Dotfiles/setup
Amir Alexander Abdelbaki 6ad8d0d488 feat(ansipa): add no_local_users device policy to lock all local account passwords
Adds a new host group policy `no_local_users` that locks the passwords of root
and all local users (UID >= 1000) via `passwd -l`, ensuring only FreeIPA domain
accounts with centrally-managed sudo rules can authenticate and gain elevated
privileges. Leaving the group reverts by unlocking every account tracked in the
state file. Updates docs with group reference entry and Local User Lockdown section.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-20 16:18:48 +02:00
..
Setup-shell-4-containers setup: housekeeping — rename, deprecate, fix refs 2026-05-11 15:02:25 +02:00
archiso feat(archiso): add system reset mode to installer 2026-05-20 15:09:00 +02:00
deprecated privacy: remove hardcoded username and AWS signed URL 2026-05-12 14:17:48 +02:00
modules feat(ansipa): add no_local_users device policy to lock all local account passwords 2026-05-20 16:18:48 +02:00
arch-autoinstall.sh fix(setup): port KEYMAPS+vconsole support to auto-installer and answerfile generator 2026-05-20 00:01:19 +02:00
archbaseos-guided-install.sh fix(archiso): move user input before partitioning, fall back to bash on exit 2026-05-20 07:20:14 +02:00
audit-packages.sh setup: fix pamtester/pinta/kew package source categorization 2026-05-11 19:45:33 +02:00
generate-answerfile.sh fix(setup): port KEYMAPS+vconsole support to auto-installer and answerfile generator 2026-05-20 00:01:19 +02:00
install-modules.sh feat(setup): add anti-malware module with freshclam cron job 2026-05-19 19:58:35 +02:00
install.sh setup: add croc to optional apps; fix shell match in tui summary 2026-05-18 03:03:01 +02:00
reset-arch.sh feat(archiso): add system reset mode to installer 2026-05-20 15:09:00 +02:00
tui-install.sh feat(modules): add lamco-rdp-server module 2026-05-20 15:15:59 +02:00