From 2829033fd104d4d39b4278955d38cb186248e954 Mon Sep 17 00:00:00 2001
From: sussy baka <sussybaka@homelab0ne.xyz>
Date: Tue, 15 Apr 2025 14:18:45 +0200
Subject: [PATCH] bugfixes and performance improvements

---
 development.yaml                            | 16 ++++++++--------
 roles/trivalent/tasks/files/secureblue.repo |  7 +++++++
 roles/trivalent/tasks/main.yaml             | 14 +++++++++++---
 3 files changed, 26 insertions(+), 11 deletions(-)
 create mode 100644 roles/trivalent/tasks/files/secureblue.repo

diff --git a/development.yaml b/development.yaml
index 2dc7c53..c70f8d4 100644
--- a/development.yaml
+++ b/development.yaml
@@ -6,24 +6,24 @@
       ansible.builtin.include_role:
         name: 'baseline'
       vars:
-        - umask_changes: false
-        - manage_network: true
+        umask_changes: false
+        manage_network: true
 
     - name: 'Gnome package stuff'
       ansible.builtin.include_role:
         name: gnome
 
-    - name: 'Setup dom0 prompt for sudo'
-      ansible.builtin.include_role:
-        name: sudo-dom0-prompt
+ #   - name: 'Setup dom0 prompt for sudo'
+ #     ansible.builtin.include_role:
+ #       name: sudo-dom0-prompt
 
     - name: 'Install trivalent'
       ansible.builtin.include_role:
         name: trivalent
 
-    - name: 'Setup arkenfox'
-      ansible.builtin.include_role:
-        name: arkenfox
+#    - name: 'Setup arkenfox'
+#      ansible.builtin.include_role:
+#        name: arkenfox
 
     - name: 'Setup vscode repo'
       ansible.builtin.copy:
diff --git a/roles/trivalent/tasks/files/secureblue.repo b/roles/trivalent/tasks/files/secureblue.repo
new file mode 100644
index 0000000..92b5f5a
--- /dev/null
+++ b/roles/trivalent/tasks/files/secureblue.repo
@@ -0,0 +1,7 @@
+[secureblue]
+name=secureblue
+baseurl=https://repo.secureblue.dev
+enabled=1
+gpgcheck=1
+repo_gpgcheck=1
+gpgkey=https://repo.secureblue.dev/secureblue.gpg
diff --git a/roles/trivalent/tasks/main.yaml b/roles/trivalent/tasks/main.yaml
index e857f94..b9847d8 100644
--- a/roles/trivalent/tasks/main.yaml
+++ b/roles/trivalent/tasks/main.yaml
@@ -1,6 +1,9 @@
 ---
-- name: Enable hardened_malloc COPR
-  shell: 'sudo dnf copr enable secureblue/trivalent -y'
+- name: Add trivalent repo
+  ansible.builtin.copy:
+    src: 'etc/yum.repos.d/secureblue.repo'
+    dest: '/etc/yum.repos.d/secureblue.repo'
+    mode: '0644'
 
 - name: Enable codecs and stuff
   shell: 'sudo dnf config-manager setopt fedora-cisco-openh264.enabled=1 rpmfusion-free.enabled=1 rpmfusion-free-updates.enabled=1 rpmfusion-nonfree.enabled=1 rpmfusion-nonfree-updates.enabled=1'
@@ -8,7 +11,12 @@
 - name: Update codecs
   shell: 'sudo dnf update @multimedia --setopt="install_weak_deps=False" --exclude=PackageKit-gstreamer-plugin'
 
-- name: Install hardened_malloc
+- name: Update all
+  ansible.builtin.dnf5:
+    name:
+      - '*'
+    state: 'latest'
+- name: Install trivalent/ffmpeg packages
   ansible.builtin.dnf5:
     name:
       - ffmpeg