ks-gen is now public!

[SupremeCommanderHedgehog]

ks-gen is now public — a remote-safe DISA STIG kickstart generator for AlmaLinux 9.

Given a small YAML host config it emits a complete ks.cfg that applies the upstream STIG profile via openscap remediation at install time, stays remote-safe by default (won't lock you out of a headless box), substitutes civilian text for DoD-specific banners/cert bundles/time servers, and writes an exceptions.md audit report naming every XCCDF rule it disables and why.

• Latest release (v0.9.0): https://github.com/SupremeCommanderHedgehog/ks-gen/releases/tag/v0.9.0
• README & quickstart: https://github.com/SupremeCommanderHedgehog/ks-gen
• Security policy: https://github.com/SupremeCommanderHedgehog/ks-gen/security/policy

Issues and ideas welcome here in Discussions.