wan e93861d2c5 015: run secrets/userlist drift checks as root only ...

Password file lives in a 700 dir and userlist is 640 postgres, so
non-root status false-DRifted right after a clean apply. Check them
only as root; non-root status still verifies db/ini/tls/listener.

2026-08-31 22:35:17 +09:00

..

001-create-swap.sh

status: fix false DRIFT for non-root invocations

2026-08-31 16:48:06 +09:00

002-disable-networkd-dispatcher.sh

add per-migration status case (read-only drift check), integrate into sysmig status

2026-08-31 16:46:21 +09:00

003-purge-exim4.sh

add per-migration status case (read-only drift check), integrate into sysmig status

2026-08-31 16:46:21 +09:00

004-purge-haveged.sh

add per-migration status case (read-only drift check), integrate into sysmig status

2026-08-31 16:46:21 +09:00

005-mount-pgdata.sh

status: fix false DRIFT for non-root invocations

2026-08-31 16:48:06 +09:00

006-install-postgres.sh

add per-migration status case (read-only drift check), integrate into sysmig status

2026-08-31 16:46:21 +09:00

007-postgres-admin-role.sh

add per-migration status case (read-only drift check), integrate into sysmig status

2026-08-31 16:46:21 +09:00

008-create-db-iwanhae.sh

add per-migration status case (read-only drift check), integrate into sysmig status

2026-08-31 16:46:21 +09:00

010-tune-postgres.sh

010: fix verification - compare pg_settings raw values, not SHOW output

2026-08-31 22:24:38 +09:00

011-postgres-observability.sh

011: observability - pg_stat_statements, slow-log, io timing

2026-08-31 22:21:53 +09:00

012-tune-cpu.sh

012: cap parallelism and disable jit for shared 2 vCPU

2026-08-31 22:21:53 +09:00

013-install-pgbouncer.sh

015: remote access - ocrt_dev db over TLS+SCRAM via PgBouncer

2026-08-31 22:34:32 +09:00

015-remote-access.sh

015: run secrets/userlist drift checks as root only

2026-08-31 22:35:17 +09:00