enroll

Author	SHA1	Message	Date
Miguel Jacq	24cedc8c8d	Centralise the cron and logrotate stuff into their respective roles. All checks were successful CI / test (push) Successful in 7m52s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 23s Details We had a bit of duplication between roles based on harvest discovery. Arguably some crons/logrotate scripts are specific to other packages, but it helps to go to one place to find them all. We'll apply these roles last in the playbook, to give an opportunity for all other packages / non-system users to have been installed already.	2026-01-05 12:01:25 +11:00
Miguel Jacq	59674d4660	Introduce `enroll explain` Some checks failed CI / test (push) Failing after 1m45s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details A tool to analyze and explain what's in (or not in) a harvest and why.	2026-01-05 10:16:44 +11:00
Miguel Jacq	04234e296f	0.2.3 All checks were successful CI / test (push) Successful in 6m55s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 23s Details	2026-01-04 21:05:49 +11:00
Miguel Jacq	824010b2ab	Several bug fixes and prep for 0.2.2 Some checks failed CI / test (push) Failing after 1m40s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 24s Details - Fix stat() of parent directory so that we set directory perms correct on --include paths. - Set pty for remote calls when sudo is required, to help systems with limits on sudo without pty	2026-01-03 11:39:57 +11:00
Miguel Jacq	c88405ef01	Ensure directories in the tree of anything included with --include are defined in the state and manifest so we make dirs before we try to create files	2026-01-02 21:10:32 +11:00
Miguel Jacq	781efef467	Don't accidentally add extra_paths role to usr_local_custom list, resulting in extra_paths appearing twice in manifested playbook	2026-01-02 20:19:47 +11:00
Miguel Jacq	e44e4aaf3a	0.2.0 All checks were successful CI / test (push) Successful in 4m52s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-29 17:39:39 +11:00
Miguel Jacq	984b0fa81b	Add ability to enroll RH-style systems (DNF5/DNF/RPM) All checks were successful CI / test (push) Successful in 5m9s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-29 14:59:34 +11:00
Miguel Jacq	ad2abed612	Add version CLI arg	2025-12-29 14:29:11 +11:00
Miguel Jacq	8c19473e18	Fix an attribution bug for certain files ending up in the wrong package/role. All checks were successful CI / test (push) Successful in 5m2s Details Lint / test (push) Successful in 29s Details Trivy / test (push) Successful in 21s Details	2025-12-28 18:37:14 +11:00
Miguel Jacq	921801caa6	0.1.6 All checks were successful CI / test (push) Successful in 5m24s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 16s Details	2025-12-28 15:32:40 +11:00
Miguel Jacq	3fc5aec5fc	0.1.5 All checks were successful CI / test (push) Successful in 5m4s Details Lint / test (push) Successful in 28s Details Trivy / test (push) Successful in 17s Details	2025-12-28 09:56:52 +11:00
Miguel Jacq	054a6192d1	Capture more singletons in /etc and avoid apt duplication Some checks failed Lint / test (push) Waiting to run Details Trivy / test (push) Waiting to run Details CI / test (push) Has been cancelled Details	2025-12-27 19:02:22 +11:00
Miguel Jacq	9641637d4d	Add support for an enroll.ini config file to store arguments per subcommand, to avoid having to remember them all for repetitive executions. Some checks failed Lint / test (push) Waiting to run Details Trivy / test (push) Waiting to run Details CI / test (push) Has been cancelled Details	2025-12-20 18:24:46 +11:00
Miguel Jacq	240e79706f	Allow the user to add extra paths to harvest, or All checks were successful CI / test (push) Successful in 5m31s Details Lint / test (push) Successful in 34s Details Trivy / test (push) Successful in 19s Details paths to ignore, using `--exclude-path` and `--include-path` arguments.	2025-12-20 17:47:00 +11:00
Miguel Jacq	4660a0703e	Include files from `/usr/local/bin` and `/usr/local/etc` in harvest (assuming they aren't binaries or symlinks) and store in `usr_local_custom` role, similar to `etc_custom`. All checks were successful CI / test (push) Successful in 5m43s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 19s Details	2025-12-18 17:11:04 +11:00
Miguel Jacq	b5d2b99174	Add diff mode All checks were successful CI / test (push) Successful in 5m14s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 23s Details	2025-12-18 14:59:51 +11:00
Miguel Jacq	55e50ebf59	Fix end of file/whitespace per pre-commit All checks were successful CI / test (push) Successful in 5m11s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-18 13:50:00 +11:00
Miguel Jacq	33b1176800	Add --sops mode to encrypt harvest and manifest data at rest (especially useful if using --dangerous) Some checks failed CI / test (push) Successful in 5m35s Details Lint / test (push) Failing after 29s Details Trivy / test (push) Successful in 18s Details	2025-12-17 18:51:40 +11:00
Miguel Jacq	6a36a9d2d5	Remote mode and dangerous flag, other tweaks * Add remote mode for harvesting a remote machine via a local workstation (no need to install enroll remotely) Optionally use `--no-sudo` if you don't want the remote user to have passwordless sudo when conducting the harvest, albeit you'll end up with less useful data (same as if running `enroll harvest` on a machine without sudo) * Add `--dangerous` flag to capture even sensitive data (use at your own risk!) * Do a better job at capturing other config files in `/etc/<package>/` even if that package doesn't normally ship or manage those files.	2025-12-17 17:02:16 +11:00
Miguel Jacq	f255ba566c	biiiiig refactor to support jinjaturtle and multi site mode	2025-12-16 20:14:20 +11:00
Miguel Jacq	e4be7f5975	Rename secrets to ignore as it does more than secrets All checks were successful CI / test (push) Successful in 5m35s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-15 17:03:28 +11:00
Miguel Jacq	2f5a65b737	Bump version Some checks failed CI / test (push) Failing after 1m18s Details Lint / test (push) Successful in 28s Details Trivy / test (push) Successful in 18s Details	2025-12-15 13:34:20 +11:00
Miguel Jacq	809f21dd35	CHANGELOG is markdown Some checks failed CI / test (push) Failing after 1m55s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Has been cancelled Details	2025-12-15 11:58:23 +11:00

24 commits