diff --git a/roles/bootstrap/tasks/main.yml b/roles/bootstrap/tasks/main.yml index 9e21f9d..b94788e 100644 --- a/roles/bootstrap/tasks/main.yml +++ b/roles/bootstrap/tasks/main.yml @@ -32,7 +32,7 @@ with_items: - dnf --releasever=40 --best --repo=fedora --repo=fedora-updates --installroot=/mnt --setopt=install_weak_deps=False groupinstall -y critical-path-base core - arch-chroot /mnt dnf --releasever=40 --setopt=install_weak_deps=False install -y {{ role_packages.fedora | join(' ') }} - - arch-chroot /mnt dnf reinstall -y grub2-efi-x64 kernel + - arch-chroot /mnt dnf reinstall -y kernel-core - name: Bootstrap RockyLinux 9 when: os | lower == 'rocky' diff --git a/roles/bootstrap/vars/packages.yml b/roles/bootstrap/vars/packages.yml index 7062744..a980392 100644 --- a/roles/bootstrap/vars/packages.yml +++ b/roles/bootstrap/vars/packages.yml @@ -9,6 +9,7 @@ almalinux: - grub2 - grub2-efi - lrzsz + - lvm2 - nc - nfs-utils - nfsv4-client-utils @@ -133,17 +134,25 @@ debian12: - wget fedora: + - bind-utils + - btrfs-progs - cloud-init - dhcp-client - efibootmgr + - glibc-langpack-en + - glibc-langpack-de - grub2 - - grub2-efi-x64-modules + - grub2-efi - lrzsz + - lvm2 + - nc - nfs-utils + - nfsv4-client-utils - open-vm-tools - shim - telnet - vim-default-editor + - wget - zstd rhel8: @@ -151,8 +160,9 @@ rhel8: - dhcp-client - efibootmgr - grub2 - - grub2-efi-x64-modules + - grub2-efi - lrzsz + - lvm2 - nfs-utils - open-vm-tools - shim @@ -164,8 +174,9 @@ rhel9: - dhcp-client - efibootmgr - grub2 - - grub2-efi-x64-modules + - grub2-efi - lrzsz + - lvm2 - nfs-utils - open-vm-tools - shim @@ -182,6 +193,7 @@ rocky: - grub2 - grub2-efi - lrzsz + - lvm2 - nc - nfs-utils - nfsv4-client-utils diff --git a/roles/configuration/tasks/main.yml b/roles/configuration/tasks/main.yml index 12b7d1a..8bf74b6 100644 --- a/roles/configuration/tasks/main.yml +++ b/roles/configuration/tasks/main.yml @@ -167,5 +167,14 @@ validate: /usr/sbin/visudo --check --file=%s - name: Fix SELinux - when: os | lower in ['almalinux', 'fedora', 'rhel8', 'rhel9', 'rocky'] - command: touch /mnt/.autorelabel \ No newline at end of file + block: + - name: Relabel the filesystem + when: os | lower in ['almalinux', 'rhel8', 'rhel9', 'rocky'] + command: touch /mnt/.autorelabel + + - name: Disable SELinux + when: os | lower == "fedora" + lineinfile: + path: /mnt/etc/selinux/config + regexp: '^SELINUX=' + line: 'SELINUX=permissive' \ No newline at end of file