diff options
| author | Craig Jennings <c@cjennings.net> | 2026-07-07 21:32:04 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-07-07 21:32:04 -0500 |
| commit | c1cc4b375078584a201e8622a78efc8a9403cbd8 (patch) | |
| tree | 120a15fcf431a4ae8182041ea78bcbc2f39f4408 /assets/outbox/rustup.txt | |
| parent | 74b5b58a1476e2fa107b5e00dd358c0d1b4b174c (diff) | |
| download | archsetup-c1cc4b375078584a201e8622a78efc8a9403cbd8.tar.gz archsetup-c1cc4b375078584a201e8622a78efc8a9403cbd8.zip | |
feat: Phase 3 threshold keys, arch-audit dep, btrfs scrub timer
The thresholds TOML gains packages.keyring_warn_days, the [security] cve_min_warn floor, [systemd] expected_timers_extra, and two curation tables: kept_orphans (deliberate keeps the orphan count skips) and qkk_known (fnmatch paths for -Qkk mismatches that are config knowledge, like the resolver symlink and the pacman-contrib file this script edits itself).
The installer now pulls arch-audit (the console's CVE source) and enables btrfs-scrub@-.timer on btrfs installs. Ratio had the scrub timer enabled out-of-band, so a fresh install would have warned "missing" forever on the console's maintenance-timers check. The todo Phase 3 task closes as a dated log entry.
Diffstat (limited to 'assets/outbox/rustup.txt')
0 files changed, 0 insertions, 0 deletions