apply

type System interface {
	// Hostname returns the live hostname (post any previous SetHostname).
	Hostname() (string, error)
	// SetHostname commits the new name to durable config (/etc/hostname,
	// /etc/myname, /etc/rc.conf depending on OS) AND applies it to the
	// running kernel via the native command.
	SetHostname(name string) error

	// UserExists reports whether name appears in the passwd database.
	UserExists(name string) (bool, error)
	// CreateUser provisions a new user with the given primary shell ;
	// the user's primary group is left to OS defaults (per-OS useradd
	// behaviour). Groups in extraGroups are appended (created if
	// missing). passwordHash, when non-empty, becomes the crypt(3)
	// hash ; empty hash locks the password.
	CreateUser(name, shell, passwordHash string, extraGroups []string) error
	// AddUserToGroups appends extraGroups to an EXISTING user's
	// supplementary groups. Used on the reconcile path so re-runs
	// against an already-provisioned host catch up new group adds.
	AddUserToGroups(name string, extraGroups []string) error
	// AddAuthorizedKey appends key to user's ~/.ssh/authorized_keys
	// (creating the directory + file with the right perms+owner).
	// Re-adding an already-present key is a no-op.
	AddAuthorizedKey(user, key string) error

	// WriteFile lands content at path with the given mode + ownership.
	// Existing files are diffed ; only on differing content/mode/owner
	// is the file overwritten (atomic rename via tempfile).
	WriteFile(path, content, mode, owner, group string) error

	// RunShell executes cmd via the OS sh, returning stdout/stderr
	// blended on a non-zero exit. The implementation logs the command
	// + outcome at debug level.
	RunShell(cmd string) error
}