users

func Ensure ¶

func Ensure(exec executor.Executor, distro *detect.DistroInfo, log *logging.Logger) error

Ensure creates all NFTBan system users and groups idempotently.

Creates (in order):

1. system groups: nftban, nftban-auditor, nftban-panel, suricata
2. nftban system user (primary group: nftban, home: /var/lib/nftban, shell: nologin)
3. adds root to the nftban group (for config-read access)

Idempotent: each step skips creation if the entity already exists. Safe to run on hosts where package installs previously created the same entities.

Returns an error only if a creation command fails on a missing entity. Distro dispatch uses distro.ID (normalized by detect.DetectDistro).