Amir Alexander Abdelbaki
aced2c754e
Host groups named policy-daemon-enable-<unit> and
policy-daemon-disable-<unit> are now matched by a wildcard case arm in
the group parser — no per-service configuration required.
Enforcement (every 30 min via existing timer):
enable: systemctl enable --now <unit>; state written to
/var/lib/ansipa-policies/daemon-enabled
disable: systemctl disable --now <unit>; state written to
/var/lib/ansipa-policies/daemon-disabled
revert: when a host leaves a group the opposite action is applied
on the next run (enable→disable, disable→enable)
conflict: unit in both lists is skipped with a warning
The .service suffix is optional — _svc_unit() appends it when the name
contains no dot, so all systemd unit types work as-is.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| Setup-shell-4-containers | ||
| archiso | ||
| deprecated | ||
| modules | ||
| arch-autoinstall.sh | ||
| archbaseos-guided-install.sh | ||
| audit-packages.sh | ||
| generate-answerfile.sh | ||
| install-modules.sh | ||
| install.sh | ||
| reset-arch.sh | ||
| tui-install.sh | ||