chore(matic): Remove Falcon, Kolide, and install ISO

Merged
SH
3mo ago
+2-347

Summary

  • Remove CrowdStrike Falcon sensor packaging, init, and optional module import from named-hosts/matic
  • Remove Kolide launcher module and its Falcon compliance shim
  • Remove maticIso flake configuration and eval check (iso.nix)
  • Drop the Falcon-only Linux 6.18 kernel pin so matic tracks the default kernel

Changes

  • Delete named-hosts/matic/falcon*, kolide.nix, iso.nix
  • Simplify named-hosts/matic/default.nix (no falcon gate / kolide import / kernel pin)
  • Drop maticIso from flake.nix and eval-nixos-matic-iso from tests/eval.nix
  • Update coverage specs for removed falcon-init.sh

Testing

  • nix-instantiate --parse named-hosts/matic/default.nix
  • Grep confirms no remaining falcon/kolide/maticIso references

Host cleanup (after switch)

On matic, after make build HOST=matic && make switch HOST=matic (or boot+reboot):

sudo systemctl stop falcon-sensor.service kolide-launcher.service 2>/dev/null || true
sudo rm -f /etc/nixos/falcon-sensor.deb /etc/falcon-sensor.env
sudo chattr -i -R /opt/CrowdStrike 2>/dev/null || true
sudo rm -rf /opt/CrowdStrike /etc/kolide-k2

Generated with [Grok Build] by [Grok]

Summary by cubic

Remove CrowdStrike Falcon and Kolide from the matic host and delete the maticIso build. matic now tracks the default kernel with a simpler host config.

  • Refactors

    • Removed Falcon packaging/init, Kolide module, and ISO module; deleted related tests and coverage.
    • Dropped optional Falcon import and the Linux 6.18 kernel pin; updated flake.nix and eval to remove maticIso.
    • Simplified named-hosts/matic/default.nix; kept nix-ld enabled.

  • Migration

    • After switching, stop falcon-sensor and kolide-launcher and remove /opt/CrowdStrike, /etc/kolide-k2, and any Falcon artifacts under /etc (e.g., falcon-sensor.deb, falcon-sensor.env).