Issues

• Post-release manual steps for v0.29.0

  documentationmaintainer-only
  lacs-project/sysknife#740 · Filter by author github-actions opened on Oct 29, 2026
  

• SetNtp: one live plan in three omits enabled, and planning fails with no correction turn

  bughelp wantedmedium
  lacs-project/sysknife#737 · Filter by author vladimirrott opened on Oct 29, 2026

• ubuntu-vm.sh: password aging on the login user locks the harness out of its VM weeks later

  bughelp wantedmedium
  lacs-project/sysknife#736 · Filter by author vladimirrott opened on Oct 29, 2026

• OpenSSF Best Practices: close the Silver gaps, then decide on Gold

  enhancementmaintainer-onlytedious
  lacs-project/sysknife#731 · Filter by author vladimirrott opened on Oct 29, 2026
  

• Publish crates through crates.io trusted publishing and retire CARGO_REGISTRY_TOKEN

  enhancementmaintainer-onlymedium
  lacs-project/sysknife#730 · Filter by author vladimirrott opened on Oct 29, 2026
  

• Audit forwarding sends privileged-action records over plain UDP to any host

  enhancementmaintainer-onlymedium
  lacs-project/sysknife#728 · Filter by author vladimirrott opened on Oct 29, 2026
  

• Reach 90 % statement coverage and measure branch coverage

  enhancementmaintainer-onlytedious
  lacs-project/sysknife#727 · Filter by author vladimirrott opened on Oct 29, 2026
  

• Release binaries are not reproducible: a clean rebuild of v0.28.0 differs from the release

  enhancementhardmaintainer-only
  lacs-project/sysknife#726 · Filter by author vladimirrott opened on Oct 29, 2026
  

• Add the OpenSSF Best Practices badge to README.md within 48 hours of the grant

  blockeddocumentationeasymaintainer-only
  lacs-project/sysknife#725 · Filter by author vladimirrott opened on Oct 29, 2026
  

• ROADMAP.md has no time horizon and cites a v0.4.0 milestone

  documentationeasymaintainer-only
  lacs-project/sysknife#719 · Filter by author vladimirrott opened on Oct 29, 2026
  

• Write GOVERNANCE.md: roles, decisions, who holds access, and continuity

  blockeddocumentationmaintainer-onlymedium
  lacs-project/sysknife#718 · Filter by author vladimirrott opened on Oct 29, 2026
  

• Require two-factor authentication for lacs-project members

  easyenhancementmaintainer-only
  lacs-project/sysknife#717 · Filter by author vladimirrott opened on Oct 29, 2026
  

• publish-mcp.yml runs an unpinned mcp-publisher with id-token: write, and pinned-dependencies.test.sh never reads that file

  bugclaimedeasy
  lacs-project/sysknife#702 · Filter by author vladimirrott opened on Oct 29, 2026
  1

• ListFailedUnits: list failed systemd units of every type in one call

  easyenhancementgood first issue
  lacs-project/sysknife#683 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• InstalledKernels: list installed kernels, the running one, and /boot headroom

  easyenhancementhelp wanted
  lacs-project/sysknife#682 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• NeedrestartList: show which services need a restart, without restarting them

  enhancementhelp wantedmedium
  lacs-project/sysknife#681 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• UnattendedUpgradesStatus: report whether automatic patching runs on schedule

  easyenhancementhelp wanted
  lacs-project/sysknife#680 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• ProSecurityStatus: report security-update coverage as structured data from pro api

  enhancementhelp wantedmedium
  lacs-project/sysknife#679 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• Fleet: group per-host previews by what the operator would approve (a pure function)

  enhancementhelp wantedmedium
  lacs-project/sysknife#678 · Filter by author vladimirrott opened on Oct 26, 2026
  2

• ADR: confirm-or-revert for actions that can lock the operator out of a host

  enhancementhardmaintainer-only
  lacs-project/sysknife#676 · Filter by author vladimirrott opened on Oct 26, 2026

• A propose_plan call cut off at the token limit is retried three times as a parse error

  bugeasyhelp wanted
  lacs-project/sysknife#675 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• No provider HTTP client has a timeout, so sysknife_plan over MCP can hang forever

  bughelp wantedmedium
  lacs-project/sysknife#674 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• A remember or forget call in the same turn as propose_plan is silently dropped

  bugclaimedeasyhelp wanted
  lacs-project/sysknife#673 · Filter by author vladimirrott opened on Oct 26, 2026
  4

  

• Five planner query tools can never succeed: they send no username to actions that require one

  bugeasyhelp wanted
  lacs-project/sysknife#671 · Filter by author vladimirrott opened on Oct 26, 2026
  1

• GetAuthorizedKeys reads /home/<user> while Add and Remove use the account's real home, and Add fails without ~/.ssh

  bughelp wantedmedium
  lacs-project/sysknife#670 · Filter by author vladimirrott opened on Oct 26, 2026
  1