unkinben 5e8cff921c vault: keep systemd-tmpfiles from reaping openbao plugin sockets ...

go-plugin gives each secrets plugin a control socket at /tmp/pluginNNN.
The daily systemd-tmpfiles-clean deletes /tmp files older than the OS
policy, which severs the socket of a long-lived plugin while its process
keeps running. Every request then fails with rpc Unavailable / dial unix
/tmp/pluginNNN: no such file, until a plugin reload respawns it. This hit
the litellm engine (terraform-vault#112) but the risk is shared by every
OpenBao plugin (gpg, rancher, gitea, ...).

Ship a tmpfiles.d exclude (x /tmp/plugin*) on all vault servers so plugin
sockets survive the cleaner. Takes effect on the next clean, no restart.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT

2026-08-06 22:31:58 +10:00

..

accounts

feat: enable managing root password (#429)

2025-12-28 20:12:12 +11:00

almalinux

feat: enable network manager on el9 (#189)

2024-12-08 19:11:54 +11:00

apt

feat: prepare puppet for debian

2024-04-13 22:34:28 +10:00

base

fix: manage git user (#339)

2025-07-06 11:27:35 +10:00

ceph

feat: add ceph service management profiles and facts (#459)

2026-04-07 19:02:17 +10:00

cloudinit

feat: manage cloudinit

2023-11-17 22:17:24 +11:00

cobbler

Fix cobbler.main.unkin.net CNAME to resolve on k8s DNS (#491)

2026-07-20 23:17:12 +10:00

consul

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

dhcp

benvin/dhcp_failover (#327)

2025-06-29 13:36:16 +10:00

dns

dns: exclude k8s/LB ranges from dns-updater; track latest (#485)

2026-07-18 13:58:43 +10:00

edgecache

feat: stop manage nginx repo (#312)

2025-06-09 14:18:30 +10:00

etcd

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

fedora

os/Fedora: add Fedora 44 support for the base role (#497)

2026-07-28 21:42:32 +10:00

firewall

feat: add firewalld management profile

2023-10-22 19:54:10 +11:00

firstrun

chore: add sysadmin user after first run (#242)

2025-04-02 20:27:11 +11:00

gitea

feat: act runner updates (#432)

2026-01-03 21:51:47 +11:00

haproxy

haproxy::dns: fully-qualify halb CNAME targets (#489)

2026-07-19 01:37:06 +10:00

helpers

feat: sign ssh host keys

2024-06-01 22:51:42 +10:00

jupyter

feat: update jupyterlab container (#209)

2025-01-04 14:10:44 +11:00

ldap

feat: add users/services/groups

2024-07-01 22:54:22 +10:00

media

chore: minor jellyfin updates (#300)

2025-05-27 19:55:55 +10:00

metrics

feat: upgrade grafana from default to 13.0.2 (#470)

2026-06-06 23:46:16 +10:00

minio

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

nginx

fix: ensure nginx restarts on certificate changes (#402)

2025-09-29 22:38:00 +10:00

nomad

feat: add node_pools (#317)

2025-06-15 17:43:19 +10:00

ntp

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

ovirt

feat: add ovirt roles

2024-03-16 16:43:12 +11:00

pki

feat: certbot reorg

2024-07-08 22:33:11 +10:00

postfix

refactor: recreate profiles::postfix::gateway with parameterization and templates (#416)

2025-11-01 17:26:00 +11:00

proxmox

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

puppet

puppetserver: auto-restart JVM when its binaries are replaced by an upgrade (#499)

2026-07-30 20:50:30 +10:00

qemu

feat: manage qemu-agent

2023-11-17 22:25:43 +11:00

reposync

feat: stop manage nginx repo (#312)

2025-06-09 14:18:30 +10:00

rundeck

feat: add rundeck runner user

2024-08-06 22:33:32 +10:00

selinux

neoloc/mpls_ldp_frr (#255)

2025-04-24 16:51:31 +10:00

sql

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

ssh

feat: lxc updates (#258)

2025-04-24 23:03:01 +10:00

stalwart

feat: add SMTP submission listener and enhance stalwart configuration (#425)

2025-11-09 18:48:06 +11:00

storage

feat: update settings for ceph (#298)

2025-05-25 20:22:00 +10:00

vault

vault: keep systemd-tmpfiles from reaping openbao plugin sockets

2026-08-06 22:31:58 +10:00

yum

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

base.pp

Add profiles::puppet::migrate: repoint VM agents onto puppet-on-k8s (#493)

2026-07-25 00:04:11 +10:00

defaults.pp

feat: migrate puppet-agent to openvox (#408)

2025-10-18 19:11:38 +11:00

packages.pp

feat: add rundeck profile

2024-07-28 01:51:41 +10:00