Commit Graph

Select branches

Hide Pull Requests

master

Mono Color

• 36ba36fd21 feat(bootstrap): accept extra_addresses on network interfaces master sandwich 2026-09-29 09:20:39 +02:00
• 5a43c9a29e feat(bootstrap): install xz-utils in the debian and ubuntu base set sandwich 2026-09-21 14:59:50 +02:00
• 9cc0c704a7 fix(global_defaults): read dict2items key and key enrichment on os sandwich 2026-08-10 04:43:44 +02:00
• 96220d424e fix(partitioning): resolve vmware disks by scsi target instead of the sdX letter sandwich 2026-09-15 20:01:40 +02:00
• b927099087 fix(configuration): disable selinux with selinux=0 on el9 when the feature is off sandwich 2026-08-31 13:45:06 +02:00
• 34ba56cf51 fix(configuration): disable the preset-enabled firewall daemon when the feature is off sandwich 2026-08-31 13:40:41 +02:00
• 58c194d133 fix(system_check): retry transient vcenter api errors in the preflight lookups sandwich 2026-08-31 13:11:16 +02:00
• 04dc1baa99 fix(global_defaults): normalize disks when install_drive is supplied externally sandwich 2026-08-24 18:38:48 +02:00
• bf85af462c fix(configuration): put new EFI boot entry first and install removable fallback sandwich 2026-07-31 20:33:54 +02:00
• be8eabaebc fix(bootstrap): map Intel firmware to linux-firmware-intel so iwlwifi loads sandwich 2026-07-31 20:33:54 +02:00
• 9fbdcfe4e0 style(cleanup): drop redundant comments from the power-off tasks sandwich 2026-07-15 00:09:44 +02:00
• 26713dccad fix(cleanup): wait for the guest shutdown before forcing the VM off sandwich 2026-07-15 00:05:38 +02:00
• 05a9c15f8f docs(content): correct the family default to rhel=dvd, not EL=dvd sandwich 2026-07-14 21:14:41 +02:00
• b23a895bd9 fix(cleanup): force-stop the vmware VM before booting the installed OS sandwich 2026-07-14 06:48:25 +02:00
• ce7e4c85ac feat(system_check): preflight boot media and datastore placement sandwich 2026-07-14 01:48:26 +02:00
• 408fc78920 fix(configuration): grant the platform sudo group only when sudo is set sandwich 2026-07-14 01:48:26 +02:00
• 80983a05c2 fix(configuration): deploy sudoers rules for bool-or-string sudo values sandwich 2026-07-14 01:48:26 +02:00
• 78403381f7 fix(configuration): allow guest-exec RPCs for EL golden cloning sandwich 2026-05-29 22:43:14 +02:00
• f43e9e55c9 fix(cleanup): force-stop then start the proxmox VM after install sandwich 2026-05-29 22:40:02 +02:00
• 8dd0ee0fbd fix(environment): pick the largest cdrom as the RHEL install DVD sandwich 2026-05-28 17:52:44 +02:00
• ffc54d25b1 fix(satellite): drop auto-attach (mutually exclusive with activation key) sandwich 2026-05-26 01:08:09 +02:00
• b2e3a7ed41 fix(virtualization): create vmware target folder before vm deploy sandwich 2026-06-04 18:17:50 +02:00
• dbd5ba55bd feat: accept proxmox API-token auth alongside password sandwich 2026-05-31 12:40:31 +02:00
• 4acb8ccb39 fix(encryption): add tpm2-tss dracut module explicitly for TPM2 LUKS sandwich 2026-05-31 12:39:24 +02:00
• 609c1e2ece fix(configuration): enable per-family time-sync and skip sudo-rs lecture sandwich 2026-05-31 12:30:26 +02:00
• f534b9161f feat(configuration): multi-backend networking, bind by match not MAC sandwich 2026-05-31 12:25:53 +02:00
• 3d7772823f fix: EL10 PAM and crypto readiness via authselect profile and DEFAULT policy sandwich 2026-05-28 17:30:57 +02:00
• a64553b0a0 fix(bootstrap): keep package cache off the 2 GiB CIS /var during install sandwich 2026-05-28 17:26:25 +02:00
• 3b68a65ab7 refactor(global_defaults): single source of truth for family-default resolution sandwich 2026-05-28 17:25:23 +02:00
• 45e7c214bd refactor(configuration): consolidate firewall into one phase-aware path sandwich 2026-05-27 05:28:00 +02:00
• f66a71f27a feat: uniform system.content source schema across installers and repositories sandwich 2026-05-27 05:15:32 +02:00
• 8ebed3aa0f feat: golden-image build support (cloud-init on EL, selinux relabel, SSH wait) sandwich 2026-05-27 05:05:55 +02:00
• 197e9815e3 feat(cis): add selectable profile and per-rule hardening toggles sandwich 2026-05-25 04:37:33 +02:00
• f7674722bc feat(hardware): auto-detect audio, bluetooth, camera with declarative override sandwich 2026-05-25 04:36:21 +02:00
• afebd0a7fe feat(bootstrap): per-os desktop apps, KDE plasma-login-manager and DM resolution sandwich 2026-05-25 04:30:53 +02:00
• 0e7c64b27e fix(environment): co-upgrade soname closure when installing installer tools sandwich 2026-05-25 03:54:12 +02:00
• 98d8a07a70 fix(bootstrap): deploy all non-EOL core distros (keyrings, repos, versions) sandwich 2026-05-25 03:52:44 +02:00
• 48ad1b9c9d docs: refresh bootstrap examples and README sandwich 2026-05-30 18:05:14 +02:00
• 2c4bf6f099 fix: encryption, partitioning, cis and virtualization hardening sandwich 2026-05-30 18:05:14 +02:00
• 0f405c387c fix(users): accept plaintext or pre-hashed passwords uniformly sandwich 2026-05-30 18:05:05 +02:00
• f13616a809 feat: hardware/firmware/gpu/peripherals detection and packages sandwich 2026-05-30 18:05:05 +02:00
• be1dfc9528 feat: complete wayland desktop deployment (gnome/kde/sway/hyprland) sandwich 2026-05-30 18:05:05 +02:00
• 1a622530cd refactor: trim bootstrap OS support to core three distro families sandwich 2026-05-30 18:04:00 +02:00
• 329533b08b docs(bootstrap): fix users dict format in examples, sync schema defaults, document secure_boot/rhel_repo sandwich 2026-05-02 21:42:09 +02:00
• 512f4a3a5c refactor(global_defaults): drop orphan luks.urandom/verify and aur feature, bump fedora to 45 sandwich 2026-05-02 19:51:18 +02:00
• fd6ceb60cd fix(lint): convert sshd restart to handler, add pipefail to btrfs subvol set sandwich 2026-05-02 18:23:42 +02:00
• ce8640af9b fix(configuration): tolerate missing units, gate Secure Boot to supported OSes, fix clevis install per family sandwich 2026-04-30 20:14:33 +02:00
• 61d21fbdeb docs(bootstrap): document firmware/gpu/peripherals/hardware features sandwich 2026-04-29 22:51:09 +02:00
• aa4b94fee2 feat(bootstrap): install vendor-matched hardware packages sandwich 2026-04-29 21:23:55 +02:00
• a523c843e4 feat(environment): detect cpu/gpu/wireless/fingerprint hardware sandwich 2026-04-29 19:47:42 +02:00
• a32e3308fc feat(global_defaults): firmware/gpu/peripherals/hardware schema sandwich 2026-04-29 18:34:18 +02:00
• 310613072d fix(configuration): guard user keys access to avoid dict.keys() method collision sandwich 2026-04-16 15:26:34 +02:00
• ed483d401a feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation sandwich 2026-04-02 07:22:53 +02:00
• 43e6867a8c feat(virtualization): enable TPM2 emulation for Secure Boot VMs sandwich 2026-04-02 04:37:28 +02:00
• 5b66df7e7b feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled sandwich 2026-04-02 04:37:03 +02:00
• aef1375392 feat(configuration): add Secure Boot tasks for shim and sbctl sandwich 2026-04-02 04:36:24 +02:00
• 1d3a0817cb feat(configuration): override EFI loader to shim when Secure Boot enabled sandwich 2026-04-02 04:34:47 +02:00
• c2dcbe418e feat(bootstrap): add Secure Boot conditional packages for Debian, Ubuntu, and Arch sandwich 2026-04-02 04:34:16 +02:00
• 224ce47e26 feat(global_defaults): add secure_boot feature toggle with normalization sandwich 2026-04-02 04:33:07 +02:00
• 5c727797b9 docs(bootstrap): document desktop, initramfs, and FDE features with SSH keepalive config sandwich 2026-04-01 15:07:58 +02:00
• c2269d7443 feat(configuration): generic FDE with systemd-cryptenroll, clevis fallback, and configurable initramfs sandwich 2026-04-01 15:07:58 +02:00
• de75466d89 fix(configuration): RedHat EFI grub wrapper with btrfs subvol prefix and boot order sandwich 2026-04-01 15:07:58 +02:00
• a498b879a4 fix(partitioning): set btrfs default subvolume and restrict @pkg to Arch sandwich 2026-04-01 15:07:58 +02:00
• 8664a26e89 fix(bootstrap): resolve interface-only network, sshd penalties, dnf scriptlets, and EFI cleanup sandwich 2026-04-01 15:07:58 +02:00
• 2c2f7161e9 feat(bootstrap): add desktop environment support with configurable DE, DM, and display target sandwich 2026-04-01 15:07:58 +02:00
• 1d4b335414 fix(configuration): use /boot/grub2/grub.cfg for RedHat EFI grub config sandwich 2026-03-25 15:40:19 +01:00
• a6136520d5 feat(packages): add needrestart to Debian and Ubuntu package lists sandwich 2026-03-20 18:06:14 +01:00
• dd819ec8b5 feat(bootstrap): add full package upgrade step for Debian and Ubuntu sandwich 2026-03-20 18:05:04 +01:00
• fdd9e60970 fix(vim): use vimscript comment syntax for blockinfile markers in vimrc sandwich 2026-03-20 17:58:11 +01:00
• bb1e42b0e3 fix(sudo): use explicit string check instead of bool conditional for sudo field sandwich 2026-03-20 17:28:43 +01:00
• 9e6d7b75be fix(connection): set ansible_port explicitly at every connection transition sandwich 2026-03-20 16:52:15 +01:00
• 4e381435d1 fix(vmware): use primary ansible_* vars for vmware_tools connection plugin precedence sandwich 2026-03-20 16:17:41 +01:00
• e5f9bd8ad3 fix(vmware): use empty password for vmware_tools during live ISO bootstrap sandwich 2026-03-20 15:51:35 +01:00
• 4f4ce8cd71 fix(users): update cloud-init template and input validation for dict users sandwich 2026-03-20 15:10:31 +01:00
• 8c0e7e6dd3 refactor(prompts): remove vars_prompt, require users defined in inventory sandwich 2026-03-20 15:06:32 +01:00
• b542d30900 fix(prompts): add default values to vars_prompt to skip in non-interactive mode sandwich 2026-03-20 15:03:35 +01:00
• b7eb9222b0 refactor(users): change system.users from list to dict keyed by username sandwich 2026-03-20 14:33:13 +01:00
• 505b087ec5 fix(configuration): make root password, user keys, and sudo all optional sandwich 2026-03-20 02:03:48 +01:00
• 37b94172af fix(cloud-init): handle missing keys and make sudo conditional sandwich 2026-03-20 02:01:35 +01:00
• 1282ef0a76 fix(cleanup): remove ansible_become override that blocks swapoff/umount sandwich 2026-03-20 01:13:20 +01:00
• 6bfc5f6eb5 feat(global_defaults): add system.features.aur schema for validation passthrough sandwich 2026-03-20 01:13:20 +01:00
• af06eb10ae refactor(virtualization): extract shared Xen disk definitions sandwich 2026-03-12 12:27:18 +01:00
• aad8bb3bbd refactor: remove unnecessary changed_when from set_fact tasks sandwich 2026-03-12 12:25:45 +01:00
• ca76f4445e refactor(partitioning): remove redundant blockdev --rereadpt calls sandwich 2026-03-12 12:25:15 +01:00
• 0be7bf4aba refactor(partitioning): remove unused register variables sandwich 2026-03-12 12:24:59 +01:00
• 20d7dcbc5f chore: suppress args[module] false positives from variable-based module_defaults sandwich 2026-03-12 12:09:54 +01:00
• c1266d0daa fix(cleanup): add no_log to Proxmox VM restart task sandwich 2026-03-12 12:09:53 +01:00
• f047be119d fix(virtualization): add missing changed_when to Xen VM stop task sandwich 2026-03-12 12:09:51 +01:00
• a76573ff21 fix(configuration): replace fail+ignore_errors with debug for TPM2 fallback warning sandwich 2026-03-12 12:09:51 +01:00
• 81d26eb715 refactor(configuration): split encryption.yml into crypttab, dracut, grub, and initramfs subtasks sandwich 2026-03-12 09:18:17 +01:00
• 41691fcf0a feat(bootstrap): add rescue block with VM cleanup on failure sandwich 2026-03-12 07:43:51 +01:00
• 601f8a1ef9 feat(environment): VMware network config, DNS resolvers, and SSH switchover sandwich 2026-03-12 07:43:46 +01:00
• 49d362c860 fix(global_defaults): populate flat network fields from interfaces in pre-computed path sandwich 2026-03-12 07:43:39 +01:00
• f9656cfbf5 feat(vmware): add VMware hypervisor support (node field, connection vars, validation) sandwich 2026-03-12 07:43:34 +01:00
• c99daa3dbc fix(bootstrap): exclude tldr from Ubuntu rolling extra packages sandwich 2026-02-22 20:40:46 +01:00
• d35976635c fix(global_defaults): use archive.ubuntu.com instead of mirror redirector sandwich 2026-02-22 16:26:35 +01:00
• b13f89a250 fix(global_defaults): apply mirror default in pre-computed system_cfg path sandwich 2026-02-22 14:20:12 +01:00
• b3b634f915 feat(configuration): add Debian/Ubuntu repository and apt configuration sandwich 2026-02-22 10:47:47 +01:00
• b8dd400aea feat(bootstrap): use configurable mirror and write proper sources.list sandwich 2026-02-22 10:47:43 +01:00
• f38e0a628f feat(global_defaults): add system.mirror to schema and normalization sandwich 2026-02-22 10:47:40 +01:00