From 4fac9570ecf4a2165dc5ecb3c3d31ab8a4eb5e92 Mon Sep 17 00:00:00 2001
From: anti <samuel@securejump.cl>
Date: Fri, 10 Apr 2026 16:11:18 -0400
Subject: [PATCH] chore: add arche-test.ini OS fingerprint smoke-test fleet

---
 arche-test.ini | 40 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 arche-test.ini

diff --git a/arche-test.ini b/arche-test.ini
new file mode 100644
index 0000000..401e09f
--- /dev/null
+++ b/arche-test.ini
@@ -0,0 +1,40 @@
+# arche-test.ini
+# OS fingerprint smoke-test fleet.
+#
+# One group per OS family, each spinning up 2 deckies.
+# Deploy with:
+#   sudo .venv/bin/decnet deploy --config arche-test.ini --dry-run
+#   sudo .venv/bin/decnet deploy --config arche-test.ini --interface eth0
+#
+# After deploy, verify with:
+#   sudo nmap -O --osscan-guess <ip>
+#   sudo p0f -i <iface> -p
+# ---- Linux (TTL 64, timestamps on, ECN offer) ----
+[os-linux]
+nmap_os=linux
+services=ssh,http
+amount=2
+
+# ---- Windows (TTL 128, timestamps off, no ECN) ----
+[os-windows]
+nmap_os=windows
+services=smb,rdp
+amount=2
+
+# ---- BSD (TTL 64, timestamps on, no ECN) ----
+[os-bsd]
+nmap_os=bsd
+services=ssh,http
+amount=2
+
+# ---- Embedded (TTL 255, timestamps off, no SACK, no window scaling) ----
+[os-embedded]
+nmap_os=embedded
+services=snmp
+amount=2
+
+# ---- Cisco (TTL 255, timestamps off, no SACK, ip_no_pmtu_disc on) ----
+[os-cisco]
+nmap_os=cisco
+services=snmp
+amount=2