Replaces the raw package modules at 76 call sites with package_install, moves each role's distribution mapping into its own meta/packages.yml, and turns the inventory PACKAGES variable from source-keyed literal names into a list of declared package ids. The lint that forbids the raw modules is enabled here, because the migration burns it down from 76 offenders to zero. Removes sys-aur, sys-aur-install and sys-package. The AUR build user, the passwordless pacman rule and the inventory-driven install are part of the plan the action plugin executes, so the roles no longer carry them. Declaring the mappings surfaced breakage the raw modules had hidden: on Debian the `which` binary comes from debianutils, jrnl is in no Debian or Ubuntu suite, chromium-browser is absent from Debian stable, JDK 11 is unobtainable on RedHat, wireguard had no RedHat branch at all, qbittorrent was built from the AUR although Arch ships it in extra, and desk-docker installed a Docker variant that conflicts with the one sys-svc-container installs. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
sys-daemon
Description
Role to reset and configure the systemd manager for Infinito.Nexus.
It ensures a clean state of the manager configuration and applies default timeout values.
Overview
- Purges the systemd manager drop-in directory if requested.
- Validates all active unit files before reload/reexec.
- Applies default timeout values for systemd manager behavior.
- Provides handler-based reload/reexec for systemd.
Cosmos
The diagram places sys-daemon in the Infinito.Nexus cosmos: the components it deploys (capabilities), the central services it consumes (dependencies), and its outward reach (federation and bridged external networks).
flowchart LR
subgraph role [sys-daemon 💻]
svc_daemon["daemon"]
end
Solid 1:1 edges are fixed relationships; dashed 0..1 edges are conditional (enabled only in matching deployments). Node markers show the role's deploy modes (💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly turned off, and ⚙️ an Ansible role dependency declared in meta/main.yml.
Features
- Drop-in Purge: Optionally remove
/etc/systemd/system.conf.dcontents. - Manager Defaults: Deploys custom timeouts via
timeouts.conf. - Validation: Uses
systemd-analyze verifybefore reload. - Integration: Triggers
daemon-reloadordaemon-reexecsafely.
Further Resources
Credits
Implemented by Kevin Veen-Birkenbach. Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).