 sandwich
|
e200774c8e
|
fix(validation): add CIDR prefix range check and Ubuntu version validation
|
2026-02-21 00:38:57 +01:00 |
|
|
sandwich
|
6e0c289226
|
refactor(cis): remove redundant AllowUsers/AllowGroups/DenyUsers/DenyGroups from sshd
|
2026-02-21 00:38:52 +01:00 |
|
|
sandwich
|
3be725633e
|
fix(cis): skip squashfs blacklist on Ubuntu to preserve snap functionality
|
2026-02-21 00:38:47 +01:00 |
|
|
sandwich
|
6c02eab159
|
fix(partitioning): correct changed_when on btrfs quota and qgroup commands
|
2026-02-21 00:38:43 +01:00 |
|
|
sandwich
|
99c579bec0
|
fix(cis): add regexp to all lineinfile entries in security_lines.yml for idempotency
|
2026-02-21 00:38:36 +01:00 |
|
|
sandwich
|
be5d2e9f94
|
fix: add no_log to credential-handling pre_tasks and post_tasks in main.yml
|
2026-02-21 00:38:32 +01:00 |
|
|
sandwich
|
e334c82b26
|
fix(virtualization): add no_log and secure temp file handling to libvirt cloud-init
|
2026-02-21 00:38:28 +01:00 |
|
|
sandwich
|
5008d97bc8
|
refactor(cleanup): add configurable verify_boot, boot_timeout, and remove_on_failure defaults
|
2026-02-20 23:02:24 +01:00 |
|
|
sandwich
|
06b8058c1d
|
refactor: move playbook-root templates into their respective roles
|
2026-02-20 23:01:38 +01:00 |
|
|
sandwich
|
aec82e4241
|
refactor: add loop_control labels to dict-based loops across all roles
|
2026-02-20 23:00:53 +01:00 |
|
|
sandwich
|
f36d9b7ca3
|
refactor(partitioning): move btrfs home quota to configurable default
|
2026-02-20 22:55:37 +01:00 |
|
|
sandwich
|
0950db7011
|
fix(environment): detect RHEL ISO device dynamically instead of hardcoded /dev/sr paths
|
2026-02-20 22:54:42 +01:00 |
|
|
sandwich
|
4f3e39398f
|
refactor(global_defaults): split system.yml into composable normalization stages
|
2026-02-20 22:54:05 +01:00 |
|
|
sandwich
|
e3c21168fd
|
refactor(global_defaults): extract OS family lists to single source of truth
|
2026-02-20 22:52:55 +01:00 |
|
|
sandwich
|
643fec1cc6
|
fix(partitioning): add failed_when to all blkid commands to catch empty UUIDs
|
2026-02-20 22:52:18 +01:00 |
|
|
sandwich
|
bbbdcfc9b6
|
fix(partitioning): add default fallbacks for is_rhel, os, os_version in defaults
|
2026-02-20 22:51:37 +01:00 |
|
|
sandwich
|
9347140808
|
fix(virtualization): use hostname variable instead of hardcoded archiso in cloud-user-data
|
2026-02-20 22:51:32 +01:00 |
|
|
sandwich
|
b8af8b3fdd
|
fix(virtualization): avoid no-handler lint finding in xen VM created tracking
|
2026-02-20 22:29:03 +01:00 |
|
|
sandwich
|
94ea082e63
|
fix(partitioning): fix line length violation in home size calculation
|
2026-02-20 22:28:58 +01:00 |
|
|
sandwich
|
3361ee3de8
|
fix(configuration): add pipefail to root password shell pipe
|
2026-02-20 22:28:54 +01:00 |
|
|
sandwich
|
06f6203674
|
fix(bootstrap): use release map for ubuntu version detection
|
2026-02-20 22:27:46 +01:00 |
|
|
sandwich
|
a385c27963
|
chore: add .yamllint matching main project conventions
|
2026-02-20 22:27:31 +01:00 |
|
|
sandwich
|
04340d1a04
|
fix(configuration): use chpasswd for root password and separate shell setting
|
2026-02-20 22:27:17 +01:00 |
|
|
sandwich
|
4c8021fc2e
|
fix(configuration): add explicit LUKS auto-decrypt fallback state tracking and logging
|
2026-02-20 22:26:47 +01:00 |
|
|
sandwich
|
6a6a43ae96
|
refactor(partitioning): externalize hardcoded LVM and disk sizing constants to defaults
|
2026-02-20 22:26:23 +01:00 |
|
|
sandwich
|
2a7340af37
|
fix(virtualization): add xen VM existence check and improve changed_when
|
2026-02-20 22:25:10 +01:00 |
|
|
sandwich
|
e0687269d4
|
fix(cis): add pipefail to sshd version detection and define binary defaults
|
2026-02-20 22:24:14 +01:00 |
|
|
sandwich
|
1634af552e
|
feat(cleanup): gate RHEL ISO disk and fstab handling on rhel_repo.source
|
2026-02-20 21:51:20 +01:00 |
|
|
sandwich
|
0077f05654
|
feat(global_defaults): add system.features.rhel_repo option (iso|satellite|none)
|
2026-02-20 21:51:16 +01:00 |
|
|
sandwich
|
33d46274bd
|
fix(encryption): add warning before silent TPM2-to-keyfile fallback
|
2026-02-20 21:51:12 +01:00 |
|
|
sandwich
|
ed6b604302
|
fix(partitioning): correct wipefs changed_when to report actual disk modification
|
2026-02-20 21:51:09 +01:00 |
|
|
sandwich
|
fc2ddfea8a
|
fix(validation): require password for primary user in system.users[0]
|
2026-02-20 21:51:06 +01:00 |
|
|
sandwich
|
efdbc0c04e
|
fix(system_check): move no_log from block to individual API tasks
|
2026-02-20 21:51:02 +01:00 |
|
|
sandwich
|
5769bd456d
|
fix(cis): make mlkem768x25519-sha256 KexAlgorithm conditional on OpenSSH 9.9+
|
2026-02-20 21:50:58 +01:00 |
|
|
sandwich
|
b7ffcfecd4
|
fix(cis): use is_rhel for journald config path instead of fedora-only check
|
2026-02-20 21:50:55 +01:00 |
|
|
sandwich
|
f18881328c
|
refactor(configuration): add conditional dispatch to task includes
|
2026-02-20 21:16:52 +01:00 |
|
|
sandwich
|
05aeb0676b
|
refactor(cis): move OS-specific binary resolution to vars/main.yml
|
2026-02-20 21:16:48 +01:00 |
|
|
sandwich
|
5b5c94cb8b
|
refactor(configuration): split network.yml into per-init-system dispatch files
|
2026-02-20 21:16:45 +01:00 |
|
|
sandwich
|
4a89911a54
|
refactor(bootstrap): restructure conditional package lists to list concatenation
|
2026-02-20 21:16:40 +01:00 |
|
|
sandwich
|
b61fecfc88
|
refactor(configuration): convert services.yml to list-based loop
|
2026-02-20 21:16:37 +01:00 |
|
|
sandwich
|
b690bddaec
|
refactor(virt): adopt module_defaults for hypervisor credentials
|
2026-02-20 21:16:33 +01:00 |
|
|
sandwich
|
8e92f40b2a
|
refactor(cleanup): restructure dispatch to use hypervisor_type include
|
2026-02-20 21:16:28 +01:00 |
|
|
sandwich
|
c8c9a9c9f5
|
refactor(partitioning): extract VG name to defaults variable
|
2026-02-20 21:16:25 +01:00 |
|
|
sandwich
|
7a666239b6
|
fix(configuration): remove trailing blank line from extras.yml
|
2026-02-20 20:20:33 +01:00 |
|
|
sandwich
|
7181679d7c
|
docs(environment): document RPM GPG policy relaxation
|
2026-02-20 20:19:57 +01:00 |
|
|
sandwich
|
32f22e94bd
|
chore(bootstrap): align ansible.cfg with main project settings
|
2026-02-20 20:19:46 +01:00 |
|
|
sandwich
|
15122b924d
|
feat(system_check): add safety check for physical installs
|
2026-02-20 20:19:37 +01:00 |
|
|
sandwich
|
be51bfe101
|
fix(cleanup): fix vmware CD-ROM omit fragility and add cross-role defaults
|
2026-02-20 20:19:25 +01:00 |
|
|
sandwich
|
83610447e7
|
fix(virtualization): add XML safety attributes and switch xen to virtio
|
2026-02-20 20:18:49 +01:00 |
|
|
sandwich
|
1fc64b9e5d
|
fix(cis): remove deprecated sshd options and update hardening values
|
2026-02-20 20:17:52 +01:00 |
|
|
sandwich
|
bbf83f7050
|
fix(configuration): disambiguate BLS task names and clean up misc noise
|
2026-02-20 20:17:05 +01:00 |
|
|
sandwich
|
2a044dcc1d
|
refactor(configuration): relocate login banner and fix blockinfile markers
|
2026-02-20 20:16:19 +01:00 |
|
|
sandwich
|
c57323ff69
|
fix(configuration): use short hostname and allow per-user shell
|
2026-02-20 20:15:49 +01:00 |
|
|
sandwich
|
b8c3b49419
|
fix(partitioning): mount extra disks by UUID instead of device path
|
2026-02-20 20:15:25 +01:00 |
|
|
sandwich
|
80e7e2cdd6
|
fix(partitioning): correct LVM swap sizing and harden UUID fallbacks
|
2026-02-20 20:15:00 +01:00 |
|
|
sandwich
|
ab9502ea49
|
fix(configuration): add trailing semicolons to NM keyfile DNS fields
|
2026-02-20 20:14:06 +01:00 |
|
|
sandwich
|
b0c7a39749
|
fix(bootstrap): add missing packages and remove duplicates
|
2026-02-20 20:13:53 +01:00 |
|
|
sandwich
|
64b1296fe2
|
fix(bootstrap): add devpts mount and use ephemeral state for RHEL DVD
|
2026-02-20 20:12:59 +01:00 |
|
|
sandwich
|
bbe3ad9a07
|
fix(bootstrap): unify resolv.conf to live environment DNS symlink
|
2026-02-20 20:12:42 +01:00 |
|
|
sandwich
|
e2241bb223
|
fix(global_defaults): add no_log to hypervisor tasks and expand validation
|
2026-02-20 20:11:37 +01:00 |
|
|
sandwich
|
6236978e45
|
fix: configurable OVMF/machine type, routes syntax, package lists, interface names
|
2026-02-20 18:47:12 +01:00 |
|
|
sandwich
|
ebc5db1c59
|
fix(cleanup): keep RHEL ISO ide1 attached as local repo
|
2026-02-20 18:41:40 +01:00 |
|
|
sandwich
|
4d0bf3891a
|
fix: deep analysis audit — no_log, resolv.conf, service conflicts, lint
|
2026-02-20 18:34:59 +01:00 |
|
|
sandwich
|
14ff79cfd0
|
fix(bootstrap): RHEL 9 bootstrap from Arch ISO compatibility
|
2026-02-20 16:58:59 +01:00 |
|
|
sandwich
|
8070cc4196
|
refactor: make bootstrap host target configurable
|
2026-02-20 16:58:59 +01:00 |
|
|
sandwich
|
6e53af5e92
|
fix(ubuntu): add initramfs-tools to debootstrap base packages
|
2026-02-20 16:58:59 +01:00 |
|
|
sandwich
|
6d84a21130
|
fix(bootstrap): use explicit keyring for debootstrap and copy resolv.conf
|
2026-02-20 16:58:59 +01:00 |
|
|
sandwich
|
b3132329cb
|
fix(cloud-init): handle boolean sudo values in user-data template
|
2026-02-20 16:58:59 +01:00 |
|
|
sandwich
|
a85308185f
|
fix: re-gather facts after reboot to detect target OS package manager
|
2026-02-20 16:58:59 +01:00 |
|
|
sandwich
|
d1d579c658
|
fix: resolve Jinja2 .keys ambiguity, fastfetch availability, and python interpreter
|
2026-02-20 16:58:58 +01:00 |
|
|
sandwich
|
e08532ffd0
|
fix(partitioning): create separate /boot for LVM-based filesystems
|
2026-02-20 04:50:32 +01:00 |
|
|
sandwich
|
2a543fffc3
|
fix(bootloader): run efibootmgr on host for universal chroot compatibility
|
2026-02-20 03:36:20 +01:00 |
|
|
sandwich
|
eeb580f180
|
refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters
|
2026-02-13 00:22:59 +01:00 |
|
|
sandwich
|
af5eecfc01
|
fix(configuration): correct fstab regexp escaping, sudoers newline, locales block scope
|
2026-02-13 00:02:54 +01:00 |
|
|
sandwich
|
bc43b3b994
|
refactor(standardize): remove redundant variables, deduplicate conditionals
|
2026-02-12 23:47:41 +01:00 |
|
|
sandwich
|
29d365293c
|
fix(banner): correct visudo validate, clean trailing whitespace
|
2026-02-12 23:33:55 +01:00 |
|
|
sandwich
|
c8806c9577
|
refactor(standardize): remove dead code, fix inconsistencies, update docs
|
2026-02-12 23:21:51 +01:00 |
|
|
sandwich
|
debd1e176f
|
refactor(bootstrap): standardize patterns, extract common logic, remove dead code
|
2026-02-12 23:14:17 +01:00 |
|
|
sandwich
|
8f8ce341ae
|
refactor(users): migrate system.user to system.users[] for multi-user support
|
2026-02-12 22:52:15 +01:00 |
|
|
sandwich
|
66057bc9b2
|
feat(network): make interfaces[] canonical, normalize flat fields as AWX compat
|
2026-02-12 22:17:02 +01:00 |
|
|
sandwich
|
5108e46a4c
|
fix(lint): wrap long lines to satisfy yaml[line-length] rule
|
2026-02-12 21:54:09 +01:00 |
|
|
sandwich
|
67c320fcc2
|
fix(vars): enforce strict list-only DNS and user.key format for IaC compatibility
|
2026-02-12 21:50:55 +01:00 |
|
|
sandwich
|
673a9b6062
|
fix(playbook): reset SSH connection before post-reboot tasks
|
2026-02-12 02:06:58 +01:00 |
|
|
sandwich
|
f8eaa41fc2
|
fix(partitioning): register swapoff result for changed_when handling
|
2026-02-11 23:47:36 +01:00 |
|
|
sandwich
|
ed8da6e4e2
|
fix(luks): complete migration of partitioning_luks_tpm2_device reference
|
2026-02-11 23:28:05 +01:00 |
|
|
sandwich
|
a60e6fd0d3
|
refactor(bootstrap): nest network fields under system.network to match main project schema
|
2026-02-11 23:03:37 +01:00 |
|
|
sandwich
|
45c002c2dd
|
fix(bootstrap): correct changed_when on state-changing commands
|
2026-02-11 21:06:10 +01:00 |
|
|
sandwich
|
7a76f58384
|
refactor(luks): use system_cfg.luks directly across roles
|
2026-02-11 19:26:51 +01:00 |
|
|
sandwich
|
8c0716508e
|
fix: honor libvirt network config, preserve DHCP DNS with search-only NM config, and exact-match Xen VM names
|
2026-02-11 14:00:20 +01:00 |
|
|
sandwich
|
e5d2720bfe
|
docu(readme): recompose README from pre/post consolidation versions
|
2026-02-11 08:25:15 +01:00 |
|
|
sandwich
|
cd34b41862
|
fix(banner): align MOTD star border and default motd to disabled
|
2026-02-11 08:02:27 +01:00 |
|
|
sandwich
|
37130da17b
|
fix(libvirt): restore missing virtualization_mac_address default
|
2026-02-11 08:02:27 +01:00 |
|
|
sandwich
|
4be9e2bfe1
|
refactor(safety): remove redundant live environment detection from system_check
|
2026-02-11 08:02:27 +01:00 |
|
|
sandwich
|
d8fcc6033d
|
refactor(playbook): rename prompt variables with backwards-compatible fallbacks
|
2026-02-11 08:02:27 +01:00 |
|
|
sandwich
|
fc8f43a25a
|
refactor(validation): deduplicate hypervisor combine and collapse schema checks
|
2026-02-11 08:02:27 +01:00 |
|
|
sandwich
|
70475f4082
|
refactor(system): simplify normalization by removing redundant intermediate merges
|
2026-02-11 08:02:27 +01:00 |
|
|
sandwich
|
865d96c18e
|
fix(bootstrap): repair version-specific package availability across distributions
|
2026-02-11 08:02:27 +01:00 |
|
|
sandwich
|
920e7d3f21
|
docu(readme): consolidate final documentation state
|
2026-02-11 05:37:18 +01:00 |
|
|
sandwich
|
9f6fff313b
|
fix(config): enable dictionary merge for scoped overrides
|
2026-02-11 05:37:18 +01:00 |
|
|
sandwich
|
e7323258fd
|
refactor(schema): move filesystem into system dictionary
|
2026-02-11 05:37:18 +01:00 |
|