fix(config): newline-terminate all deployed config files
29 files under ProjectCode/ConfigFiles lacked a trailing newline. They deploy via `cat file > target`, and several targets are subsequently appended to (notably /etc/ssh/sshd_config, which configure_ssh_2fa appends `AuthenticationMethods publickey,keyboard-interactive` to). Without a trailing newline the append fused onto the last line, producing `LoginGraceTime 60AuthenticationMethods ...`, which sshd -t rejected as an invalid time value and aborted provisioning under errexit. This is the same defect class that already broke the managed authorized_keys files. Add the trailing newline to every config file that was missing one so the cat-then-append pattern is always safe. 🤖 Generated with [Crush](https://github.com/charmassociates/crush) Assisted-by: GLM-5 via Crush <crush@charm.land>
This commit is contained in:
@@ -43,4 +43,4 @@ end_of_event_timeout = 2
|
|||||||
##krb5_key_file = /etc/audit/audit.key
|
##krb5_key_file = /etc/audit/audit.key
|
||||||
krb5_principal = auditd
|
krb5_principal = auditd
|
||||||
|
|
||||||
##name = mydomain
|
##name = mydomain
|
||||||
|
|||||||
@@ -2,4 +2,4 @@ This system is the property of Known Element Enterprises LLC.
|
|||||||
|
|
||||||
Authorized uses only. All activity may be monitored and reported.
|
Authorized uses only. All activity may be monitored and reported.
|
||||||
|
|
||||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||||
|
|||||||
@@ -2,4 +2,4 @@ This system is the property of Known Element Enterprises LLC.
|
|||||||
|
|
||||||
Authorized uses only. All activity may be monitored and reported.
|
Authorized uses only. All activity may be monitored and reported.
|
||||||
|
|
||||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||||
|
|||||||
@@ -2,4 +2,4 @@ This system is the property of Known Element Enterprises LLC.
|
|||||||
|
|
||||||
Authorized uses only. All activity may be monitored and reported.
|
Authorized uses only. All activity may be monitored and reported.
|
||||||
|
|
||||||
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
All activities subject to monitoring/recording/review in real time and/or at a later time.
|
||||||
|
|||||||
@@ -1,2 +1,2 @@
|
|||||||
#/etc/cockpit/disallowed-users
|
#/etc/cockpit/disallowed-users
|
||||||
# List of users which are not allowed to login to Cockpit
|
# List of users which are not allowed to login to Cockpit
|
||||||
|
|||||||
@@ -20,4 +20,4 @@ create 0640 root utmp
|
|||||||
# packages drop log rotation information into this directory
|
# packages drop log rotation information into this directory
|
||||||
include /etc/logrotate.d
|
include /etc/logrotate.d
|
||||||
|
|
||||||
# system-specific logs may also be configured here.
|
# system-specific logs may also be configured here.
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install cramfs /bin/true
|
install cramfs /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install dccp /bin/true
|
install dccp /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install freevxfs /bin/true
|
install freevxfs /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install hfs /bin/true
|
install hfs /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install hfsplus /bin/true
|
install hfsplus /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install jffs2 /bin/true
|
install jffs2 /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install rds /bin/true
|
install rds /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install sctp /bin/true
|
install sctp /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install squashfs /bin/true
|
install squashfs /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install tipc /bin/true
|
install tipc /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install udf /bin/true
|
install udf /bin/true
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
install usb-storage /bin/true
|
install usb-storage /bin/true
|
||||||
|
|||||||
@@ -4,4 +4,4 @@ server pfv-netboot.knel.net
|
|||||||
restrict 127.0.0.1
|
restrict 127.0.0.1
|
||||||
restrict ::1
|
restrict ::1
|
||||||
interface ignore wildcard
|
interface ignore wildcard
|
||||||
interface listen 127.0.0.1
|
interface listen 127.0.0.1
|
||||||
|
|||||||
@@ -1,2 +1,2 @@
|
|||||||
# Uncomment to start SNMP subagent and enable CDP, SONMP and EDP protocol
|
# Uncomment to start SNMP subagent and enable CDP, SONMP and EDP protocol
|
||||||
DAEMON_ARGS="-x -c -s -e"
|
DAEMON_ARGS="-x -c -s -e"
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
/.*/ tsysrootaccount@knel.net
|
/.*/ tsysrootaccount@knel.net
|
||||||
|
|||||||
@@ -43,4 +43,4 @@ pass_persist .1.3.6.1.4.1.9.9.13.1.3 /usr/local/bin/temper-snmp
|
|||||||
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
||||||
|
|
||||||
# LLDP collection
|
# LLDP collection
|
||||||
master agentx
|
master agentx
|
||||||
|
|||||||
@@ -37,4 +37,4 @@ extend serial /usr/bin/sudo /usr/bin/cat /sys/firmware/devicetree/base/serial-nu
|
|||||||
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
||||||
|
|
||||||
# LLDP collection
|
# LLDP collection
|
||||||
master agentx
|
master agentx
|
||||||
|
|||||||
@@ -41,4 +41,4 @@ extend serial /usr/bin/sudo /usr/bin/cat /sys/devices/virtual/dmi/id/product_ser
|
|||||||
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
# smuxpeer .1.3.6.1.4.1.674.10892.1
|
||||||
|
|
||||||
# LLDP collection
|
# LLDP collection
|
||||||
master agentx
|
master agentx
|
||||||
|
|||||||
@@ -16,4 +16,4 @@ GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-group16-sha512-
|
|||||||
|
|
||||||
HostbasedAcceptedAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
|
HostbasedAcceptedAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
|
||||||
|
|
||||||
PubkeyAcceptedAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
|
PubkeyAcceptedAlgorithms sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
|
||||||
|
|||||||
@@ -17,4 +17,4 @@ PermitRootLogin prohibit-password
|
|||||||
ClientAliveInterval 300
|
ClientAliveInterval 300
|
||||||
ClientAliveCountMax 3
|
ClientAliveCountMax 3
|
||||||
AllowUsers root localuser subodev
|
AllowUsers root localuser subodev
|
||||||
LoginGraceTime 60
|
LoginGraceTime 60
|
||||||
|
|||||||
@@ -3,4 +3,4 @@ module(load="imklog") # provides kernel logging support
|
|||||||
#module(load="immark") # provides --MARK-- message capability
|
#module(load="immark") # provides --MARK-- message capability
|
||||||
|
|
||||||
*.* @tsys-librenms.knel.net:514
|
*.* @tsys-librenms.knel.net:514
|
||||||
:omusrmsg:EOF
|
:omusrmsg:EOF
|
||||||
|
|||||||
@@ -28,4 +28,4 @@
|
|||||||
#LineMax=48K
|
#LineMax=48K
|
||||||
#ReadKMsg=yes
|
#ReadKMsg=yes
|
||||||
#Audit=no
|
#Audit=no
|
||||||
Storage=persistent
|
Storage=persistent
|
||||||
|
|||||||
@@ -255,4 +255,4 @@ fi
|
|||||||
# enable command-not-found if installed
|
# enable command-not-found if installed
|
||||||
if [ -f /etc/zsh_command_not_found ]; then
|
if [ -f /etc/zsh_command_not_found ]; then
|
||||||
. /etc/zsh_command_not_found
|
. /etc/zsh_command_not_found
|
||||||
fi
|
fi
|
||||||
|
|||||||
Reference in New Issue
Block a user