harkaq: cpp/getent en las sondas del provisioning (coherente con base.policy)

Faltaba persistir en harkaq-farm-setup.sh las 2 sondas que añadí a base.policy
al revisar needs-review (cpp=frontend gcc, getent=NSS musl). Sin esto, un worker
nuevo derivaría una base.policy sin ellas y volvería a marcar irreducibles
falsos (dhcpcd/strace).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

c6ff858f236196fd9a88928e3fbaaa62776dd188 · ruwaq sergio · 2026-07-16T19:22:39Z (3 killa ñawpaq) · tayta bf840915f · kay commitpi sach'ata qhaway

Semántico sayk'uy

Mana ima sutichaypas t'ikrakurqanchu: qillqalla, yachachiylla utaq willaylla t'ikrakurqan.

1 qillqakuna · +1 −1

scripts/harkaq/harkaq-farm-setup.sh +1 −1

diff --git a/scripts/harkaq/harkaq-farm-setup.sh b/scripts/harkaq/harkaq-farm-setup.sh
index 993eedce..b3ccdccc 100755
--- a/scripts/harkaq/harkaq-farm-setup.sh
+++ b/scripts/harkaq/harkaq-farm-setup.sh
@@ -51,7 +51,7 @@ $SSH "root@$IP" "cd $REMOTE &&
     printf 'ro /usr/lib/os-release\n' >> /root/.cache/harkaq/base.policy
     # Sondas de compilador de Alpine: se DENIEGAN y se clasifican (D3). Concederlas dejaría a
     # zig/configure usar el gcc de Alpine por detrás — justo lo que la campaña matar-gcc caza.
-    for p in /usr/bin/gcc /usr/bin/ldd /usr/bin/c89 /usr/bin/c99; do
+    for p in /usr/bin/gcc /usr/bin/ldd /usr/bin/c89 /usr/bin/c99 /usr/bin/cpp /usr/bin/getent; do
         printf '# expect %s\n' \"\$p\" >> /root/.cache/harkaq/base.policy
     done
     echo \"   runtime base: \$(grep -c '^ro ' /root/.cache/harkaq/base.policy) reglas + \$(grep -c '^# expect' /root/.cache/harkaq/base.policy) esperadas\""