Commit Graph

Select branches

Hide Pull Requests

master

Mono Color

• 0ce2590568 fix(validation): accept an empty string as the unset value of an int master sandwich 2026-10-05 19:25:02 +02:00
• e52696a509 feat(validation): name a keyed collection as such when a list is given sandwich 2026-10-05 18:57:22 +02:00
• 8f1c1a775a fix(validation): say no keys are accepted when a dict declares none sandwich 2026-10-05 18:55:22 +02:00
• 881c20e4da feat(validation): read a raw option with options as a bool-or-dict toggle sandwich 2026-10-05 18:52:59 +02:00
• b6620260d5 fix(validation): refuse a specs argument that is not a list sandwich 2026-10-05 18:50:09 +02:00
• 7129ceb515 feat(validation): treat any <placeholder> sub-option as a keyed collection sandwich 2026-10-05 18:21:02 +02:00
• fec3fbfa8e fix(global_defaults): type id, vlan, disk size and disk bus as the contract does sandwich 2026-10-05 18:17:09 +02:00
• 27d0edf3f7 feat(global_defaults): declare every system key and installer variable the repos read sandwich 2026-10-05 18:15:34 +02:00
• d0916e5d2b feat(validation): check the contents of a raw option that holds a dict or list sandwich 2026-10-05 18:12:41 +02:00
• 75ea3f10e2 feat(validation): expand glob patterns in the spec list sandwich 2026-10-05 18:10:23 +02:00
• 73136b7ebb feat(validation): refuse a variable declared by two input specs sandwich 2026-10-05 18:08:55 +02:00
• 7253f6af96 docs(readme): document every system.users attribute and per-disk storage sandwich 2026-10-05 18:05:05 +02:00
• 2d1a875577 feat(global_defaults): validate user input against one argument spec on both paths sandwich 2026-10-05 18:05:05 +02:00
• f0b580cd3d feat(validation): add a strict validate_inputs action for user input sandwich 2026-10-05 18:05:05 +02:00
• 8d4bc2a207 test(hardware): expect linux-firmware-intel for intel firmware sandwich 2026-10-05 16:54:28 +02:00
• 96d2970dc3 fix(virtualization): pass a pre-hashed user password through cloud-init unchanged sandwich 2026-10-05 16:54:28 +02:00
• 74caca915e fix(global_defaults): validate system.users as the documented dict on both paths sandwich 2026-10-05 16:54:28 +02:00
• 9aad42a4c2 refactor(global_defaults): derive the primary user once for every consumer sandwich 2026-10-05 16:54:28 +02:00
• ef8d50e6be chore: ignore the local ansible lint cache sandwich 2026-10-05 16:54:28 +02:00
• 36ba36fd21 feat(bootstrap): accept extra_addresses on network interfaces sandwich 2026-09-29 09:20:39 +02:00
• 5a43c9a29e feat(bootstrap): install xz-utils in the debian and ubuntu base set sandwich 2026-09-21 14:59:50 +02:00
• 9cc0c704a7 fix(global_defaults): read dict2items key and key enrichment on os sandwich 2026-08-10 04:43:44 +02:00
• 96220d424e fix(partitioning): resolve vmware disks by scsi target instead of the sdX letter sandwich 2026-09-15 20:01:40 +02:00
• b927099087 fix(configuration): disable selinux with selinux=0 on el9 when the feature is off sandwich 2026-08-31 13:45:06 +02:00
• 34ba56cf51 fix(configuration): disable the preset-enabled firewall daemon when the feature is off sandwich 2026-08-31 13:40:41 +02:00
• 58c194d133 fix(system_check): retry transient vcenter api errors in the preflight lookups sandwich 2026-08-31 13:11:16 +02:00
• 04dc1baa99 fix(global_defaults): normalize disks when install_drive is supplied externally sandwich 2026-08-24 18:38:48 +02:00
• bf85af462c fix(configuration): put new EFI boot entry first and install removable fallback sandwich 2026-07-31 20:33:54 +02:00
• be8eabaebc fix(bootstrap): map Intel firmware to linux-firmware-intel so iwlwifi loads sandwich 2026-07-31 20:33:54 +02:00
• 9fbdcfe4e0 style(cleanup): drop redundant comments from the power-off tasks sandwich 2026-07-15 00:09:44 +02:00
• 26713dccad fix(cleanup): wait for the guest shutdown before forcing the VM off sandwich 2026-07-15 00:05:38 +02:00
• 05a9c15f8f docs(content): correct the family default to rhel=dvd, not EL=dvd sandwich 2026-07-14 21:14:41 +02:00
• b23a895bd9 fix(cleanup): force-stop the vmware VM before booting the installed OS sandwich 2026-07-14 06:48:25 +02:00
• ce7e4c85ac feat(system_check): preflight boot media and datastore placement sandwich 2026-07-14 01:48:26 +02:00
• 408fc78920 fix(configuration): grant the platform sudo group only when sudo is set sandwich 2026-07-14 01:48:26 +02:00
• 80983a05c2 fix(configuration): deploy sudoers rules for bool-or-string sudo values sandwich 2026-07-14 01:48:26 +02:00
• 78403381f7 fix(configuration): allow guest-exec RPCs for EL golden cloning sandwich 2026-05-29 22:43:14 +02:00
• f43e9e55c9 fix(cleanup): force-stop then start the proxmox VM after install sandwich 2026-05-29 22:40:02 +02:00
• 8dd0ee0fbd fix(environment): pick the largest cdrom as the RHEL install DVD sandwich 2026-05-28 17:52:44 +02:00
• ffc54d25b1 fix(satellite): drop auto-attach (mutually exclusive with activation key) sandwich 2026-05-26 01:08:09 +02:00
• b2e3a7ed41 fix(virtualization): create vmware target folder before vm deploy sandwich 2026-06-04 18:17:50 +02:00
• dbd5ba55bd feat: accept proxmox API-token auth alongside password sandwich 2026-05-31 12:40:31 +02:00
• 4acb8ccb39 fix(encryption): add tpm2-tss dracut module explicitly for TPM2 LUKS sandwich 2026-05-31 12:39:24 +02:00
• 609c1e2ece fix(configuration): enable per-family time-sync and skip sudo-rs lecture sandwich 2026-05-31 12:30:26 +02:00
• f534b9161f feat(configuration): multi-backend networking, bind by match not MAC sandwich 2026-05-31 12:25:53 +02:00
• 3d7772823f fix: EL10 PAM and crypto readiness via authselect profile and DEFAULT policy sandwich 2026-05-28 17:30:57 +02:00
• a64553b0a0 fix(bootstrap): keep package cache off the 2 GiB CIS /var during install sandwich 2026-05-28 17:26:25 +02:00
• 3b68a65ab7 refactor(global_defaults): single source of truth for family-default resolution sandwich 2026-05-28 17:25:23 +02:00
• 45e7c214bd refactor(configuration): consolidate firewall into one phase-aware path sandwich 2026-05-27 05:28:00 +02:00
• f66a71f27a feat: uniform system.content source schema across installers and repositories sandwich 2026-05-27 05:15:32 +02:00
• 8ebed3aa0f feat: golden-image build support (cloud-init on EL, selinux relabel, SSH wait) sandwich 2026-05-27 05:05:55 +02:00
• 197e9815e3 feat(cis): add selectable profile and per-rule hardening toggles sandwich 2026-05-25 04:37:33 +02:00
• f7674722bc feat(hardware): auto-detect audio, bluetooth, camera with declarative override sandwich 2026-05-25 04:36:21 +02:00
• afebd0a7fe feat(bootstrap): per-os desktop apps, KDE plasma-login-manager and DM resolution sandwich 2026-05-25 04:30:53 +02:00
• 0e7c64b27e fix(environment): co-upgrade soname closure when installing installer tools sandwich 2026-05-25 03:54:12 +02:00
• 98d8a07a70 fix(bootstrap): deploy all non-EOL core distros (keyrings, repos, versions) sandwich 2026-05-25 03:52:44 +02:00
• 48ad1b9c9d docs: refresh bootstrap examples and README sandwich 2026-05-30 18:05:14 +02:00
• 2c4bf6f099 fix: encryption, partitioning, cis and virtualization hardening sandwich 2026-05-30 18:05:14 +02:00
• 0f405c387c fix(users): accept plaintext or pre-hashed passwords uniformly sandwich 2026-05-30 18:05:05 +02:00
• f13616a809 feat: hardware/firmware/gpu/peripherals detection and packages sandwich 2026-05-30 18:05:05 +02:00
• be1dfc9528 feat: complete wayland desktop deployment (gnome/kde/sway/hyprland) sandwich 2026-05-30 18:05:05 +02:00
• 1a622530cd refactor: trim bootstrap OS support to core three distro families sandwich 2026-05-30 18:04:00 +02:00
• 329533b08b docs(bootstrap): fix users dict format in examples, sync schema defaults, document secure_boot/rhel_repo sandwich 2026-05-02 21:42:09 +02:00
• 512f4a3a5c refactor(global_defaults): drop orphan luks.urandom/verify and aur feature, bump fedora to 45 sandwich 2026-05-02 19:51:18 +02:00
• fd6ceb60cd fix(lint): convert sshd restart to handler, add pipefail to btrfs subvol set sandwich 2026-05-02 18:23:42 +02:00
• ce8640af9b fix(configuration): tolerate missing units, gate Secure Boot to supported OSes, fix clevis install per family sandwich 2026-04-30 20:14:33 +02:00
• 61d21fbdeb docs(bootstrap): document firmware/gpu/peripherals/hardware features sandwich 2026-04-29 22:51:09 +02:00
• aa4b94fee2 feat(bootstrap): install vendor-matched hardware packages sandwich 2026-04-29 21:23:55 +02:00
• a523c843e4 feat(environment): detect cpu/gpu/wireless/fingerprint hardware sandwich 2026-04-29 19:47:42 +02:00
• a32e3308fc feat(global_defaults): firmware/gpu/peripherals/hardware schema sandwich 2026-04-29 18:34:18 +02:00
• 310613072d fix(configuration): guard user keys access to avoid dict.keys() method collision sandwich 2026-04-16 15:26:34 +02:00
• ed483d401a feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation sandwich 2026-04-02 07:22:53 +02:00
• 43e6867a8c feat(virtualization): enable TPM2 emulation for Secure Boot VMs sandwich 2026-04-02 04:37:28 +02:00
• 5b66df7e7b feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled sandwich 2026-04-02 04:37:03 +02:00
• aef1375392 feat(configuration): add Secure Boot tasks for shim and sbctl sandwich 2026-04-02 04:36:24 +02:00
• 1d3a0817cb feat(configuration): override EFI loader to shim when Secure Boot enabled sandwich 2026-04-02 04:34:47 +02:00
• c2dcbe418e feat(bootstrap): add Secure Boot conditional packages for Debian, Ubuntu, and Arch sandwich 2026-04-02 04:34:16 +02:00
• 224ce47e26 feat(global_defaults): add secure_boot feature toggle with normalization sandwich 2026-04-02 04:33:07 +02:00
• 5c727797b9 docs(bootstrap): document desktop, initramfs, and FDE features with SSH keepalive config sandwich 2026-04-01 15:07:58 +02:00
• c2269d7443 feat(configuration): generic FDE with systemd-cryptenroll, clevis fallback, and configurable initramfs sandwich 2026-04-01 15:07:58 +02:00
• de75466d89 fix(configuration): RedHat EFI grub wrapper with btrfs subvol prefix and boot order sandwich 2026-04-01 15:07:58 +02:00
• a498b879a4 fix(partitioning): set btrfs default subvolume and restrict @pkg to Arch sandwich 2026-04-01 15:07:58 +02:00
• 8664a26e89 fix(bootstrap): resolve interface-only network, sshd penalties, dnf scriptlets, and EFI cleanup sandwich 2026-04-01 15:07:58 +02:00
• 2c2f7161e9 feat(bootstrap): add desktop environment support with configurable DE, DM, and display target sandwich 2026-04-01 15:07:58 +02:00
• 1d4b335414 fix(configuration): use /boot/grub2/grub.cfg for RedHat EFI grub config sandwich 2026-03-25 15:40:19 +01:00
• a6136520d5 feat(packages): add needrestart to Debian and Ubuntu package lists sandwich 2026-03-20 18:06:14 +01:00
• dd819ec8b5 feat(bootstrap): add full package upgrade step for Debian and Ubuntu sandwich 2026-03-20 18:05:04 +01:00
• fdd9e60970 fix(vim): use vimscript comment syntax for blockinfile markers in vimrc sandwich 2026-03-20 17:58:11 +01:00
• bb1e42b0e3 fix(sudo): use explicit string check instead of bool conditional for sudo field sandwich 2026-03-20 17:28:43 +01:00
• 9e6d7b75be fix(connection): set ansible_port explicitly at every connection transition sandwich 2026-03-20 16:52:15 +01:00
• 4e381435d1 fix(vmware): use primary ansible_* vars for vmware_tools connection plugin precedence sandwich 2026-03-20 16:17:41 +01:00
• e5f9bd8ad3 fix(vmware): use empty password for vmware_tools during live ISO bootstrap sandwich 2026-03-20 15:51:35 +01:00
• 4f4ce8cd71 fix(users): update cloud-init template and input validation for dict users sandwich 2026-03-20 15:10:31 +01:00
• 8c0e7e6dd3 refactor(prompts): remove vars_prompt, require users defined in inventory sandwich 2026-03-20 15:06:32 +01:00
• b542d30900 fix(prompts): add default values to vars_prompt to skip in non-interactive mode sandwich 2026-03-20 15:03:35 +01:00
• b7eb9222b0 refactor(users): change system.users from list to dict keyed by username sandwich 2026-03-20 14:33:13 +01:00
• 505b087ec5 fix(configuration): make root password, user keys, and sudo all optional sandwich 2026-03-20 02:03:48 +01:00
• 37b94172af fix(cloud-init): handle missing keys and make sudo conditional sandwich 2026-03-20 02:01:35 +01:00
• 1282ef0a76 fix(cleanup): remove ansible_become override that blocks swapoff/umount sandwich 2026-03-20 01:13:20 +01:00
• 6bfc5f6eb5 feat(global_defaults): add system.features.aur schema for validation passthrough sandwich 2026-03-20 01:13:20 +01:00