• 0.4.3 5f6b0f49d9

    0.4.3
    All checks were successful
    CI / test (push) Successful in 8m22s
    Lint / test (push) Successful in 32s
    Trivy / test (push) Successful in 26s
    Stable

    mig5 released this 2026-01-15 18:05:48 -06:00 | 0 commits to main since this release

    • Add support for AddressFamily and ConnectTimeout in the .ssh/config when using --remote-ssh-config.
    • Update dependencies
    Downloads
  • 0.4.2 478b0e1b9d

    0.4.2
    All checks were successful
    CI / test (push) Successful in 8m19s
    Lint / test (push) Successful in 33s
    Trivy / test (push) Successful in 25s
    Stable

    mig5 released this 2026-01-13 05:13:35 -06:00 | 2 commits to main since this release

    • Support --remote-ssh-config [path-to-ssh-config] as an argument in case extra params are required beyond --remote-port or --remote-user. Note: --remote-host must still be set, but it can be an 'alias' represented by the 'Host' value in the ssh config.
    Downloads
  • 0.4.1 5754ef1aad

    0.4.1
    All checks were successful
    CI / test (push) Successful in 8m18s
    Lint / test (push) Successful in 32s
    Trivy / test (push) Successful in 24s
    Stable

    mig5 released this 2026-01-10 17:20:42 -06:00 | 4 commits to main since this release

    • Add interactive output when 'enroll diff --enforce' is invoking Ansible.
    Downloads
  • 0.4.0 f84d795c49

    0.4.0
    All checks were successful
    CI / test (push) Successful in 8m15s
    Lint / test (push) Successful in 32s
    Trivy / test (push) Successful in 24s
    Stable

    mig5 released this 2026-01-09 18:36:49 -06:00 | 6 commits to main since this release

    • Introduce enroll validate - a tool to validate a harvest against the state schema, or check for missing or orphaned obsolete artifacts in a harvest.
    • Attempt to generate Jinja2 templates of systemd unit files and Postfix main.cf (now that JinjaTurtle supports it)
    • Update pynacl dependency to resolve CVE-2025-69277
    • Add --exclude-path to enroll diff command, so that you can ignore certain churn from the diff (stuff you still wanted to harvest as a baseline but don't care if it changes day to day)
    • Add --ignore-package-versions to enroll diff command, to optionally ignore package upgrades (e.g due to patching) from the diff.
    • Add tags to the playbook for each role, to allow easier targeting of specific roles during play later.
    • Add --enforce mode to enroll diff. If there is diff detected between the two harvests, and it can enforce restoring the state from the older harvest, it will manifest the state and apply it with ansible. Only the specific roles that had diffed will be applied (via the new tags capability)
    Downloads
  • 0.3.0 45e0d9bb16

    0.3.0
    All checks were successful
    CI / test (push) Successful in 8m25s
    Lint / test (push) Successful in 31s
    Trivy / test (push) Successful in 23s
    Stable

    mig5 released this 2026-01-05 00:15:25 -06:00 | 17 commits to main since this release

    • Introduce enroll explain - a tool to analyze and explain what's in (or not in) a harvest and why.
    • Centralise the cron and logrotate stuff into their respective roles, we had a bit of duplication between roles based on harvest discovery.
    • Capture other files in the user's home directory such as .bashrc, .bash_aliases, .profile, if these files differ from the /etc/skel defaults
    • Ignore files that end with a tilde or - (probably backup files generated by editors or shadow file changes)
    • Manage certain symlinks e.g for apache2/nginx sites-enabled and so on
    Downloads
  • 0.2.3 04234e296f

    0.2.3
    All checks were successful
    CI / test (push) Successful in 6m55s
    Lint / test (push) Successful in 30s
    Trivy / test (push) Successful in 23s
    Stable

    mig5 released this 2026-01-04 04:25:46 -06:00 | 33 commits to main since this release

    • Introduce --ask-become-pass or -K to support password-required sudo on remote hosts, just like Ansible. It will also fall back to this prompt if a password is required but the arg wasn't passed in.

    With thanks to slhck for the assistance, advice and feedback on the fix.

    Downloads
  • 0.2.2 9a2516d858

    0.2.2
    All checks were successful
    CI / test (push) Successful in 7m0s
    Lint / test (push) Successful in 31s
    Trivy / test (push) Successful in 23s
    Stable

    mig5 released this 2026-01-02 19:32:55 -06:00 | 40 commits to main since this release

    • Fix stat() of parent directory so that we set directory perms correct on --include paths.
    • Set pty for remote calls when sudo is required, to help systems with limits on sudo without pty
    Downloads
  • 0.2.0 e44e4aaf3a

    0.2.0
    All checks were successful
    CI / test (push) Successful in 4m52s
    Lint / test (push) Successful in 27s
    Trivy / test (push) Successful in 17s
    Stable

    mig5 released this 2025-12-29 00:53:51 -06:00 | 48 commits to main since this release

    • Add version CLI arg
    • Add ability to enroll RH-style systems (DNF5/DNF/RPM)
    • Refactor harvest state to track package versions
    Downloads
  • 0.1.7 8c19473e18

    0.1.7
    All checks were successful
    CI / test (push) Successful in 5m2s
    Lint / test (push) Successful in 29s
    Trivy / test (push) Successful in 21s
    Stable

    mig5 released this 2025-12-28 01:40:26 -06:00 | 54 commits to main since this release

    • Fix an attribution bug for certain files ending up in the wrong package/role.
    Downloads
  • 0.1.6 921801caa6

    0.1.6
    All checks were successful
    CI / test (push) Successful in 5m24s
    Lint / test (push) Successful in 30s
    Trivy / test (push) Successful in 16s
    Stable

    mig5 released this 2025-12-27 22:43:49 -06:00 | 55 commits to main since this release

    • DRY up some code logic
    • More test coverage
    Downloads