Commit Graph

444 Commits

Author SHA1 Message Date
329533b08b docs(bootstrap): fix users dict format in examples, sync schema defaults, document secure_boot/rhel_repo 2026-05-30 09:25:34 +02:00
512f4a3a5c refactor(global_defaults): drop orphan luks.urandom/verify and aur feature, bump fedora to 45 2026-05-30 09:25:34 +02:00
fd6ceb60cd fix(lint): convert sshd restart to handler, add pipefail to btrfs subvol set 2026-05-30 09:25:34 +02:00
ce8640af9b fix(configuration): tolerate missing units, gate Secure Boot to supported OSes, fix clevis install per family 2026-05-30 09:25:34 +02:00
61d21fbdeb docs(bootstrap): document firmware/gpu/peripherals/hardware features 2026-05-30 09:25:34 +02:00
aa4b94fee2 feat(bootstrap): install vendor-matched hardware packages 2026-05-30 09:25:34 +02:00
a523c843e4 feat(environment): detect cpu/gpu/wireless/fingerprint hardware 2026-05-30 09:25:34 +02:00
a32e3308fc feat(global_defaults): firmware/gpu/peripherals/hardware schema 2026-05-30 09:25:34 +02:00
310613072d fix(configuration): guard user keys access to avoid dict.keys() method collision 2026-04-16 15:37:13 +02:00
ed483d401a feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation 2026-04-16 15:37:13 +02:00
43e6867a8c feat(virtualization): enable TPM2 emulation for Secure Boot VMs 2026-04-16 15:37:13 +02:00
5b66df7e7b feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled 2026-04-16 15:37:13 +02:00
aef1375392 feat(configuration): add Secure Boot tasks for shim and sbctl 2026-04-16 15:37:13 +02:00
1d3a0817cb feat(configuration): override EFI loader to shim when Secure Boot enabled 2026-04-02 04:34:47 +02:00
c2dcbe418e feat(bootstrap): add Secure Boot conditional packages for Debian, Ubuntu, and Arch 2026-04-02 04:34:16 +02:00
224ce47e26 feat(global_defaults): add secure_boot feature toggle with normalization 2026-04-02 04:33:07 +02:00
5c727797b9 docs(bootstrap): document desktop, initramfs, and FDE features with SSH keepalive config 2026-04-01 15:07:58 +02:00
c2269d7443 feat(configuration): generic FDE with systemd-cryptenroll, clevis fallback, and configurable initramfs 2026-04-01 15:07:58 +02:00
de75466d89 fix(configuration): RedHat EFI grub wrapper with btrfs subvol prefix and boot order 2026-04-01 15:07:58 +02:00
a498b879a4 fix(partitioning): set btrfs default subvolume and restrict @pkg to Arch 2026-04-01 15:07:58 +02:00
8664a26e89 fix(bootstrap): resolve interface-only network, sshd penalties, dnf scriptlets, and EFI cleanup 2026-04-01 15:07:58 +02:00
2c2f7161e9 feat(bootstrap): add desktop environment support with configurable DE, DM, and display target 2026-04-01 15:07:58 +02:00
1d4b335414 fix(configuration): use /boot/grub2/grub.cfg for RedHat EFI grub config 2026-03-25 16:03:39 +01:00
a6136520d5 feat(packages): add needrestart to Debian and Ubuntu package lists 2026-03-20 18:06:14 +01:00
dd819ec8b5 feat(bootstrap): add full package upgrade step for Debian and Ubuntu 2026-03-20 18:05:04 +01:00
fdd9e60970 fix(vim): use vimscript comment syntax for blockinfile markers in vimrc 2026-03-20 18:00:12 +01:00
bb1e42b0e3 fix(sudo): use explicit string check instead of bool conditional for sudo field 2026-03-20 17:31:49 +01:00
9e6d7b75be fix(connection): set ansible_port explicitly at every connection transition 2026-03-20 17:31:49 +01:00
4e381435d1 fix(vmware): use primary ansible_* vars for vmware_tools connection plugin precedence 2026-03-20 17:31:49 +01:00
e5f9bd8ad3 fix(vmware): use empty password for vmware_tools during live ISO bootstrap 2026-03-20 17:31:49 +01:00
4f4ce8cd71 fix(users): update cloud-init template and input validation for dict users 2026-03-20 17:31:49 +01:00
8c0e7e6dd3 refactor(prompts): remove vars_prompt, require users defined in inventory 2026-03-20 17:31:49 +01:00
b542d30900 fix(prompts): add default values to vars_prompt to skip in non-interactive mode 2026-03-20 17:31:49 +01:00
b7eb9222b0 refactor(users): change system.users from list to dict keyed by username 2026-03-20 17:31:49 +01:00
505b087ec5 fix(configuration): make root password, user keys, and sudo all optional 2026-03-20 17:31:49 +01:00
37b94172af fix(cloud-init): handle missing keys and make sudo conditional 2026-03-20 17:31:49 +01:00
1282ef0a76 fix(cleanup): remove ansible_become override that blocks swapoff/umount 2026-03-20 17:31:49 +01:00
6bfc5f6eb5 feat(global_defaults): add system.features.aur schema for validation passthrough 2026-03-20 17:31:49 +01:00
af06eb10ae refactor(virtualization): extract shared Xen disk definitions 2026-03-12 12:27:18 +01:00
aad8bb3bbd refactor: remove unnecessary changed_when from set_fact tasks 2026-03-12 12:25:45 +01:00
ca76f4445e refactor(partitioning): remove redundant blockdev --rereadpt calls 2026-03-12 12:25:15 +01:00
0be7bf4aba refactor(partitioning): remove unused register variables 2026-03-12 12:24:59 +01:00
20d7dcbc5f chore: suppress args[module] false positives from variable-based module_defaults 2026-03-12 12:12:27 +01:00
c1266d0daa fix(cleanup): add no_log to Proxmox VM restart task 2026-03-12 12:12:27 +01:00
f047be119d fix(virtualization): add missing changed_when to Xen VM stop task 2026-03-12 12:12:27 +01:00
a76573ff21 fix(configuration): replace fail+ignore_errors with debug for TPM2 fallback warning 2026-03-12 12:12:27 +01:00
81d26eb715 refactor(configuration): split encryption.yml into crypttab, dracut, grub, and initramfs subtasks 2026-03-12 09:40:40 +01:00
41691fcf0a feat(bootstrap): add rescue block with VM cleanup on failure 2026-03-12 07:43:51 +01:00
601f8a1ef9 feat(environment): VMware network config, DNS resolvers, and SSH switchover 2026-03-12 07:43:46 +01:00
49d362c860 fix(global_defaults): populate flat network fields from interfaces in pre-computed path 2026-03-12 07:43:39 +01:00