felhom-host-install.sh 1.36.0 (pushed, NOT published — the tag waits for the operator's yes): the uninstall removes the root-SSH drop-in, a failed reload warns (R-982, D4, reviewed v2 patch)

2026-10-23 08:29:20 +02:00
parent a408256c7e
commit 83388c088a
3 changed files with 18 additions and 1 deletions
@@ -60,6 +60,7 @@ BUNDLE_DESTS = [
    "/etc/systemd/system/felhom-sshd.service",
    "/etc/felhom-oob.nft",
    "/etc/systemd/system/felhom-oob-nft.service",
+    "/etc/ssh/sshd_config.d/10-felhom-root-key-only.conf",   # R-982, operator ruling D4 (2026-10-22)
    "/etc/sudoers.d/felhom-op",
    "/etc/sudoers.d/felhom-agent",
 ]