diff --git a/src/docs.html b/src/docs.html index ba13b91..ecb1913 100644 --- a/src/docs.html +++ b/src/docs.html @@ -136,7 +136,7 @@
  • For each package, it tries to detect files in /etc that have been modified from the default that get shipped with the package.
  • It detects running/enabled services and timers via systemd. For each of these, it looks for the unit files, any 'drop-in' files, environment variable files, etc, as well as what executable it executes, and tries to map those systemd services to the packages it's already learned about earlier (that way, those 'packages' or future Ansible roles, can also be associated with 'handlers' in Ansible, to handle restart of the services if/when the configs change)
  • Aside from known packages already learned, it optimistically tries to capture extra system configuration in /etc that is common for config management. This is stuff like the apt or dnf configuration, crons, logrotate configs, networking settings, hosts files, etc.
    • -
  • For applications that commonly make use of symlinks (think Apache2 or Nginx's sites-enabled or mods-enabled, it notes what symlinks exist so that it can capture those in Ansible
    • +
  • For applications that commonly make use of symlinks (think Apache2 or Nginx's sites-enabled or mods-enabled), it notes what symlinks exist so that it can capture those in Ansible
  • It also looks for other snowflake stuff in /etc not associated with packages/services or other typical system config, and will put these into an etc_custom role.
  • Likewise, it looks in /usr/local for stuff, on the assumption that this is an area that custom apps/configs might've been placed in. These go into a usr_local_custom role.
  • It captures non-system user accounts, their group memberships and files such as their .ssh/authorized_keys, and .bashrc, .profile, .bash_aliases, .bash_logout if these files differ from the skel defaults
    • diff --git a/src/index.html b/src/index.html index 7bb41fd..978d72c 100644 --- a/src/index.html +++ b/src/index.html @@ -100,7 +100,7 @@

    A simple mental model

    -

    Enroll is built around two phases, plus an optional drift report:

    +

    Enroll is built around two phases, plus optional drift and reporting tools:

    @@ -123,6 +123,13 @@
    Compare two harvests and notify via webhook/email.
    +
    +
    +
    +
    Explain
    +
    Analyze what's included/excluded in the harvest and why.
    +
    +