|
|
34ba56cf51
|
fix(configuration): disable the preset-enabled firewall daemon when the feature is off
|
2026-08-31 13:40:41 +02:00 |
|
|
|
58c194d133
|
fix(system_check): retry transient vcenter api errors in the preflight lookups
|
2026-08-31 13:11:16 +02:00 |
|
|
|
04dc1baa99
|
fix(global_defaults): normalize disks when install_drive is supplied externally
|
2026-08-24 18:38:48 +02:00 |
|
|
|
bf85af462c
|
fix(configuration): put new EFI boot entry first and install removable fallback
|
2026-07-31 20:33:54 +02:00 |
|
|
|
be8eabaebc
|
fix(bootstrap): map Intel firmware to linux-firmware-intel so iwlwifi loads
|
2026-07-31 20:33:54 +02:00 |
|
|
|
9fbdcfe4e0
|
style(cleanup): drop redundant comments from the power-off tasks
|
2026-07-15 00:09:44 +02:00 |
|
|
|
26713dccad
|
fix(cleanup): wait for the guest shutdown before forcing the VM off
|
2026-07-15 00:05:38 +02:00 |
|
|
|
05a9c15f8f
|
docs(content): correct the family default to rhel=dvd, not EL=dvd
|
2026-07-14 21:14:41 +02:00 |
|
|
|
b23a895bd9
|
fix(cleanup): force-stop the vmware VM before booting the installed OS
|
2026-07-14 06:48:25 +02:00 |
|
|
|
ce7e4c85ac
|
feat(system_check): preflight boot media and datastore placement
|
2026-07-14 01:48:26 +02:00 |
|
|
|
408fc78920
|
fix(configuration): grant the platform sudo group only when sudo is set
|
2026-07-14 01:48:26 +02:00 |
|
|
|
80983a05c2
|
fix(configuration): deploy sudoers rules for bool-or-string sudo values
|
2026-07-14 01:48:26 +02:00 |
|
|
|
78403381f7
|
fix(configuration): allow guest-exec RPCs for EL golden cloning
|
2026-05-29 22:43:14 +02:00 |
|
|
|
f43e9e55c9
|
fix(cleanup): force-stop then start the proxmox VM after install
|
2026-05-29 22:40:02 +02:00 |
|
|
|
8dd0ee0fbd
|
fix(environment): pick the largest cdrom as the RHEL install DVD
|
2026-05-28 17:52:44 +02:00 |
|
|
|
ffc54d25b1
|
fix(satellite): drop auto-attach (mutually exclusive with activation key)
|
2026-05-26 01:08:09 +02:00 |
|
|
|
b2e3a7ed41
|
fix(virtualization): create vmware target folder before vm deploy
|
2026-06-04 18:17:50 +02:00 |
|
|
|
dbd5ba55bd
|
feat: accept proxmox API-token auth alongside password
|
2026-05-31 12:40:31 +02:00 |
|
|
|
4acb8ccb39
|
fix(encryption): add tpm2-tss dracut module explicitly for TPM2 LUKS
|
2026-05-31 12:39:24 +02:00 |
|
|
|
609c1e2ece
|
fix(configuration): enable per-family time-sync and skip sudo-rs lecture
|
2026-05-31 12:30:26 +02:00 |
|
|
|
f534b9161f
|
feat(configuration): multi-backend networking, bind by match not MAC
|
2026-05-31 12:25:53 +02:00 |
|
|
|
3d7772823f
|
fix: EL10 PAM and crypto readiness via authselect profile and DEFAULT policy
|
2026-05-28 17:30:57 +02:00 |
|
|
|
a64553b0a0
|
fix(bootstrap): keep package cache off the 2 GiB CIS /var during install
|
2026-05-28 17:26:25 +02:00 |
|
|
|
3b68a65ab7
|
refactor(global_defaults): single source of truth for family-default resolution
|
2026-05-28 17:25:23 +02:00 |
|
|
|
45e7c214bd
|
refactor(configuration): consolidate firewall into one phase-aware path
|
2026-05-27 05:28:00 +02:00 |
|
|
|
f66a71f27a
|
feat: uniform system.content source schema across installers and repositories
|
2026-05-27 05:15:32 +02:00 |
|
|
|
8ebed3aa0f
|
feat: golden-image build support (cloud-init on EL, selinux relabel, SSH wait)
|
2026-05-27 05:05:55 +02:00 |
|
|
|
197e9815e3
|
feat(cis): add selectable profile and per-rule hardening toggles
|
2026-05-25 04:37:33 +02:00 |
|
|
|
f7674722bc
|
feat(hardware): auto-detect audio, bluetooth, camera with declarative override
|
2026-05-25 04:36:21 +02:00 |
|
|
|
afebd0a7fe
|
feat(bootstrap): per-os desktop apps, KDE plasma-login-manager and DM resolution
|
2026-05-25 04:30:53 +02:00 |
|
|
|
0e7c64b27e
|
fix(environment): co-upgrade soname closure when installing installer tools
|
2026-05-25 03:54:12 +02:00 |
|
|
|
98d8a07a70
|
fix(bootstrap): deploy all non-EOL core distros (keyrings, repos, versions)
|
2026-05-25 03:52:44 +02:00 |
|
|
|
48ad1b9c9d
|
docs: refresh bootstrap examples and README
|
2026-05-30 18:05:14 +02:00 |
|
|
|
2c4bf6f099
|
fix: encryption, partitioning, cis and virtualization hardening
|
2026-05-30 18:05:14 +02:00 |
|
|
|
0f405c387c
|
fix(users): accept plaintext or pre-hashed passwords uniformly
|
2026-05-30 18:05:05 +02:00 |
|
|
|
f13616a809
|
feat: hardware/firmware/gpu/peripherals detection and packages
|
2026-05-30 18:05:05 +02:00 |
|
|
|
be1dfc9528
|
feat: complete wayland desktop deployment (gnome/kde/sway/hyprland)
|
2026-05-30 18:05:05 +02:00 |
|
|
|
1a622530cd
|
refactor: trim bootstrap OS support to core three distro families
|
2026-05-30 18:04:00 +02:00 |
|
|
|
329533b08b
|
docs(bootstrap): fix users dict format in examples, sync schema defaults, document secure_boot/rhel_repo
|
2026-05-30 09:25:34 +02:00 |
|
|
|
512f4a3a5c
|
refactor(global_defaults): drop orphan luks.urandom/verify and aur feature, bump fedora to 45
|
2026-05-30 09:25:34 +02:00 |
|
|
|
fd6ceb60cd
|
fix(lint): convert sshd restart to handler, add pipefail to btrfs subvol set
|
2026-05-30 09:25:34 +02:00 |
|
|
|
ce8640af9b
|
fix(configuration): tolerate missing units, gate Secure Boot to supported OSes, fix clevis install per family
|
2026-05-30 09:25:34 +02:00 |
|
|
|
61d21fbdeb
|
docs(bootstrap): document firmware/gpu/peripherals/hardware features
|
2026-05-30 09:25:34 +02:00 |
|
|
|
aa4b94fee2
|
feat(bootstrap): install vendor-matched hardware packages
|
2026-05-30 09:25:34 +02:00 |
|
|
|
a523c843e4
|
feat(environment): detect cpu/gpu/wireless/fingerprint hardware
|
2026-05-30 09:25:34 +02:00 |
|
|
|
a32e3308fc
|
feat(global_defaults): firmware/gpu/peripherals/hardware schema
|
2026-05-30 09:25:34 +02:00 |
|
|
|
310613072d
|
fix(configuration): guard user keys access to avoid dict.keys() method collision
|
2026-04-16 15:37:13 +02:00 |
|
|
|
ed483d401a
|
feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation
|
2026-04-16 15:37:13 +02:00 |
|
|
|
43e6867a8c
|
feat(virtualization): enable TPM2 emulation for Secure Boot VMs
|
2026-04-16 15:37:13 +02:00 |
|
|
|
5b66df7e7b
|
feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled
|
2026-04-16 15:37:13 +02:00 |
|
