view /declarative
Declarative modules
Schema-driven reference
Strict building blocks describe desired state without shell, arbitrary argv, eval, loops, or inline secrets.
OS facts
Read a bounded operating-system profile for later checks.
File facts
Inspect a path without following an untrusted symlink.
Assertion
Turn collected facts into explicit operator-facing checks.
Directory
Converge a protected directory and verify its metadata.
File
Manage file content from a sealed asset or restricted template.
APT packages
Converge a bounded package list through trusted apt executables.
Systemd unit
Converge active and enabled state, with deferred handlers.
Sysctl setting
Converge one kernel value through an ohtools-owned drop-in.
No modules match these filters.