Stable Branch add cmsec-prewarm.sh + cpcheck.inc cronsetup in 132.00stable

add cmsec-prewarm.sh + cpcheck.inc cronsetup in 132.00stable

Auto-installs a 12h cron entry refreshing the cmsec cache before its
24h TTL expires, so dmotd.sh's cmsec_checks() hits warm cache instead
of paying the cold-cache cost (dnf refresh + KCONFIG probes + kcarectl
5s timeout). Deploys via the inc/cpcheck.inc cronsetup pattern — fresh
installs and existing cmupdate paths both get the entry silently on
the next centmin.sh run.

---

Does NOT close state-key invalidation gaps (kernel reboot, livepatch,
OS conversion) — admins can run the script manually after those events.

Changes:
- tools/cmm-security/cmsec-prewarm.sh: cmsec.sh --no-cache --dmotd --json wrapper with flock
- inc/cpcheck.inc: cmsec_prewarm_cronsetup() + 2 dispatcher calls (17 */12 * * *)

Continue reading...

132.00stable branch

• Branch: https://github.com/centminmod/centminmod/tree/132.00stable
• Commit History: https://github.com/centminmod/centminmod/commits/132.00stable