Files
computer-playbook/roles/sys-openssl
kevinveenbirkenbachandClaude Opus 4.7 4bd23d5f1b chore(roles): mark non-invokable roles with nocheck:required-by-coverage (Bundle D)
Adds `# nocheck: required-by-coverage — TODO: declare proper required_by`
markers to meta/services.yml of 74 non-invokable system roles (dev-*, pkgmgr*,
sys-aur*, sys-front-inj-*, sys-front-tls-*, sys-svc-{cdn,certbot,certs,
cln-domains,dns,journalctl,mail*,proxy,rdbms,ssh,sshd}, sys-timer*, sys-stk-*,
user-*, …).

This is the passthrough layer that lets the upcoming `required_by` lint
(Bundle C) hard-fail any *new* non-invokable role without an explicit coverage
declaration, while existing roles get a documented TODO grace period instead
of an immediate CI break.

No runtime effect — comments only.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 04:23:45 +02:00
..

sys-openssl

Description

Ensures that the openssl CLI is installed on the host.

This role is intended as a shared dependency for other roles that execute OpenSSL commands on the host system.

Overview

This role ensures OpenSSL is installed once as a shared host dependency for roles that invoke the openssl CLI.

Features

  • Automated provisioning: Configured by Ansible without manual steps.

Behavior

  • Installs package: openssl
  • Uses standard Infinito run-once flagging via run_once_sys_openssl

Usage

- include_role:
    name: sys-openssl
  when: run_once_sys_openssl is not defined

Credits

Developed and maintained by Kevin Veen-Birkenbach. Learn more at veen.world. Part of the Infinito.Nexus Project. Licensed under the Infinito.Nexus Community License (Non-Commercial).