|
|
ce79728744
|
feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation
|
2026-04-02 17:03:07 +02:00 |
|
|
|
2055863673
|
feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled
|
2026-04-02 17:02:56 +02:00 |
|
|
|
3623fc292c
|
feat(configuration): generic FDE with systemd-cryptenroll, clevis fallback, and configurable initramfs
|
2026-04-01 15:07:58 +02:00 |
|
|
|
81d26eb715
|
refactor(configuration): split encryption.yml into crypttab, dracut, grub, and initramfs subtasks
|
2026-03-12 09:40:40 +01:00 |
|
|
|
1cce81366c
|
refactor(configuration): extract shared BLS update task to reduce duplication
|
2026-02-22 02:39:28 +01:00 |
|
|
|
a460584c5d
|
refactor(configuration): add platform_config dict and replace is_rhel/is_debian with os_family lookups
|
2026-02-22 02:26:54 +01:00 |
|
|
|
6985235e70
|
fix(encryption): add no_log to LUKS configuration block
|
2026-02-22 01:58:52 +01:00 |
|
|
|
6de88a911a
|
fix(configuration): remove unnecessary changed_when on set_fact tasks
|
2026-02-21 02:56:58 +01:00 |
|
|
|
4c8021fc2e
|
fix(configuration): add explicit LUKS auto-decrypt fallback state tracking and logging
|
2026-02-20 22:26:47 +01:00 |
|
|
|
bbf83f7050
|
fix(configuration): disambiguate BLS task names and clean up misc noise
|
2026-02-20 20:17:05 +01:00 |
|
|
|
4d0bf3891a
|
fix: deep analysis audit — no_log, resolv.conf, service conflicts, lint
|
2026-02-20 18:34:59 +01:00 |
|
|
|
eeb580f180
|
refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters
|
2026-02-13 00:22:59 +01:00 |
|
|
|
ed8da6e4e2
|
fix(luks): complete migration of partitioning_luks_tpm2_device reference
|
2026-02-11 23:28:05 +01:00 |
|
|
|
7a76f58384
|
refactor(luks): use system_cfg.luks directly across roles
|
2026-02-11 19:26:51 +01:00 |
|
|
|
469d89641e
|
refactor(configuration): reduce LUKS runtime temporary facts
|
2026-02-11 05:37:18 +01:00 |
|
|
|
b8c672507f
|
refactor(vars): simplify normalization and remove effective intermediates
|
2026-02-11 05:37:18 +01:00 |
|
|
|
fcc7c6aeb6
|
fix(runtime): migrate roles to nested system fields
|
2026-02-11 05:37:18 +01:00 |
|
|
|
fc05708466
|
refactor(vars): add system/hypervisor dict inputs
|
2026-02-11 05:37:18 +01:00 |
|
|
|
e59f056904
|
Move partitioning LUKS defaults into role
|
2026-01-02 11:23:31 +01:00 |
|
|
|
0bd85319f6
|
Remove defaults for required vars
|
2025-12-28 17:10:00 +01:00 |
|
|
|
e7c5166128
|
Normalize user-facing defaults
|
2025-12-28 16:41:11 +01:00 |
|
|
|
cf179b0d16
|
Normalize LUKS boot layout and partitioning defaults
|
2025-12-28 16:00:49 +01:00 |
|
|
|
7323781046
|
LUKS enrollment and RHEL cmdline/BLS
|
2025-12-26 22:09:08 +01:00 |
|
