IPA group naming: fp_install_org__mozilla__firefox (dots encoded as __) Decoding: sed strips prefix, then s/__/./g restores the Flatpak app ID. Single underscores in app IDs are preserved unambiguously. ansipa-install-flatpaks.sh: - kinit with host keytab, queries ipa group-find --pkey-only with awk $NF - Validates decoded ID against reverse-domain regex before installing - Ensures flathub system remote exists - System-scope install (flatpak install --system) since service runs as root - Timer offset to 4 min (after packages at 2 min) to avoid contention deploy-ansipa-install.yml updated to deploy the Flatpak script, service, and timer alongside the existing package installer. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| ansible | ||
| image | ||
| auto-enroll-ansible.sh | ||
| copilot-explains.txt | ||
| freeipa-client-answerfile.json | ||
| freeipa-client.sh | ||
| freeipa-enroll.sh | ||