fix(partitioning): create separate /boot for LVM-based filesystems

VMware EFI firmware may not initialize all SCSI devices before GRUB
runs, preventing LVM assembly when the root LV spans multiple disks.
A separate /boot partition (the standard RHEL Anaconda layout) lets
GRUB load kernels without LVM; the kernel initramfs handles LVM
activation with proper device waiting.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

roles/configuration/tasks/bootloader.yml

@@ -1,27 +1,40 @@
 ---
 - name: Configure Bootloader
-  block:
-    - name: Install Bootloader
   vars:
-        configuration_use_efibootmgr: "{{ is_rhel | bool }}"
+    _efi_vendor: >-
-        configuration_efi_dir: "{{ partitioning_efi_mountpoint }}"
+      {{
-        configuration_bootloader_id: >-
+        "redhat" if os == "rhel"
-          {{ "ubuntu" if os in ["ubuntu", "ubuntu-lts"] else os }}
+        else ("ubuntu" if os in ["ubuntu", "ubuntu-lts"] else os)
-        configuration_efi_vendor: >-
+      }}
-          {{ "redhat" if os == "rhel" else os }}
+    _efi_loader: >-
-        configuration_efibootmgr_cmd: >-
+      {{ "shimx64.efi" if is_rhel | bool else "grubx64.efi" }}
-          /usr/sbin/efibootmgr -c -L '{{ os }}' -d "{{ install_drive }}" -p 1
+  block:
-          -l '\efi\EFI\{{ configuration_efi_vendor }}\shimx64.efi'
+    - name: Install GRUB EFI binary
-        configuration_grub_cmd: >-
+      when: not (is_rhel | bool)
-          /usr/sbin/grub-install --target=x86_64-efi
+      ansible.builtin.command: >-
-          --efi-directory={{ configuration_efi_dir }}
+        {{ chroot_command }} /usr/sbin/grub-install --target=x86_64-efi
-          --bootloader-id={{ configuration_bootloader_id }}
+        --efi-directory={{ partitioning_efi_mountpoint }}
-        configuration_bootloader_cmd: >-
+        --bootloader-id={{ _efi_vendor }}
-          {{ configuration_efibootmgr_cmd if configuration_use_efibootmgr else configuration_grub_cmd }}
+        --no-nvram
-      ansible.builtin.command: "{{ chroot_command }} {{ configuration_bootloader_cmd }}"
       register: configuration_bootloader_result
       changed_when: configuration_bootloader_result.rc == 0
 
+    - name: Check existing EFI boot entries
+      ansible.builtin.command: efibootmgr
+      register: _efi_entries
+      changed_when: false
+
+    - name: Ensure EFI boot entry exists
+      when: ('* ' + _efi_vendor) not in _efi_entries.stdout
+      ansible.builtin.command: >-
+        efibootmgr -c
+        -L '{{ _efi_vendor }}'
+        -d '{{ install_drive }}'
+        -p 1
+        -l '\EFI\{{ _efi_vendor }}\{{ _efi_loader }}'
+      register: _efi_entry_result
+      changed_when: _efi_entry_result.rc == 0
+
     - name: Ensure lvm2 for non btrfs filesystems
       when: os == "archlinux" and system_cfg.filesystem != "btrfs"
       ansible.builtin.lineinfile:
@@ -50,13 +63,11 @@
 
     - name: Generate grub config
       vars:
-        configuration_efi_vendor: >-
-          {{ "redhat" if os == "rhel" else os }}
         configuration_grub_cfg_cmd: >-
           {{
             '/usr/sbin/grub2-mkconfig -o '
             + partitioning_efi_mountpoint
-            + '/EFI/' + configuration_efi_vendor + '/grub.cfg'
+            + '/EFI/' + _efi_vendor + '/grub.cfg'
             if is_rhel | bool
             else '/usr/sbin/grub-mkconfig -o /boot/grub/grub.cfg'
           }}

roles/partitioning/defaults/main.yml

@@ -9,7 +9,10 @@ partitioning_boot_size_mib: 1024
 partitioning_use_full_disk: true
 partitioning_separate_boot: >-
   {{
+    (
       (system_cfg.luks.enabled | bool)
+      or (system_cfg.filesystem != 'btrfs')
+    )
     and (os not in ['archlinux'])
   }}
 partitioning_boot_fs_fstype: >-