diff options
| author | Craig Jennings <c@cjennings.net> | 2026-07-07 21:32:04 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-07-07 21:32:04 -0500 |
| commit | e6b9a0a54355d489ba6bbeb5c742965444128307 (patch) | |
| tree | 1c737850ce6059cc612e831ca09e833d1eca74ab /tests/safe-rm-rf | |
| parent | 747a9df22615927adbffb332cbcab721672b98e2 (diff) | |
| download | archsetup-e6b9a0a54355d489ba6bbeb5c742965444128307.tar.gz archsetup-e6b9a0a54355d489ba6bbeb5c742965444128307.zip | |
feat: Phase 3 threshold keys, arch-audit dep, btrfs scrub timer
The thresholds TOML gains packages.keyring_warn_days, the [security] cve_min_warn floor, [systemd] expected_timers_extra, and two curation tables: kept_orphans (deliberate keeps the orphan count skips) and qkk_known (fnmatch paths for -Qkk mismatches that are config knowledge, like the resolver symlink and the pacman-contrib file this script edits itself).
The installer now pulls arch-audit (the console's CVE source) and enables btrfs-scrub@-.timer on btrfs installs. Ratio had the scrub timer enabled out-of-band, so a fresh install would have warned "missing" forever on the console's maintenance-timers check. The todo Phase 3 task closes as a dated log entry.
Diffstat (limited to 'tests/safe-rm-rf')
0 files changed, 0 insertions, 0 deletions