 sandwich
|
80983a05c2
|
fix(configuration): deploy sudoers rules for bool-or-string sudo values
|
2026-07-14 01:48:26 +02:00 |
|
|
sandwich
|
78403381f7
|
fix(configuration): allow guest-exec RPCs for EL golden cloning
|
2026-05-29 22:43:14 +02:00 |
|
|
sandwich
|
f43e9e55c9
|
fix(cleanup): force-stop then start the proxmox VM after install
|
2026-05-29 22:40:02 +02:00 |
|
|
sandwich
|
8dd0ee0fbd
|
fix(environment): pick the largest cdrom as the RHEL install DVD
|
2026-05-28 17:52:44 +02:00 |
|
|
sandwich
|
ffc54d25b1
|
fix(satellite): drop auto-attach (mutually exclusive with activation key)
|
2026-05-26 01:08:09 +02:00 |
|
|
sandwich
|
b2e3a7ed41
|
fix(virtualization): create vmware target folder before vm deploy
|
2026-06-04 18:17:50 +02:00 |
|
|
sandwich
|
dbd5ba55bd
|
feat: accept proxmox API-token auth alongside password
|
2026-05-31 12:40:31 +02:00 |
|
|
sandwich
|
4acb8ccb39
|
fix(encryption): add tpm2-tss dracut module explicitly for TPM2 LUKS
|
2026-05-31 12:39:24 +02:00 |
|
|
sandwich
|
609c1e2ece
|
fix(configuration): enable per-family time-sync and skip sudo-rs lecture
|
2026-05-31 12:30:26 +02:00 |
|
|
sandwich
|
f534b9161f
|
feat(configuration): multi-backend networking, bind by match not MAC
|
2026-05-31 12:25:53 +02:00 |
|
|
sandwich
|
3d7772823f
|
fix: EL10 PAM and crypto readiness via authselect profile and DEFAULT policy
|
2026-05-28 17:30:57 +02:00 |
|
|
sandwich
|
a64553b0a0
|
fix(bootstrap): keep package cache off the 2 GiB CIS /var during install
|
2026-05-28 17:26:25 +02:00 |
|
|
sandwich
|
3b68a65ab7
|
refactor(global_defaults): single source of truth for family-default resolution
|
2026-05-28 17:25:23 +02:00 |
|
|
sandwich
|
45e7c214bd
|
refactor(configuration): consolidate firewall into one phase-aware path
|
2026-05-27 05:28:00 +02:00 |
|
|
sandwich
|
f66a71f27a
|
feat: uniform system.content source schema across installers and repositories
|
2026-05-27 05:15:32 +02:00 |
|
|
sandwich
|
8ebed3aa0f
|
feat: golden-image build support (cloud-init on EL, selinux relabel, SSH wait)
|
2026-05-27 05:05:55 +02:00 |
|
|
sandwich
|
197e9815e3
|
feat(cis): add selectable profile and per-rule hardening toggles
|
2026-05-25 04:37:33 +02:00 |
|
|
sandwich
|
f7674722bc
|
feat(hardware): auto-detect audio, bluetooth, camera with declarative override
|
2026-05-25 04:36:21 +02:00 |
|
|
sandwich
|
afebd0a7fe
|
feat(bootstrap): per-os desktop apps, KDE plasma-login-manager and DM resolution
|
2026-05-25 04:30:53 +02:00 |
|
|
sandwich
|
0e7c64b27e
|
fix(environment): co-upgrade soname closure when installing installer tools
|
2026-05-25 03:54:12 +02:00 |
|
|
sandwich
|
98d8a07a70
|
fix(bootstrap): deploy all non-EOL core distros (keyrings, repos, versions)
|
2026-05-25 03:52:44 +02:00 |
|
|
sandwich
|
48ad1b9c9d
|
docs: refresh bootstrap examples and README
|
2026-05-30 18:05:14 +02:00 |
|
|
sandwich
|
2c4bf6f099
|
fix: encryption, partitioning, cis and virtualization hardening
|
2026-05-30 18:05:14 +02:00 |
|
|
sandwich
|
0f405c387c
|
fix(users): accept plaintext or pre-hashed passwords uniformly
|
2026-05-30 18:05:05 +02:00 |
|
|
sandwich
|
f13616a809
|
feat: hardware/firmware/gpu/peripherals detection and packages
|
2026-05-30 18:05:05 +02:00 |
|
|
sandwich
|
be1dfc9528
|
feat: complete wayland desktop deployment (gnome/kde/sway/hyprland)
|
2026-05-30 18:05:05 +02:00 |
|
|
sandwich
|
1a622530cd
|
refactor: trim bootstrap OS support to core three distro families
|
2026-05-30 18:04:00 +02:00 |
|
|
sandwich
|
329533b08b
|
docs(bootstrap): fix users dict format in examples, sync schema defaults, document secure_boot/rhel_repo
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
512f4a3a5c
|
refactor(global_defaults): drop orphan luks.urandom/verify and aur feature, bump fedora to 45
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
fd6ceb60cd
|
fix(lint): convert sshd restart to handler, add pipefail to btrfs subvol set
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
ce8640af9b
|
fix(configuration): tolerate missing units, gate Secure Boot to supported OSes, fix clevis install per family
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
61d21fbdeb
|
docs(bootstrap): document firmware/gpu/peripherals/hardware features
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
aa4b94fee2
|
feat(bootstrap): install vendor-matched hardware packages
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
a523c843e4
|
feat(environment): detect cpu/gpu/wireless/fingerprint hardware
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
a32e3308fc
|
feat(global_defaults): firmware/gpu/peripherals/hardware schema
|
2026-05-30 09:25:34 +02:00 |
|
|
sandwich
|
310613072d
|
fix(configuration): guard user keys access to avoid dict.keys() method collision
|
2026-04-16 15:37:13 +02:00 |
|
|
sandwich
|
ed483d401a
|
feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation
|
2026-04-16 15:37:13 +02:00 |
|
|
sandwich
|
43e6867a8c
|
feat(virtualization): enable TPM2 emulation for Secure Boot VMs
|
2026-04-16 15:37:13 +02:00 |
|
|
sandwich
|
5b66df7e7b
|
feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled
|
2026-04-16 15:37:13 +02:00 |
|
|
sandwich
|
aef1375392
|
feat(configuration): add Secure Boot tasks for shim and sbctl
|
2026-04-16 15:37:13 +02:00 |
|
|
sandwich
|
1d3a0817cb
|
feat(configuration): override EFI loader to shim when Secure Boot enabled
|
2026-04-02 04:34:47 +02:00 |
|
|
sandwich
|
c2dcbe418e
|
feat(bootstrap): add Secure Boot conditional packages for Debian, Ubuntu, and Arch
|
2026-04-02 04:34:16 +02:00 |
|
|
sandwich
|
224ce47e26
|
feat(global_defaults): add secure_boot feature toggle with normalization
|
2026-04-02 04:33:07 +02:00 |
|
|
sandwich
|
5c727797b9
|
docs(bootstrap): document desktop, initramfs, and FDE features with SSH keepalive config
|
2026-04-01 15:07:58 +02:00 |
|
|
sandwich
|
c2269d7443
|
feat(configuration): generic FDE with systemd-cryptenroll, clevis fallback, and configurable initramfs
|
2026-04-01 15:07:58 +02:00 |
|
|
sandwich
|
de75466d89
|
fix(configuration): RedHat EFI grub wrapper with btrfs subvol prefix and boot order
|
2026-04-01 15:07:58 +02:00 |
|
|
sandwich
|
a498b879a4
|
fix(partitioning): set btrfs default subvolume and restrict @pkg to Arch
|
2026-04-01 15:07:58 +02:00 |
|
|
sandwich
|
8664a26e89
|
fix(bootstrap): resolve interface-only network, sshd penalties, dnf scriptlets, and EFI cleanup
|
2026-04-01 15:07:58 +02:00 |
|
|
sandwich
|
2c2f7161e9
|
feat(bootstrap): add desktop environment support with configurable DE, DM, and display target
|
2026-04-01 15:07:58 +02:00 |
|
|
sandwich
|
1d4b335414
|
fix(configuration): use /boot/grub2/grub.cfg for RedHat EFI grub config
|
2026-03-25 16:03:39 +01:00 |
|
|
sandwich
|
a6136520d5
|
feat(packages): add needrestart to Debian and Ubuntu package lists
|
2026-03-20 18:06:14 +01:00 |
|
|
sandwich
|
dd819ec8b5
|
feat(bootstrap): add full package upgrade step for Debian and Ubuntu
|
2026-03-20 18:05:04 +01:00 |
|
|
sandwich
|
fdd9e60970
|
fix(vim): use vimscript comment syntax for blockinfile markers in vimrc
|
2026-03-20 18:00:12 +01:00 |
|
|
sandwich
|
bb1e42b0e3
|
fix(sudo): use explicit string check instead of bool conditional for sudo field
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
9e6d7b75be
|
fix(connection): set ansible_port explicitly at every connection transition
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
4e381435d1
|
fix(vmware): use primary ansible_* vars for vmware_tools connection plugin precedence
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
e5f9bd8ad3
|
fix(vmware): use empty password for vmware_tools during live ISO bootstrap
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
4f4ce8cd71
|
fix(users): update cloud-init template and input validation for dict users
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
8c0e7e6dd3
|
refactor(prompts): remove vars_prompt, require users defined in inventory
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
b542d30900
|
fix(prompts): add default values to vars_prompt to skip in non-interactive mode
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
b7eb9222b0
|
refactor(users): change system.users from list to dict keyed by username
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
505b087ec5
|
fix(configuration): make root password, user keys, and sudo all optional
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
37b94172af
|
fix(cloud-init): handle missing keys and make sudo conditional
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
1282ef0a76
|
fix(cleanup): remove ansible_become override that blocks swapoff/umount
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
6bfc5f6eb5
|
feat(global_defaults): add system.features.aur schema for validation passthrough
|
2026-03-20 17:31:49 +01:00 |
|
|
sandwich
|
af06eb10ae
|
refactor(virtualization): extract shared Xen disk definitions
|
2026-03-12 12:27:18 +01:00 |
|
|
sandwich
|
aad8bb3bbd
|
refactor: remove unnecessary changed_when from set_fact tasks
|
2026-03-12 12:25:45 +01:00 |
|
|
sandwich
|
ca76f4445e
|
refactor(partitioning): remove redundant blockdev --rereadpt calls
|
2026-03-12 12:25:15 +01:00 |
|
|
sandwich
|
0be7bf4aba
|
refactor(partitioning): remove unused register variables
|
2026-03-12 12:24:59 +01:00 |
|
|
sandwich
|
20d7dcbc5f
|
chore: suppress args[module] false positives from variable-based module_defaults
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
c1266d0daa
|
fix(cleanup): add no_log to Proxmox VM restart task
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
f047be119d
|
fix(virtualization): add missing changed_when to Xen VM stop task
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
a76573ff21
|
fix(configuration): replace fail+ignore_errors with debug for TPM2 fallback warning
|
2026-03-12 12:12:27 +01:00 |
|
|
sandwich
|
81d26eb715
|
refactor(configuration): split encryption.yml into crypttab, dracut, grub, and initramfs subtasks
|
2026-03-12 09:40:40 +01:00 |
|
|
sandwich
|
41691fcf0a
|
feat(bootstrap): add rescue block with VM cleanup on failure
|
2026-03-12 07:43:51 +01:00 |
|
|
sandwich
|
601f8a1ef9
|
feat(environment): VMware network config, DNS resolvers, and SSH switchover
|
2026-03-12 07:43:46 +01:00 |
|
|
sandwich
|
49d362c860
|
fix(global_defaults): populate flat network fields from interfaces in pre-computed path
|
2026-03-12 07:43:39 +01:00 |
|
|
sandwich
|
f9656cfbf5
|
feat(vmware): add VMware hypervisor support (node field, connection vars, validation)
|
2026-03-12 07:43:34 +01:00 |
|
|
sandwich
|
c99daa3dbc
|
fix(bootstrap): exclude tldr from Ubuntu rolling extra packages
|
2026-02-22 20:40:46 +01:00 |
|
|
sandwich
|
d35976635c
|
fix(global_defaults): use archive.ubuntu.com instead of mirror redirector
|
2026-02-22 16:26:35 +01:00 |
|
|
sandwich
|
b13f89a250
|
fix(global_defaults): apply mirror default in pre-computed system_cfg path
|
2026-02-22 14:20:12 +01:00 |
|
|
sandwich
|
b3b634f915
|
feat(configuration): add Debian/Ubuntu repository and apt configuration
|
2026-02-22 10:47:47 +01:00 |
|
|
sandwich
|
b8dd400aea
|
feat(bootstrap): use configurable mirror and write proper sources.list
|
2026-02-22 10:47:43 +01:00 |
|
|
sandwich
|
f38e0a628f
|
feat(global_defaults): add system.mirror to schema and normalization
|
2026-02-22 10:47:40 +01:00 |
|
|
sandwich
|
3242d5a895
|
chore(bootstrap): update ubuntu non-lts codename to questing (25.10)
|
2026-02-22 03:08:54 +01:00 |
|
|
sandwich
|
7e812dd74c
|
fix(global_defaults): add missing ssh.enabled validation assertion
|
2026-02-22 03:08:31 +01:00 |
|
|
sandwich
|
785eaab9a7
|
fix(global_defaults): correct fedora version upper bound to 43
|
2026-02-22 03:08:23 +01:00 |
|
|
sandwich
|
81ff2b2b87
|
feat(global_defaults): add root.shell to system schema and normalization
|
2026-02-22 03:07:30 +01:00 |
|
|
sandwich
|
2265e346b0
|
refactor(cleanup): remove duplicated libvirt path vars, reuse virtualization defaults
|
2026-02-22 03:07:04 +01:00 |
|
|
sandwich
|
d9ae4ee809
|
refactor(bootstrap,configuration): rename validation-only _normalize.yml files
|
2026-02-22 03:06:34 +01:00 |
|
|
sandwich
|
931d65df04
|
fix(partitioning): add | bool to all system_cfg.features.cis.enabled checks
|
2026-02-22 03:06:13 +01:00 |
|
|
sandwich
|
59670e876a
|
fix(partitioning): add partition separator for NVMe/mmcblk device paths
|
2026-02-22 02:39:36 +01:00 |
|
|
sandwich
|
f7070343b9
|
refactor(configuration): centralize DNS list variables in network dispatch
|
2026-02-22 02:39:32 +01:00 |
|
|
sandwich
|
1cce81366c
|
refactor(configuration): extract shared BLS update task to reduce duplication
|
2026-02-22 02:39:28 +01:00 |
|
|
sandwich
|
f6cb7bf78d
|
fix(bootstrap): add missing --best flag to RHEL dnf commands
|
2026-02-22 02:39:23 +01:00 |
|
|
sandwich
|
2c80c01b1a
|
refactor(global_defaults): consolidate hypervisor auth into shared credential dicts
|
2026-02-22 02:35:04 +01:00 |
|
|
sandwich
|
1b58a20c45
|
refactor(bootstrap,configuration,environment): add defaults/main.yml and extract hardcoded values
|
2026-02-22 02:32:36 +01:00 |
|
|
sandwich
|
6b1686e652
|
refactor(bootstrap,configuration): add per-role _normalize.yml for platform resolution
|
2026-02-22 02:27:46 +01:00 |
|
|
sandwich
|
a460584c5d
|
refactor(configuration): add platform_config dict and replace is_rhel/is_debian with os_family lookups
|
2026-02-22 02:26:54 +01:00 |
|
|
sandwich
|
9c0f00f1ec
|
feat(global_defaults): add os_family_map and os_family fact for platform config lookups
|
2026-02-22 02:23:05 +01:00 |
|