Commit Graph

12 Commits

Author SHA1 Message Date
b6d06dd96d fix: deep analysis audit — no_log, resolv.conf, service conflicts, lint 2026-02-20 18:34:59 +01:00
cfc261878a fix(bootloader): run efibootmgr on host for universal chroot compatibility
The previous approach ran efibootmgr inside the chroot, which only works
with arch-chroot (auto-mounts efivars) but fails silently with
systemd-nspawn or plain chroot. Move EFI boot entry creation to the host
where efivars is always available.

Also fixes wrong EFI loader path (\efi\EFI\... -> \EFI\...) and uses
the correct vendor label (e.g. "redhat" instead of raw os variable).

For non-RHEL distros, grub-install now uses --no-nvram to avoid
redundant NVRAM writes; the host efibootmgr handles entry creation
for all distros uniformly with idempotent pre-check.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-20 03:36:20 +01:00
eeb580f180 refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters 2026-02-13 00:22:59 +01:00
e7323258fd refactor(schema): move filesystem into system dictionary 2026-02-11 05:37:18 +01:00
fc05708466 refactor(vars): add system/hypervisor dict inputs 2026-02-11 05:37:18 +01:00
c62de8bf4a Make chroot command configurable 2026-01-02 18:53:55 +01:00
e7c5166128 Normalize user-facing defaults 2025-12-28 16:41:11 +01:00
cf179b0d16 Normalize LUKS boot layout and partitioning defaults 2025-12-28 16:00:49 +01:00
5288167825 Restore Debian ESP mount layout 2025-12-28 02:24:33 +01:00
7cf0dabc3c Fix Debian initramfs regeneration 2025-12-28 01:54:14 +01:00
4705db7fe2 Fix Debian EFI mount layout 2025-12-27 23:49:21 +01:00
eba93f90b7 Configuration role refactor and network template 2025-12-26 20:38:42 +01:00