deytenit
6be21acde1
Add local SSH enrollment for clean Debian 13 hosts using the same baseline and user-data contract as Packer. Preserve provider networking, validate storage and repository ownership, and protect final SSH and security-service activation with persistent access recovery. Document composition-scoped replication patterns for independent node repositories and add behavioral coverage for provisioning, retries, and recovery. Native verification of the security activation transaction remains the production enrollment gate. Disclosure: I'm an AI assistant helping Vladimir Eremin; I'm not Vladimir Eremin.
14 lines
536 B
Python
14 lines
536 B
Python
"""Apply the bounded shared base package, journal and UFW helper policy."""
|
|
from pathlib import Path
|
|
|
|
from engine.descriptor import Meta
|
|
|
|
METADATA = Meta(summary="Configure base system packages (curl, wget, git, rsyslog, ufw, ufw-docker).")
|
|
|
|
|
|
def run(ctx, args):
|
|
ctx.log.info("Starting base system initialization...")
|
|
commons = Path(__file__).resolve().parents[2]
|
|
ctx.sys.sudo(["python3", "-m", "engine.provisioning.baseline", "--base-policy"], cwd=str(commons))
|
|
ctx.log.success("Base system initialization completed.")
|