feat(ansible): install Koncreet host hardening with an Ubuntu 26.04 patch - #28

Merged

undeemed merged 7 commits into

mainfrom

fm/cf-koncreet-u26-k4

Oct 1, 2026

Commits on Oct 1, 2026

feat: install koncreet on every apply, with an Ubuntu 26.04 patch layered on
undeemed
committed
61218cb
fix(koncreet): never render root as the koncreet sudo user
undeemed
committed
bbc9a85
no-mistakes(review): Validate release version; drop it from root shell
undeemed
committed
69d49a5
no-mistakes(review): Make koncreet optional; guard config for tailscale and factory user
undeemed
committed
a401b6b
no-mistakes(test): Install fakeroot in CI for koncreet digest test
undeemed
committed
29b71e2
no-mistakes(document): Point architecture sources at Dependencies; note fakeroot for tests
undeemed
committed
269428a
no-mistakes(document): Format install_tools.py; docs already match code
undeemed
committed
b3d31fe