sandwich
0 Followers · 0 Following
Repositories
6
 Projects Packages Public Activity Starred Repositories
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-07-15 00:09:46 +02:00
9c4a86c0ec style(cleanup): drop redundant comments from the power-off tasks
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-07-15 00:05:39 +02:00
723f0516da fix(cleanup): wait for the guest shutdown before forcing the VM off
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-07-14 21:14:48 +02:00
975384661e docs(content): correct the family default to rhel=dvd, not EL=dvd
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-07-14 06:48:27 +02:00
ad25bec9fd fix(cleanup): force-stop the vmware VM before booting the installed OS
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-07-14 01:48:36 +02:00
6240217318 feat(system_check): preflight boot media and datastore placement
1c00ec9370 fix(configuration): grant the platform sudo group only when sudo is set
371d5a0acd fix(configuration): deploy sudoers rules for bool-or-string sudo values
Compare 3 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-06-09 15:07:10 +02:00
41ccf2a5b9 fix(configuration): allow guest-exec RPCs for EL golden cloning
8f9cfe3b2f fix(cleanup): force-stop then start the proxmox VM after install
6a75237197 fix(environment): pick the largest cdrom as the RHEL install DVD
b04aad12fb fix(satellite): drop auto-attach (mutually exclusive with activation key)
Compare 4 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-06-08 22:25:52 +02:00
4fff9f8d80 fix(virtualization): create vmware target folder before vm deploy
7f12a0f3d8 feat: accept proxmox API-token auth alongside password
ceb2237bbb fix(encryption): add tpm2-tss dracut module explicitly for TPM2 LUKS
477c8379c4 fix(configuration): enable per-family time-sync and skip sudo-rs lecture
579c499c02 feat(configuration): multi-backend networking, bind by match not MAC
Compare 16 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-05-30 18:05:45 +02:00
37df881daa docs: refresh bootstrap examples and README
55b21eae5d fix: encryption, partitioning, cis and virtualization hardening
b1e938b7f0 fix(users): accept plaintext or pre-hashed passwords uniformly
c843f5289b feat: hardware/firmware/gpu/peripherals detection and packages
9757ed3785 feat: complete wayland desktop deployment (gnome/kde/sway/hyprland)
Compare 14 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-04-16 15:37:29 +02:00
6bfaa0aa2b fix(configuration): guard user keys access to avoid dict.keys() method collision
5dc0424acb feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation
c12332a853 feat(virtualization): enable TPM2 emulation for Secure Boot VMs
5ace4577a2 feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled
c0ff01ef40 feat(configuration): add Secure Boot tasks for shim and sbctl
Compare 5 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-04-16 15:36:33 +02:00
5150a9dff4 fix(configuration): guard user keys access to avoid dict.keys() method collision
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-04-16 15:35:00 +02:00
03fffe6389 fix(configuration): guard user keys access to avoid dict.keys() method collision
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-04-16 15:26:48 +02:00
096610cc2c fix(configuration): guard user keys access to avoid dict.keys() method collision
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-04-02 17:52:45 +02:00
ce79728744 feat(cleanup): enroll Secure Boot keys in VM NVRAM after OS installation
b31a5a2580 feat(virtualization): enable TPM2 emulation for Secure Boot VMs
2055863673 feat(configuration): auto-bind PCR 7 when Secure Boot and FDE are both enabled
ceb11852ec feat(configuration): add Secure Boot tasks for shim and sbctl
57417514e3 feat(configuration): override EFI loader to shim when Secure Boot enabled
Compare 7 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-04-01 15:10:53 +02:00
b11d65a6f3 docs(bootstrap): document desktop, initramfs, and FDE features with SSH keepalive config
3623fc292c feat(configuration): generic FDE with systemd-cryptenroll, clevis fallback, and configurable initramfs
dfca7ec94b fix(configuration): RedHat EFI grub wrapper with btrfs subvol prefix and boot order
e8be84bf49 fix(partitioning): set btrfs default subvolume and restrict @pkg to Arch
322cc0b1ce fix(bootstrap): resolve interface-only network, sshd penalties, dnf scriptlets, and EFI cleanup
Compare 6 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-03-25 16:03:46 +01:00
a6bc7ffe04 fix(configuration): use /boot/grub2/grub.cfg for RedHat EFI grub config
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-03-25 15:52:42 +01:00
d079a41377 fix(configuration): use /boot/grub2/grub.cfg for RedHat EFI grub config
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-03-25 15:49:47 +01:00
2b17e147d7 fix(configuration): use /boot/grub2/grub.cfg for RedHat EFI grub config
c529e71ebc feat(packages): add needrestart to Debian and Ubuntu package lists
cb46de2b6d feat(bootstrap): add full package upgrade step for Debian and Ubuntu
9169117b25 fix(vim): use vimscript comment syntax for blockinfile markers in vimrc
6c94c519fb fix(sudo): use explicit string check instead of bool conditional for sudo field
Compare 171 commits »
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-03-25 15:46:18 +01:00
5a3f55b8de fix(configuration): skip grub-mkconfig for RedHat EFI systems
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-03-20 18:06:18 +01:00
d982e0af83 feat(packages): add needrestart to Debian and Ubuntu package lists
sandwich pushed to master at sandwich/Ansible-Bootstrap 2026-03-20 18:05:18 +01:00
535e831f4e feat(bootstrap): add full package upgrade step for Debian and Ubuntu