Tommy
2da19bf47e
Make stamp before editting ld.so.preload
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 06:04:40 -07:00
Tommy
a9871c9452
Daily updates
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 05:57:57 -07:00
Tommy
cc7b76262e
Simplify removal
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 05:27:59 -07:00
Tommy
5369e16d8c
Update module blacklist URL
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 04:44:14 -07:00
Tommy
1bab888069
Update butane spec
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 04:37:48 -07:00
Tommy
931620b545
Repo cleanup
...
- Splited configs with and without unbound
- Removed unnecessary karg file
- Removed environment variable to make nano the default editor
- Removed gvisor KVM runtime
- No longer block dhcpv6-client: DHCP6 can be done securely in a Proxmox environment
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 04:18:35 -07:00
Tommy
44f68f326e
Daily Updates
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 03:19:52 -07:00
Tommy
c25323a8b6
coreos-cni-networking-check no longer exists
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-06-02 03:05:10 -07:00
Tommy
9471469cca
Remove FCOS 40 -> 41 notes
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-05-28 18:19:28 -07:00
Tommy
34046ac8f9
Update kargs
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-05-28 18:19:01 -07:00
Tommy
776c3ef8d3
Update sshd override location
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-04-20 23:20:12 -07:00
Tommy
3b649130a9
Update chrony config location
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-04-18 14:12:03 -07:00
Tommy
7278fd8753
Update blacklist file name
2025-01-10 15:22:47 -07:00
Tommy
b609589ea1
Remove unnecessary comment
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-01-10 15:20:14 -07:00
Tommy
32a770c5a0
Reduce overrides
2025-01-10 15:18:20 -07:00
Tommy
8ec5731965
Repo clean up
2025-01-10 15:14:10 -07:00
Tommy
144bf15b74
Update conflict resolution instruction
...
Signed-off-by: Tommy <contact@tommytran.io>
2025-01-10 15:06:38 -07:00
Tommy
b08e7b7aad
Remove exytra firmware packages
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-12-19 20:29:38 -07:00
Tommy
a50917bf04
Update to FCOS 41
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-12-19 20:20:40 -07:00
Tommy
4ef166f60f
Fix systemd ssh override
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-15 14:39:46 -07:00
Tommy
89d390ca5b
Update Ignition file
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-08 14:33:04 -07:00
Tommy
cac37c848b
Cleaner gvisor-updater ExecStart
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-08 14:05:51 -07:00
Tommy
7a207ba742
Fix docker-compose-updater dependency
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-09-27 16:31:58 -07:00
Tommy
46f5a8070d
Fix scheduling for docker-compose-updater@.service
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-09-26 19:20:35 -07:00
Tommy
74acd37ef2
Update gvisor updater service
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-09-26 19:00:34 -07:00
Tommy
18593b03fd
Update package removal list
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-09-24 15:37:01 -07:00
Tommy
ec61164648
Update modprobe URL
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-26 05:10:01 -07:00
Tommy
c04b7a84f9
Update after Blue-OCI rebuilds
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-21 20:03:39 -07:00
Tommy
18d5d4b591
Update on Tuesday and Friday
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-05 06:00:17 -07:00
Tommy
b2df161d15
Update gvisor updater
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-28 22:45:25 -07:00
Tommy
bb8041a73a
New gvisor-updater.service
2024-06-28 16:13:33 -07:00
Tommy
b674e55d42
Unbound systemd hardening moved to Linux-Setup-Scripts
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-25 22:32:16 -07:00
Tommy
7f470747b9
Unbound listen on ::1
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-24 02:34:55 -07:00
Tommy
540f5f1774
Do not remove resolved
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-21 15:09:58 -07:00
Tommy
14446d8c6b
No Unbound on UTM
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-21 15:07:58 -07:00
Tommy
0d634e5051
Unbound for container
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-21 15:06:09 -07:00
Tommy
d88311198c
Switch to UTC
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-20 05:21:05 -07:00
Tommy
7fad7ab23b
Panic on oops
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-17 01:19:59 -07:00
Tommy
4eef6410bb
Remove Divested PGP key
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-09 05:35:45 -07:00
Tommy
551814f15c
Remove divested repo
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-09 05:35:13 -07:00
Tommy
e49c2c5ca4
Rename server-blacklist to vps-blacklist
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-07 04:51:45 -07:00
Tommy
d9bd0f9563
Use secureblue hardenedmalloc
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-06 22:54:40 -07:00
Tommy
37ab9797c7
Disable coredump in systemd as well
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-04 14:09:50 -07:00
Tommy
71d681ff8b
Use custom config and SecureBlue whenever possible
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-04 13:58:01 -07:00
Tommy
1a38e16151
Remove bind overrides
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-31 14:24:56 -07:00
Tommy
13a4d89a69
Better regex for kernel module blacklist
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-31 13:49:45 -07:00
Tommy
64efef581c
Add escapes for regex
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-31 13:37:30 -07:00
Tommy
d06e7489e9
Beter regex
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-31 13:16:38 -07:00
Tommy
f9823a43e4
Better regex
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-31 02:36:47 -07:00
Tommy
0eda27d343
Update overrides for F40
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-28 16:21:59 -07:00