Not sure if I'm reinventing the wheel, but incidentally I've been working on this lately: https://github.com/CyberShadow/aconfmgr https://github.com/CyberShado

Not sure if I'm reinventing the wheel, but incidentally I've been working on this lately: https://github.com/CyberShadow/aconfmgr https://github.com/CyberShadow/aconfmgr It's like basic traditional configuration management, but it's two-way: it takes the difference between the user-managed configuration and the current system state, and rectifies this difference by either editing the configuration or the system. A second invocation is a no-op. If your configuration is in version control, this allows easily tracking any unaccounted changes to the system.