chore(matic): Remove Falcon, Kolide, and install ISO

flake.nix

@@ -149,10 +149,6 @@
                 inherit inputs;
                 username = "skakinoki";
               };
-              maticIso = import ./named-hosts/matic/iso.nix {
-                inherit inputs;
-                username = "skakinoki";
-              };
               viper = import ./named-hosts/viper {
                 inherit inputs;
                 username = "shunkakinoki";

named-hosts/matic/default.nix

@@ -3,9 +3,6 @@
   username,
   ...
 }:
-let
-  falconDebExists = builtins.pathExists /etc/nixos/falcon-sensor.deb;
-in
 import ../../hosts/nixos {
   inherit inputs username;
   hostname = "matic";
@@ -27,9 +24,6 @@ import ../../hosts/nixos {
     # Shared keyd config and application mapper wiring
     ../../config/keyd/default.nix
 
-    # Kolide launcher
-    ./kolide.nix
-
     # System configuration
     (
       {
@@ -52,9 +46,6 @@ import ../../hosts/nixos {
           "tpm2-device=auto"
         ];
 
-        # Pin kernel to 6.18 for CrowdStrike Falcon compatibility (RFM on 6.19)
-        boot.kernelPackages = pkgs.linuxPackages_6_18;
-
         # Filesystem hardening
         boot.kernel.sysctl = {
           "fs.protected_regular" = 2;
@@ -359,7 +350,7 @@ import ../../hosts/nixos {
           options mt7925e disable_aspm=1
         '';
 
-        # Enable nix-ld for running dynamically linked binaries (CrowdStrike, Kolide, etc.)
+        # Enable nix-ld for running dynamically linked binaries
         programs.nix-ld.enable = true;
         programs.nix-ld.libraries = with pkgs; [
           curl
@@ -577,6 +568,5 @@ import ../../hosts/nixos {
           };
       }
     )
-  ]
-  ++ (if falconDebExists then [ ./falcon.nix ] else [ ]);
+  ];
 }

spec/coverage_spec.sh

@@ -177,10 +177,6 @@ It 'has spec file for home-manager/modules/uv-globals/install-uv-globals.sh'
 The path "spec/uv_globals_spec.sh" should be exist
 End
 
-It 'has spec file for named-hosts/matic/falcon-init.sh'
-The path "spec/falcon_init_spec.sh" should be exist
-End
-
 It 'has spec file for named-hosts/matic/pam-gnome-keyring-tpm-unlock.sh'
 The path "spec/pam_gnome_keyring_tpm_unlock_spec.sh" should be exist
 End
@@ -477,7 +473,6 @@ named-hosts/kyber/activate-backup-files.sh
 named-hosts/kyber/activate-ip-forwarding.sh
 named-hosts/kyber/rekey-galactica.sh
 named-hosts/kyber/setup.sh
-named-hosts/matic/falcon-init.sh
 named-hosts/matic/pam-gnome-keyring-tpm-unlock.sh
 nix-darwin/config/keyboard/apply-hid-user-key-mappings.sh
 nix-darwin/services/pmset-battery-policy/power-policy.sh