Files
spinifex/docs/security
Julian Sommer d548535fcf feat: hand host DNS to systemd-resolved, probe CA trust and chrony, link spx for sudo
setup.sh turns on systemd-resolved behind NetworkManager where resolved is
installed but stopped and no real resolvconf exists, saving /etc/resolv.conf
once and stopping unless resolved has upstream servers and the package
repository still resolves. hostdns no longer treats resolvectl's resolvconf
link as a resolvconf backend, and preflight warns when resolved is active
but /etc/resolv.conf is not its stub.

CA trust goes through the hostos probe and a failure stops admin init and
join before they write anything. The chrony drop-in directory is probed,
with a confdir line appended on EL. /usr/bin/spx links to /usr/local/bin/spx
where sudo's PATH leaves it out, and the nbdkit plugin directory comes only
from nbdkit --dump-config.
2026-10-26 10:58:02 +10:00
..