Adds colibri_daemon_require_secured knob (default NO). When enabled, the daemon refuses to autospawn an agent until /var/db/colibri/.secured exists. This interlock pairs with the clawdie-iso firstboot password gate (#139): the gate writes .secured after the operator sets passwords, the daemon reads it to gate autospawn + node_register. Must run AFTER the provider.env block — otherwise COLIBRI_AUTOSPAWN=YES from provider.env would override the NO set here. Defaults to NO so deployed/disk hosts (which never run the firstboot gate) are unaffected. Paired with: clawdie-iso PR #139 (force-root-password-on-first-boot). |
||
|---|---|---|
| .. | ||
| freebsd | ||
| mother | ||