Feature 57 (config and provisioning): modules declare config and provisions, their files rendered from templates; synced with main (issues of feature 57, 874)

2026-10-16 07:37:43 +00:00
parent 1a2c917abf
commit 9652b2d5ce
771 changed files with 52063 additions and 1774 deletions
@@ -0,0 +1,9 @@
+# The mesh's (module sudo, novox/hq to-be 42, research 027): the operator account escalates
+# without a prompt. The mesh's tools that act as root run `sudo -n` as this account and rely on it;
+# until this file, every machine said so only in a line set by hand in /etc/sudoers.
+# Written whole at every push: an edit here is overwritten. A file of this directory whose name
+# holds a dot or ends in ~ is not read by sudo; this name holds neither.
+# Every command run through sudo gets a terminal of its own (novox/hq ADR 0266): an agent the operator
+# starts as the agent account through sudo cannot push keystrokes into the operator's shell (TIOCSTI).
+Defaults use_pty
+${machine:account} ALL=(ALL:ALL) NOPASSWD: ALL