rsync -a preserved steel141's 664 perms; ssh on the Mac then refused
~/mac/config/ssh_homelab as an Include target, breaking all Mac-side ssh
including the backup transport. setup.sh now chmods it 600 after each rsync.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
networksetup -removenetworkservice fails on the sole PPP-port service and
aborted the whole run at exit 4 (before pmset/backup agent). Both it and the
GUI-domain launchctl bootstrap (flaky over SSH) are now best-effort with a
warn; the LaunchAgent plist auto-loads at next login regardless.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Piping a password into ssh -tt's pty raced and hung on the real run (worked in
a fast test, blocked for 14 min in practice). Replace with a temp
/etc/sudoers.d/mac-setup installed by _install_sudoers.sh (validated
before activation), removed on every exit path plus a 40-min on-Mac
self-destruct. setup.sh now fails fast if passwordless sudo is absent
instead of depending on a primed tty ticket.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Mortdecai