Dotfiles

Commit Graph

Author	SHA1	Message	Date
Amir Alexander Abdelbaki	9289f01965	feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes All ansipa host/user group names now follow a consistent prefix scheme: dev_mod_<name> — dotfiles module install (was ansipa-module-) dev_fp_<app-id> — Flatpak install (was fp_install_) dev_pkg_<package> — native package install (was ansipa-install-) dev_daemon-enable-<u> — service enable policy (was policy-daemon-enable-) dev_daemon-disable-<u> — service disable policy (was policy-daemon-disable-) dev_timeshift-backup — backup policy (was policy-timeshift-backup) dev_security-scan — scan policy (was policy-security-scan) dev_no-local-users — auth lockdown (was no_local_users) dev_local-sudo-<user> — per-device sudo grant (was local_sudo_) usr_block-binary-<name> — per-user binary block (was policy-block-binary-) usr_scan-notify — per-user alert notification (was policy-scan-notify) Also adds a JSON state manifest (manifest.json) to ansipa-install-modules and tightens the FreeIPA enrollment guard to check /etc/ipa/default.conf. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LcnnA1whUwQkDv1omsgh9Y	2026-06-26 11:48:24 +02:00
Amir Alexander Abdelbaki	fb9893504c	setup: add FreeIPA Flatpak group installer (fp_install_* groups) IPA group naming: fp_install_org__mozilla__firefox (dots encoded as __) Decoding: sed strips prefix, then s/__/./g restores the Flatpak app ID. Single underscores in app IDs are preserved unambiguously. ansipa-install-flatpaks.sh: - kinit with host keytab, queries ipa group-find --pkey-only with awk $NF - Validates decoded ID against reverse-domain regex before installing - Ensures flathub system remote exists - System-scope install (flatpak install --system) since service runs as root - Timer offset to 4 min (after packages at 2 min) to avoid contention deploy-ansipa-install.yml updated to deploy the Flatpak script, service, and timer alongside the existing package installer. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-18 11:52:27 +02:00

Author

SHA1

Message

Date

Amir Alexander Abdelbaki

9289f01965

feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes

All ansipa host/user group names now follow a consistent prefix scheme:

  dev_mod_<name>          — dotfiles module install (was ansipa-module-)
  dev_fp_<app-id>         — Flatpak install (was fp_install_)
  dev_pkg_<package>       — native package install (was ansipa-install-)
  dev_daemon-enable-<u>   — service enable policy (was policy-daemon-enable-)
  dev_daemon-disable-<u>  — service disable policy (was policy-daemon-disable-)
  dev_timeshift-backup    — backup policy (was policy-timeshift-backup)
  dev_security-scan       — scan policy (was policy-security-scan)
  dev_no-local-users      — auth lockdown (was no_local_users)
  dev_local-sudo-<user>   — per-device sudo grant (was local_sudo_)
  usr_block-binary-<name> — per-user binary block (was policy-block-binary-)
  usr_scan-notify         — per-user alert notification (was policy-scan-notify)

Also adds a JSON state manifest (manifest.json) to ansipa-install-modules
and tightens the FreeIPA enrollment guard to check /etc/ipa/default.conf.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LcnnA1whUwQkDv1omsgh9Y

2026-06-26 11:48:24 +02:00

Amir Alexander Abdelbaki

fb9893504c

setup: add FreeIPA Flatpak group installer (fp_install_* groups)

IPA group naming: fp_install_org__mozilla__firefox (dots encoded as __)
Decoding: sed strips prefix, then s/__/./g restores the Flatpak app ID.
Single underscores in app IDs are preserved unambiguously.

ansipa-install-flatpaks.sh:
- kinit with host keytab, queries ipa group-find --pkey-only with awk $NF
- Validates decoded ID against reverse-domain regex before installing
- Ensures flathub system remote exists
- System-scope install (flatpak install --system) since service runs as root
- Timer offset to 4 min (after packages at 2 min) to avoid contention

deploy-ansipa-install.yml updated to deploy the Flatpak script, service,
and timer alongside the existing package installer.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-18 11:52:27 +02:00

2 Commits (9289f01965f539ce1dd4ee8867a04196cb328f63)