sandwich

0 Followers · 0 Following

• Earth
• https://archworks.co
• Joined on 2023-06-12

Repositories

6

Projects Packages Public Activity Starred Repositories

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-21 02:59:44 +01:00

0f8faf0a22 chore(lint): suppress var-naming for user-facing API dicts

b520126253 fix(configuration): remove unnecessary changed_when on set_fact tasks

a4ca4c4ff4 refactor(cis): align normalization with main project activation gate pattern

d9efb54bec fix(global_defaults): remove dead /swap and make pacman cache arch-only in reserved mounts

e7a0cc4f62 fix(global_defaults): set filesystem default to ext4 instead of empty string

Compare 5 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-21 02:39:21 +01:00

a76f317f8f refactor(bootstrap): restructure package lists to self-contained per-OS dicts with base/extra/conditional

e5bd152fb3 refactor(environment): split main.yml into focused sub-task files

6d1c3577df refactor(global_defaults): add idempotency guards to normalization tasks

86f0284acb fix(global_defaults): default interface name to eth0 instead of empty string

221bb4d517 docs(cis): add comment explaining squashfs/snap Ubuntu exclusion

Compare 7 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-21 01:41:25 +01:00

f94b220020 docs: update README with cis dict API, execution pipeline, and cleanup defaults

3fd470d63e fix(validation): align btrfs disk size check with new 2GB swap minimum

a3cd507b2a refactor(bootstrap): unify rocky, almalinux, and fedora into shared _dnf_family.yml

f74ec325ea refactor(cis): extract hardcoded values to cis_defaults and add _normalize.yml

bef15af69f refactor(cleanup): prioritize source-match over target-match in libvirt media removal

Compare 13 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-21 00:45:25 +01:00

dea01cc8a0 refactor(partitioning): split monolithic main.yml into focused task files

92c9702e1d fix(validation): add CIDR prefix range check and Ubuntu version validation

c837a52a24 refactor(cis): remove redundant AllowUsers/AllowGroups/DenyUsers/DenyGroups from sshd

fbd57e0603 fix(cis): skip squashfs blacklist on Ubuntu to preserve snap functionality

40a9ee9882 fix(partitioning): correct changed_when on btrfs quota and qgroup commands

Compare 8 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-20 23:16:01 +01:00

07492b5b57 refactor(cleanup): add configurable verify_boot, boot_timeout, and remove_on_failure defaults

14913bcd3d refactor: move playbook-root templates into their respective roles

041650c287 refactor: add loop_control labels to dict-based loops across all roles

a63ffbc731 refactor(partitioning): move btrfs home quota to configurable default

9d2f1cc5bd fix(environment): detect RHEL ISO device dynamically instead of hardcoded /dev/sr paths

Compare 56 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-20 17:03:39 +01:00

09b3ed44ba fix(bootstrap): RHEL 9 bootstrap from Arch ISO compatibility

603abe63cb refactor: make bootstrap host target configurable

1c0e6533ae fix(ubuntu): add initramfs-tools to debootstrap base packages

00aa614cfd fix(bootstrap): use explicit keyring for debootstrap and copy resolv.conf

4905d10bc0 fix(cloud-init): handle boolean sudo values in user-data template

Compare 7 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-20 04:50:37 +01:00

7b213e7456 fix(partitioning): create separate /boot for LVM-based filesystems

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-20 03:36:40 +01:00

cfc261878a fix(bootloader): run efibootmgr on host for universal chroot compatibility

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-13 00:23:07 +01:00

eeb580f180 refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-13 00:21:13 +01:00

c70b5f4c9c refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-13 00:15:46 +01:00

af5eecfc01 fix(configuration): correct fstab regexp escaping, sudoers newline, locales block scope

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 23:47:55 +01:00

bc43b3b994 refactor(standardize): remove redundant variables, deduplicate conditionals

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 23:34:45 +01:00

29d365293c fix(banner): correct visudo validate, clean trailing whitespace

c8806c9577 refactor(standardize): remove dead code, fix inconsistencies, update docs

debd1e176f refactor(bootstrap): standardize patterns, extract common logic, remove dead code

Compare 3 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 23:22:04 +01:00

2a288fa840 refactor(standardize): remove dead code, fix inconsistencies, update docs

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 23:14:35 +01:00

ac4f689d51 refactor(bootstrap): standardize patterns, extract common logic, remove dead code

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 22:55:39 +01:00

8f8ce341ae refactor(users): migrate system.user to system.users[] for multi-user support

66057bc9b2 feat(network): make interfaces[] canonical, normalize flat fields as AWX compat

5108e46a4c fix(lint): wrap long lines to satisfy yaml[line-length] rule

67c320fcc2 fix(vars): enforce strict list-only DNS and user.key format for IaC compatibility

673a9b6062 fix(playbook): reset SSH connection before post-reboot tasks

Compare 5 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 22:52:50 +01:00

0f54698fc3 refactor(users): migrate system.user to system.users[] for multi-user support

8071a7c56c feat(network): make interfaces[] canonical, normalize flat fields as AWX compat

d7260a8078 fix(lint): wrap long lines to satisfy yaml[line-length] rule

1b9ef51048 fix(vars): enforce strict list-only DNS and user.key format for IaC compatibility

Compare 4 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 02:07:10 +01:00

0bd11d5463 fix(playbook): reset SSH connection before post-reboot tasks

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-12 00:23:51 +01:00

f8eaa41fc2 fix(partitioning): register swapoff result for changed_when handling

ed8da6e4e2 fix(luks): complete migration of partitioning_luks_tpm2_device reference

a60e6fd0d3 refactor(bootstrap): nest network fields under system.network to match main project schema

45c002c2dd fix(bootstrap): correct changed_when on state-changing commands

7a76f58384 refactor(luks): use system_cfg.luks directly across roles

Compare 160 commits »

sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-02-11 23:48:21 +01:00

a78c9ab8e8 fix(partitioning): register swapoff result for changed_when handling