21:22 +01:00 |
|
|
sandwich
|
0e3edb41f7
|
docs(bootstrap): add section comments, role boundary docs, and pipeline overview
|
2026-02-22 01:59:12 +01:00 |
|
|
sandwich
|
2bf0cb901e
|
refactor(global_defaults): data-driven hypervisor validation and shared constants
|
2026-02-22 01:59:09 +01:00 |
|
|
sandwich
|
1216c79619
|
refactor(extras): convert custom.sh from template to static copy
|
2026-02-22 01:59:04 +01:00 |
|
|
sandwich
|
4efd64664d
|
fix(cleanup,config): xen tmp cleanup, tpm2 fallback warning, add code comments
|
2026-02-22 01:59:01 +01:00 |
|
|
sandwich
|
dc5aa5077e
|
fix(partitioning,network): swapon idempotency, DNS search domains, tune2fs changed_when
|
2026-02-22 01:58:56 +01:00 |
|
|
sandwich
|
c65934c290
|
fix(encryption): add no_log to LUKS configuration block
|
2026-02-22 01:58:52 +01:00 |
|
|
sandwich
|
5b8438ac3b
|
fix(network): bind NM connections to detected interface names for multi-NIC
|
2026-02-21 16:51:15 +01:00 |
|
|
sandwich
|
45df803131
|
fix(bootstrap): make dhcp-client conditional for EL < 10 (removed in EL 10)
|
2026-02-21 13:43:41 +01:00 |
|
|
sandwich
|
30f74fa4bd
|
fix(bootstrap): remove --asexplicit from pacstrap to preserve dependency metadata
|
2026-02-21 13:26:59 +01:00 |
|
|
sandwich
|
19372db27e
|
fix(bootstrap): add kernel package to rocky and almalinux extra packages
|
2026-02-21 12:06:09 +01:00 |
|
|
sandwich
|
d55fc5799d
|
fix(bootstrap): detect kernel package name for dnf family reinstall step
|
2026-02-21 11:46:57 +01:00 |
|
|
sandwich
|
98231be0bd
|
fix(bootstrap): ensure chroot DNS resolution before installing extra packages
|
2026-02-21 11:30:28 +01:00 |
|
|
sandwich
|
c46a4a5a0a
|
fix(environment): align repo IDs in rocky and almalinux templates with bootstrap config
|
2026-02-21 11:18:34 +01:00 |
|
|
sandwich
|
b84688f1d6
|
fix(configuration): omit interface-name when not explicitly provided to avoid predictable naming mismatch
|
2026-02-21 08:29:24 +01:00 |
|
|
sandwich
|
b1d2294d63
|
refactor(configuration): rename _uid to configuration_uid for role prefix convention
|
2026-02-21 05:14:33 +01:00 |
|
|
sandwich
|
ac339b54c4
|
fix(configuration): handle boolean sudo values in sudoers deployment
|
2026-02-21 05:14:29 +01:00 |
|
|
sandwich
|
cb46a6989f
|
fix(configuration): use full path for chpasswd in chroot
|
2026-02-21 05:03:36 +01:00 |
|
|
sandwich
|
73ea7a177b
|
fix(global_defaults): enrich pre-computed system_cfg with bootstrap defaults
|
2026-02-21 04:24:23 +01:00 |
|
|
sandwich
|
0f8faf0a22
|
chore(lint): suppress var-naming for user-facing API dicts
|
2026-02-21 02:58:10 +01:00 |
|
|
sandwich
|
b520126253
|
fix(configuration): remove unnecessary changed_when on set_fact tasks
|
2026-02-21 02:56:58 +01:00 |
|
|
sandwich
|
a4ca4c4ff4
|
refactor(cis): align normalization with main project activation gate pattern
|
2026-02-21 02:56:39 +01:00 |
|
|
sandwich
|
d9efb54bec
|
fix(global_defaults): remove dead /swap and make pacman cache arch-only in reserved mounts
|
2026-02-21 02:56:20 +01:00 |
|
|
sandwich
|
e7a0cc4f62
|
fix(global_defaults): set filesystem default to ext4 instead of empty string
|
2026-02-21 02:56:08 +01:00 |
|
|
sandwich
|
a76f317f8f
|
refactor(bootstrap): restructure package lists to self-contained per-OS dicts with base/extra/conditional
|
2026-02-21 02:39:06 +01:00 |
|
|
sandwich
|
e5bd152fb3
|
refactor(environment): split main.yml into focused sub-task files
|
2026-02-21 02:39:05 +01:00 |
|
|
sandwich
|
6d1c3577df
|
refactor(global_defaults): add idempotency guards to normalization tasks
|
2026-02-21 02:39:03 +01:00 |
|
|
sandwich
|
86f0284acb
|
fix(global_defaults): default interface name to eth0 instead of empty string
|
2026-02-21 02:38:59 +01:00 |
|
|
sandwich
|
221bb4d517
|
docs(cis): add comment explaining squashfs/snap Ubuntu exclusion
|
2026-02-21 02:38:58 +01:00 |
|
|
sandwich
|
e81ba76446
|
chore(bootstrap): pin collection versions in requirements.yml
|
2026-02-21 02:38:57 +01:00 |
|
|
sandwich
|
54bbb9d15c
|
fix(bootstrap): move Jinja to end of task name and rename registers to bootstrap_dnf_*
|
2026-02-21 02:38:27 +01:00 |
|
|
sandwich
|
f94b220020
|
docs: update README with cis dict API, execution pipeline, and cleanup defaults
|
2026-02-21 01:30:36 +01:00 |
|
|
sandwich
|
3fd470d63e
|
fix(validation): align btrfs disk size check with new 2GB swap minimum
|
2026-02-21 01:28:32 +01:00 |
|
|
sandwich
|
a3cd507b2a
|
refactor(bootstrap): unify rocky, almalinux, and fedora into shared _dnf_family.yml
|
2026-02-21 01:27:33 +01:00 |
|
|
sandwich
|
f74ec325ea
|
refactor(cis): extract hardcoded values to cis_defaults and add _normalize.yml
|
2026-02-21 01:26:31 +01:00 |
|
|
sandwich
|
bef15af69f
|
refactor(cleanup): prioritize source-match over target-match in libvirt media removal
|
2026-02-21 01:22:44 +01:00 |
|
|
sandwich
|
7970d933e8
|
docs(cis): explain Fedora exclusion from crypto-policy configuration
|
2026-02-21 01:22:41 +01:00 |
|
|
sandwich
|
a123a32feb
|
fix(bootstrap): replace brittle sed with ansible.builtin.replace for ubuntu universe repo
|
2026-02-21 01:22:37 +01:00 |
|
|
sandwich
|
54c704de4e
|
refactor(virtualization): simplify cloud-user-data sudo to unconditional NOPASSWD
|
2026-02-21 01:22:34 +01:00 |
|
|
sandwich
|
9308d09d7b
|
fix(bootstrap): remove duplicate lrzsz and gate dbus-daemon on version in almalinux
|
2026-02-21 01:20:34 +01:00 |
|
|
sandwich
|
f367844239
|
fix(virtualization): fix cloud-user-data sudo logic to respect sudo: false
|
2026-02-21 01:20:31 +01:00 |
|
|
sandwich
|
53e4499d2b
|
fix(partitioning): lower swap minimum from 4GB to 2GB for small VMs
|
2026-02-21 01:19:23 +01:00 |
|
|
sandwich
|
eb63a4fa83
|
fix(partitioning): add wipefs before mkfs on extra disk partitions
|
2026-02-21 01:19:19 +01:00 |
|
|
sandwich
|
9e3688ae2b
|
fix(cis): strengthen kernel module blacklist and sysctl hardening
|
2026-02-21 01:18:52 +01:00 |
|
|
sandwich
|
dea01cc8a0
|
refactor(partitioning): split monolithic main.yml into focused task files
|
2026-02-21 00:39:03 +01:00 |
|
|
sandwich
|
92c9702e1d
|
fix(validation): add CIDR prefix range check and Ubuntu version validation
|
2026-02-21 00:38:57 +01:00 |
|
|
sandwich
|
c837a52a24
|
refactor(cis): remove redundant AllowUsers/AllowGroups/DenyUsers/DenyGroups from sshd
|
2026-02-21 00:38:52 +01:00 |
|
|
sandwich
|
fbd57e0603
|
fix(cis): skip squashfs blacklist on Ubuntu to preserve snap functionality
|
2026-02-21 00:38:47 +01:00 |
|
|
sandwich
|
40a9ee9882
|
fix(partitioning): correct changed_when on btrfs quota and qgroup commands
|
2026-02-21 00:38:43 +01:00 |
|
|
sandwich
|
3448e95e5c
|
fix(cis): add regexp to all lineinfile entries in security_lines.yml for idempotency
|
2026-02-21 00:38:36 +01:00 |
|
|
sandwich
|
074831833f
|
fix: add no_log to credential-handling pre_tasks and post_tasks in main.yml
|
2026-02-21 00:38:32 +01:00 |
|
|
sandwich
|
d1a5217e88
|
fix(virtualization): add no_log and secure temp file handling to libvirt cloud-init
|
2026-02-21 00:38:28 +01:00 |
|
|
sandwich
|
07492b5b57
|
refactor(cleanup): add configurable verify_boot, boot_timeout, and remove_on_failure defaults
|
2026-02-20 23:02:24 +01:00 |
|
|
sandwich
|
14913bcd3d
|
refactor: move playbook-root templates into their respective roles
|
2026-02-20 23:01:38 +01:00 |
|
|
sandwich
|
041650c287
|
refactor: add loop_control labels to dict-based loops across all roles
|
2026-02-20 23:00:53 +01:00 |
|
|
sandwich
|
a63ffbc731
|
refactor(partitioning): move btrfs home quota to configurable default
|
2026-02-20 22:55:37 +01:00 |
|
|
sandwich
|
9d2f1cc5bd
|
fix(environment): detect RHEL ISO device dynamically instead of hardcoded /dev/sr paths
|
2026-02-20 22:54:42 +01:00 |
|