fix: deep analysis audit — no_log, resolv.conf, service conflicts, lint

roles/bootstrap/tasks/ubuntu.yml

@@ -47,11 +47,16 @@
       register: bootstrap_ubuntu_base_result
       changed_when: bootstrap_ubuntu_base_result.rc == 0
 
-    - name: Ensure chroot has resolv.conf
+    - name: Generate resolv.conf for chroot
       ansible.builtin.copy:
-        src: /etc/resolv.conf
+        content: |
+          {% for ns in system_cfg.network.dns.servers | default(['1.1.1.1', '8.8.8.8']) %}
+          nameserver {{ ns }}
+          {% endfor %}
+          {% if system_cfg.network.dns.search | default([]) | length > 0 %}
+          search {{ system_cfg.network.dns.search | join(' ') }}
+          {% endif %}
         dest: /mnt/etc/resolv.conf
-        remote_src: true
         mode: "0644"
 
     - name: Enable universe repository