bugfixes and performance improvements

development.yaml

@@ -6,24 +6,24 @@
       ansible.builtin.include_role:
         name: 'baseline'
       vars:
-        - umask_changes: false
+        umask_changes: false
-        - manage_network: true
+        manage_network: true
 
     - name: 'Gnome package stuff'
       ansible.builtin.include_role:
         name: gnome
 
-    - name: 'Setup dom0 prompt for sudo'
+ #   - name: 'Setup dom0 prompt for sudo'
-      ansible.builtin.include_role:
+ #     ansible.builtin.include_role:
-        name: sudo-dom0-prompt
+ #       name: sudo-dom0-prompt
 
     - name: 'Install trivalent'
       ansible.builtin.include_role:
         name: trivalent
 
-    - name: 'Setup arkenfox'
+#    - name: 'Setup arkenfox'
-      ansible.builtin.include_role:
+#      ansible.builtin.include_role:
-        name: arkenfox
+#        name: arkenfox
 
     - name: 'Setup vscode repo'
       ansible.builtin.copy:

roles/trivalent/tasks/files/secureblue.repo

@@ -0,0 +1,7 @@
+[secureblue]
+name=secureblue
+baseurl=https://repo.secureblue.dev
+enabled=1
+gpgcheck=1
+repo_gpgcheck=1
+gpgkey=https://repo.secureblue.dev/secureblue.gpg

roles/trivalent/tasks/main.yaml

@@ -1,6 +1,9 @@
 ---
-- name: Enable hardened_malloc COPR
+- name: Add trivalent repo
-  shell: 'sudo dnf copr enable secureblue/trivalent -y'
+  ansible.builtin.copy:
+    src: 'etc/yum.repos.d/secureblue.repo'
+    dest: '/etc/yum.repos.d/secureblue.repo'
+    mode: '0644'
 
 - name: Enable codecs and stuff
   shell: 'sudo dnf config-manager setopt fedora-cisco-openh264.enabled=1 rpmfusion-free.enabled=1 rpmfusion-free-updates.enabled=1 rpmfusion-nonfree.enabled=1 rpmfusion-nonfree-updates.enabled=1'
@@ -8,7 +11,12 @@
 - name: Update codecs
   shell: 'sudo dnf update @multimedia --setopt="install_weak_deps=False" --exclude=PackageKit-gstreamer-plugin'
 
-- name: Install hardened_malloc
+- name: Update all
+  ansible.builtin.dnf5:
+    name:
+      - '*'
+    state: 'latest'
+- name: Install trivalent/ffmpeg packages
   ansible.builtin.dnf5:
     name:
       - ffmpeg