Excellent work to integrate CARP configuration. If it passes black, only a slight comment/section titles change and it's ready to land.

If we trigger the script through devd, we can provide a .conf configuration file in /usr/local/etc/devd.

Works like a charm:

(ah you did it: {{ dirs.bin }}/acmesh-dovecot_postfixReload is well without the extension in D4003)

Oh just I notice here the .sh at line 17, but not at line 16.

Configured at OVH level.

Test to deploy this final version on Complector with a test=True to see if it's still no-op.

It has been asserted a LDAP is the easiest deployment road for Keycloak operation, supported out of the box, without any custom development needed. If we store users in a MariaDB or PostgreSQL database, we need custom development to explain to Keycloak how to use it.

One of the important thing to note is Keycloak federates user information from external storage.

I'd suggest to use node.resolve_network to find public IP address.

Done separately as part of early 2026 commits.

Superseded by the current stage of the project.

I've discovered X option in chmod that solves the issue nicely, by setting executable bit only where needed (already executable files and directories), so we can keep the find approach and stay safe for whitespaces.

About shellcheck linter issues.

Duplicate of D3976.

Duplicate of D3976.

OK, nice work, ready.

To deploy to all IntraNought VMs.

Virtually OK, but one critical flag missing from pillarize for ongoing IPv6 connectivity

For context, when we apply Salt configuration, it currently checks if ipv6-setup-tunnel is running.

@Duranzed As a follow-up for the Terminator plugin, that one could be interesting too.

Plugin works, but now we need to polish the two README files.

Configuration logic. Looks good to me.

Service part OK.

Per https://cbea.ms/git-commit/ titles of your commit messages should be much shorter.

Pillar OK.

No link to a task in description?

OK for Wolfplex too.

Applied to WindRiver.

Request authenticated through IRC + DevCentral commit + prior knowledge of upcoming commit irl + familiar pattern of activity.

@yousra I think pip install salt==3006.8 should work, with dependencies.

Caught this issue during dependencies test.

Salt dependencies are reasonable enough to add to requirements.txt: