feat: ISO service hardening — rc.d + log rotation + layout docs #7

Merged

clawdie merged 1 commit from feat/iso-service-hardening into main

2026-05-31 16:49:01 +02:00

clawdie commented

2026-05-31 16:48:58 +02:00

Owner

Post-start health check, shutdown cleanup, newsyslog rotation, staging script updates, service layout docs.

clawdie added 1 commit 2026-05-31 16:48:59 +02:00

feat: ISO service hardening — rc.d + log rotation + layout docs 3235f8c00e

Hardens the FreeBSD service for production readiness:

- rc.d: post-start socket health check (waits up to 10s), post-stop
  socket cleanup, 'health' extra command that probes socket with
  a status command via nc.

- newsyslog: log rotation at 1MB, 7 compressed archives,
  colibri:colibri ownership.

- staging: copies newsyslog config into image root, updated
  staging report to list all installed files.

- docs/ISO-SERVICE-LAYOUT.md: filesystem layout, boot/shutdown
  behavior, startup validation commands, config knobs, secrets
  policy, log rotation details.

Shell syntax: sh -n clean on both scripts.
Workspace tests: all green.