fix(config): newline-terminate all deployed config files
29 files under ProjectCode/ConfigFiles lacked a trailing newline. They deploy via `cat file > target`, and several targets are subsequently appended to (notably /etc/ssh/sshd_config, which configure_ssh_2fa appends `AuthenticationMethods publickey,keyboard-interactive` to). Without a trailing newline the append fused onto the last line, producing `LoginGraceTime 60AuthenticationMethods ...`, which sshd -t rejected as an invalid time value and aborted provisioning under errexit. This is the same defect class that already broke the managed authorized_keys files. Add the trailing newline to every config file that was missing one so the cat-then-append pattern is always safe. 🤖 Generated with [Crush](https://github.com/charmassociates/crush) Assisted-by: GLM-5 via Crush <crush@charm.land>
This commit is contained in:
@@ -43,4 +43,4 @@ end_of_event_timeout = 2
|
||||
##krb5_key_file = /etc/audit/audit.key
|
||||
krb5_principal = auditd
|
||||
|
||||
##name = mydomain
|
||||
##name = mydomain
|
||||
|
||||
@@ -2,4 +2,4 @@ This system is the property of Known Element Enterprises LLC.
|
||||
|
||||
Authorized uses only. All activity may be monitored and reported.
|
||||
|
||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||
|
||||
@@ -2,4 +2,4 @@ This system is the property of Known Element Enterprises LLC.
|
||||
|
||||
Authorized uses only. All activity may be monitored and reported.
|
||||
|
||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||
|
||||
@@ -2,4 +2,4 @@ This system is the property of Known Element Enterprises LLC.
|
||||
|
||||
Authorized uses only. All activity may be monitored and reported.
|
||||
|
||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
#/etc/cockpit/disallowed-users
|
||||
# List of users which are not allowed to login to Cockpit
|
||||
# List of users which are not allowed to login to Cockpit
|
||||
|
||||
@@ -20,4 +20,4 @@ create 0640 root utmp
|
||||
# packages drop log rotation information into this directory
|
||||
include /etc/logrotate.d
|
||||
|
||||
# system-specific logs may also be configured here.
|
||||
# system-specific logs may also be configured here.
|
||||
|
||||
@@ -1 +1 @@
|
||||
install cramfs /bin/true
|
||||
install cramfs /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install dccp /bin/true
|
||||
install dccp /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install freevxfs /bin/true
|
||||
install freevxfs /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install hfs /bin/true
|
||||
install hfs /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install hfsplus /bin/true
|
||||
install hfsplus /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install jffs2 /bin/true
|
||||
install jffs2 /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install rds /bin/true
|
||||
install rds /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install sctp /bin/true
|
||||
install sctp /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install squashfs /bin/true
|
||||
install squashfs /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install tipc /bin/true
|
||||
install tipc /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install udf /bin/true
|
||||
install udf /bin/true
|
||||
|
||||
@@ -1 +1 @@
|
||||
install usb-storage /bin/true
|
||||
install usb-storage /bin/true
|
||||
|
||||
@@ -4,4 +4,4 @@ server pfv-netboot.knel.net
|
||||
restrict 127.0.0.1
|
||||
restrict ::1
|
||||
interface ignore wildcard
|
||||
interface listen 127.0.0.1
|
||||
interface listen 127.0.0.1
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
# Uncomment to start SNMP subagent and enable CDP, SONMP and EDP protocol
|
||||
DAEMON_ARGS="-x -c -s -e"
|
||||
DAEMON_ARGS="-x -c -s -e"
|
||||
|
||||
@@ -1 +1 @@
|
||||
/.*/ tsysrootaccount@knel.net
|
||||
/.*/ tsysrootaccount@knel.net
|
||||
|
||||
@@ -43,4 +43,4 @@ pass_persist .1.3.6.1.4.1.9.9.13.1.3 /usr/local/bin/temper-snmp
|
||||
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
||||
|
||||
# LLDP collection
|
||||
master agentx
|
||||
master agentx
|
||||
|
||||
@@ -37,4 +37,4 @@ extend serial /usr/bin/sudo /usr/bin/cat /sys/firmware/devicetree/base/serial-nu
|
||||
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
||||
|
||||
# LLDP collection
|
||||
master agentx
|
||||
master agentx
|
||||
|
||||
@@ -41,4 +41,4 @@ extend serial /usr/bin/sudo /usr/bin/cat /sys/devices/virtual/dmi/id/product_ser
|
||||
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
||||
|
||||
# LLDP collection
|
||||
master agentx
|
||||
master agentx
|
||||
|
||||
@@ -16,4 +16,4 @@ GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-group16-sha512-
|
||||
|
||||
HostbasedAcceptedAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
|
||||
|
||||
PubkeyAcceptedAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
|
||||
PubkeyAcceptedAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
|
||||
|
||||
@@ -17,4 +17,4 @@ PermitRootLogin prohibit-password
|
||||
ClientAliveInterval 300
|
||||
ClientAliveCountMax 3
|
||||
AllowUsers root localuser subodev
|
||||
LoginGraceTime 60
|
||||
LoginGraceTime 60
|
||||
|
||||
@@ -3,4 +3,4 @@ module(load="imklog") # provides kernel logging support
|
||||
#module(load="immark") # provides --MARK-- message capability
|
||||
|
||||
*.* @tsys-librenms.knel.net:514
|
||||
:omusrmsg:EOF
|
||||
:omusrmsg:EOF
|
||||
|
||||
@@ -28,4 +28,4 @@
|
||||
#LineMax=48K
|
||||
#ReadKMsg=yes
|
||||
#Audit=no
|
||||
Storage=persistent
|
||||
Storage=persistent
|
||||
|
||||
@@ -255,4 +255,4 @@ fi
|
||||
# enable command-not-found if installed
|
||||
if [ -f /etc/zsh_command_not_found ]; then
|
||||
. /etc/zsh_command_not_found
|
||||
fi
|
||||
fi
|
||||
|
||||
Reference in New Issue
Block a user