enroll

Author	SHA1	Message	Date
Miguel Jacq	1856e3a79d	Add support for AddressFamily and ConnectTimeout in the .ssh/config when using `--remote-ssh-config`.	2026-01-16 10:58:39 +11:00
Miguel Jacq	f5eaac9f75	Support `--remote-ssh-config [path-to-ssh-config]` as an argument in case extra params are required beyond `--remote-port` or `--remote-user`. All checks were successful CI / test (push) Successful in 8m18s Details Lint / test (push) Successful in 33s Details Trivy / test (push) Successful in 25s Details Note: `--remote-host` must still be set, but it can be an 'alias' represented by the 'Host' value in the ssh config.	2026-01-13 21:56:28 +11:00
Miguel Jacq	5754ef1aad	Add interactive output when 'enroll diff --enforce' is invoking Ansible. All checks were successful CI / test (push) Successful in 8m18s Details Lint / test (push) Successful in 32s Details Trivy / test (push) Successful in 24s Details	2026-01-11 10:01:16 +11:00
Miguel Jacq	ebd30247d1	Add `--enforce` mode to `enroll diff` and add --ignore-package-versions Some checks failed CI / test (push) Failing after 1m48s Details Lint / test (push) Successful in 32s Details Trivy / test (push) Successful in 22s Details If there is diff detected between the two harvests, and it can enforce restoring the state from the older harvest, it will manifest the state and apply it with ansible. Only the specific roles that had diffed will be applied (via the new tags capability). `--ignore-package-versions` will skip reporting when packages are upgraded/downgraded in the diff.	2026-01-10 10:51:41 +11:00
Miguel Jacq	ca3d958a96	Add `--exclude-path` to `enroll diff` command Some checks failed CI / test (push) Failing after 1m45s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details So that you can ignore certain churn from the diff (stuff you still wanted to harvest as a baseline but don't care if it changes day to day)	2026-01-10 08:56:35 +11:00
Miguel Jacq	8be821c494	Update pynacl dependency to resolve CVE-2025-69277 All checks were successful CI / test (push) Successful in 8m1s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details	2026-01-08 17:16:58 +11:00
Miguel Jacq	8daed96b7c	Attempt to generate Jinja2 templates of systemd unit files and Postfix main.cf (now that JinjaTurtle supports it) All checks were successful CI / test (push) Successful in 8m13s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details	2026-01-06 12:47:12 +11:00
Miguel Jacq	025f00f924	Fix tests Some checks failed Lint / test (push) Waiting to run Details Trivy / test (push) Waiting to run Details CI / test (push) Has been cancelled Details	2026-01-05 21:25:46 +11:00
Miguel Jacq	66d032d981	Introduce 'enroll validate' to check a harvest meets the schema spec and isn't lacking artifacts or contains orphaned ones Some checks failed CI / test (push) Failing after 1m47s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details	2026-01-05 21:17:50 +11:00
Miguel Jacq	ca4cf00e84	Changelog entry for symlinks All checks were successful CI / test (push) Successful in 7m36s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details	2026-01-05 16:30:14 +11:00
Miguel Jacq	91ec1b8791	Ignore files ending in - in the /etc/ dir e.g /etc/shadow- Some checks failed CI / test (push) Failing after 1m43s Details Lint / test (push) Successful in 32s Details Trivy / test (push) Successful in 23s Details	2026-01-05 15:48:17 +11:00
Miguel Jacq	b5e32770a3	Ignore files that end with a tilde (probably backup files generated by editors)	2026-01-05 15:23:45 +11:00
Miguel Jacq	a1433d645f	Capture other files in the user's home directory Some checks failed CI / test (push) Failing after 1m57s Details Lint / test (push) Successful in 32s Details Trivy / test (push) Successful in 27s Details Such as `.bashrc`, `.bash_aliases`, `.profile`, if these files differ from the `/etc/skel` defaults	2026-01-05 15:02:22 +11:00
Miguel Jacq	24cedc8c8d	Centralise the cron and logrotate stuff into their respective roles. All checks were successful CI / test (push) Successful in 7m52s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 23s Details We had a bit of duplication between roles based on harvest discovery. Arguably some crons/logrotate scripts are specific to other packages, but it helps to go to one place to find them all. We'll apply these roles last in the playbook, to give an opportunity for all other packages / non-system users to have been installed already.	2026-01-05 12:01:25 +11:00
Miguel Jacq	59674d4660	Introduce `enroll explain` Some checks failed CI / test (push) Failing after 1m45s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details A tool to analyze and explain what's in (or not in) a harvest and why.	2026-01-05 10:16:44 +11:00
Miguel Jacq	04234e296f	0.2.3 All checks were successful CI / test (push) Successful in 6m55s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 23s Details	2026-01-04 21:05:49 +11:00
Miguel Jacq	824010b2ab	Several bug fixes and prep for 0.2.2 Some checks failed CI / test (push) Failing after 1m40s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 24s Details - Fix stat() of parent directory so that we set directory perms correct on --include paths. - Set pty for remote calls when sudo is required, to help systems with limits on sudo without pty	2026-01-03 11:39:57 +11:00
Miguel Jacq	c88405ef01	Ensure directories in the tree of anything included with --include are defined in the state and manifest so we make dirs before we try to create files	2026-01-02 21:10:32 +11:00
Miguel Jacq	781efef467	Don't accidentally add extra_paths role to usr_local_custom list, resulting in extra_paths appearing twice in manifested playbook	2026-01-02 20:19:47 +11:00
Miguel Jacq	e44e4aaf3a	0.2.0 All checks were successful CI / test (push) Successful in 4m52s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-29 17:39:39 +11:00
Miguel Jacq	984b0fa81b	Add ability to enroll RH-style systems (DNF5/DNF/RPM) All checks were successful CI / test (push) Successful in 5m9s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-29 14:59:34 +11:00
Miguel Jacq	ad2abed612	Add version CLI arg	2025-12-29 14:29:11 +11:00
Miguel Jacq	8c19473e18	Fix an attribution bug for certain files ending up in the wrong package/role. All checks were successful CI / test (push) Successful in 5m2s Details Lint / test (push) Successful in 29s Details Trivy / test (push) Successful in 21s Details	2025-12-28 18:37:14 +11:00
Miguel Jacq	921801caa6	0.1.6 All checks were successful CI / test (push) Successful in 5m24s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 16s Details	2025-12-28 15:32:40 +11:00
Miguel Jacq	3fc5aec5fc	0.1.5 All checks were successful CI / test (push) Successful in 5m4s Details Lint / test (push) Successful in 28s Details Trivy / test (push) Successful in 17s Details	2025-12-28 09:56:52 +11:00
Miguel Jacq	054a6192d1	Capture more singletons in /etc and avoid apt duplication Some checks failed Lint / test (push) Waiting to run Details Trivy / test (push) Waiting to run Details CI / test (push) Has been cancelled Details	2025-12-27 19:02:22 +11:00
Miguel Jacq	9641637d4d	Add support for an enroll.ini config file to store arguments per subcommand, to avoid having to remember them all for repetitive executions. Some checks failed Lint / test (push) Waiting to run Details Trivy / test (push) Waiting to run Details CI / test (push) Has been cancelled Details	2025-12-20 18:24:46 +11:00
Miguel Jacq	240e79706f	Allow the user to add extra paths to harvest, or All checks were successful CI / test (push) Successful in 5m31s Details Lint / test (push) Successful in 34s Details Trivy / test (push) Successful in 19s Details paths to ignore, using `--exclude-path` and `--include-path` arguments.	2025-12-20 17:47:00 +11:00
Miguel Jacq	4660a0703e	Include files from `/usr/local/bin` and `/usr/local/etc` in harvest (assuming they aren't binaries or symlinks) and store in `usr_local_custom` role, similar to `etc_custom`. All checks were successful CI / test (push) Successful in 5m43s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 19s Details	2025-12-18 17:11:04 +11:00
Miguel Jacq	b5d2b99174	Add diff mode All checks were successful CI / test (push) Successful in 5m14s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 23s Details	2025-12-18 14:59:51 +11:00
Miguel Jacq	55e50ebf59	Fix end of file/whitespace per pre-commit All checks were successful CI / test (push) Successful in 5m11s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-18 13:50:00 +11:00
Miguel Jacq	33b1176800	Add --sops mode to encrypt harvest and manifest data at rest (especially useful if using --dangerous) Some checks failed CI / test (push) Successful in 5m35s Details Lint / test (push) Failing after 29s Details Trivy / test (push) Successful in 18s Details	2025-12-17 18:51:40 +11:00
Miguel Jacq	6a36a9d2d5	Remote mode and dangerous flag, other tweaks * Add remote mode for harvesting a remote machine via a local workstation (no need to install enroll remotely) Optionally use `--no-sudo` if you don't want the remote user to have passwordless sudo when conducting the harvest, albeit you'll end up with less useful data (same as if running `enroll harvest` on a machine without sudo) * Add `--dangerous` flag to capture even sensitive data (use at your own risk!) * Do a better job at capturing other config files in `/etc/<package>/` even if that package doesn't normally ship or manage those files.	2025-12-17 17:02:16 +11:00
Miguel Jacq	f255ba566c	biiiiig refactor to support jinjaturtle and multi site mode	2025-12-16 20:14:20 +11:00
Miguel Jacq	e4be7f5975	Rename secrets to ignore as it does more than secrets All checks were successful CI / test (push) Successful in 5m35s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-15 17:03:28 +11:00
Miguel Jacq	2f5a65b737	Bump version Some checks failed CI / test (push) Failing after 1m18s Details Lint / test (push) Successful in 28s Details Trivy / test (push) Successful in 18s Details	2025-12-15 13:34:20 +11:00
Miguel Jacq	809f21dd35	CHANGELOG is markdown Some checks failed CI / test (push) Failing after 1m55s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Has been cancelled Details	2025-12-15 11:58:23 +11:00

37 commits