indent fixes
This commit is contained in:
parent
0aab6b6612
commit
f1079070a4
2 changed files with 27 additions and 26 deletions
|
@ -79,16 +79,16 @@
|
||||||
|
|
||||||
- name: Copy dconf files + xdg-desktop-portals fix + Network manager
|
- name: Copy dconf files + xdg-desktop-portals fix + Network manager
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: 'etc/systemd/system/NetworkManager.service.d/99-brace.conf'
|
src: 'etc/systemd/system/NetworkManager.service.d/99-brace.conf'
|
||||||
dest: '/etc/systemd/system/NetworkManager.service.d/99-brace.conf'
|
dest: '/etc/systemd/system/NetworkManager.service.d/99-brace.conf'
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
when: manage_network == true
|
when: manage_network == true
|
||||||
|
|
||||||
- name: Copy dconf files + xdg-desktop-portals fix + Network manager
|
- name: Copy dconf files + xdg-desktop-portals fix + Network manager
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: '{{ item }}'
|
src: '{{ item }}'
|
||||||
dest: '/{{ item }}'
|
dest: '/{{ item }}'
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
loop:
|
loop:
|
||||||
- 'etc/security/limits.d/30-disable-coredump.conf'
|
- 'etc/security/limits.d/30-disable-coredump.conf'
|
||||||
- 'etc/systemd/coredump.conf.d/disable.conf'
|
- 'etc/systemd/coredump.conf.d/disable.conf'
|
||||||
|
@ -100,9 +100,9 @@
|
||||||
|
|
||||||
- name: Setup ZRAM, flatpak updater and environment variables to disable GJS + WebkitGTK JIT
|
- name: Setup ZRAM, flatpak updater and environment variables to disable GJS + WebkitGTK JIT
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: '{{ item }}'
|
src: '{{ item }}'
|
||||||
dest: '/{{ item }}'
|
dest: '/{{ item }}'
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
loop:
|
loop:
|
||||||
- 'etc/systemd/zram-generator.conf'
|
- 'etc/systemd/zram-generator.conf'
|
||||||
- 'etc/systemd/user/update-user-flatpaks.service'
|
- 'etc/systemd/user/update-user-flatpaks.service'
|
||||||
|
@ -111,9 +111,9 @@
|
||||||
|
|
||||||
- name: Drop flathub script to homedir for any new appvms created based on this template
|
- name: Drop flathub script to homedir for any new appvms created based on this template
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: 'etc/skel/flathub.sh'
|
src: 'etc/skel/flathub.sh'
|
||||||
dest: '/etc/skel/flathub.sh'
|
dest: '/etc/skel/flathub.sh'
|
||||||
mode: '0700'
|
mode: '0700'
|
||||||
|
|
||||||
- name: Upgrade all packages
|
- name: Upgrade all packages
|
||||||
ansible.builtin.dnf5:
|
ansible.builtin.dnf5:
|
||||||
|
|
|
@ -7,23 +7,24 @@
|
||||||
- name: Create authselect profile
|
- name: Create authselect profile
|
||||||
shell: authselect create-profile sudo-dom0-prompt --base-on=sssd --symlink-meta --symlink-pam
|
shell: authselect create-profile sudo-dom0-prompt --base-on=sssd --symlink-meta --symlink-pam
|
||||||
when: not stat_result.stat.exists
|
when: not stat_result.stat.exists
|
||||||
|
|
||||||
- name: Copy authselect file
|
- name: Copy authselect file
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: '/etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
src: '/etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
||||||
dest: '/etc/authselect/custom/sudo-dom0-prompt/system-auth.original_aside'
|
dest: '/etc/authselect/custom/sudo-dom0-prompt/system-auth.original_aside'
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
|
|
||||||
- name: Copy authselect folder
|
- name: Copy authselect folder
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: '/etc/authselect/system-auth'
|
src: '/etc/authselect/system-auth'
|
||||||
dest: '/etc/authselect/custom/sudo-dom0-prompt'
|
dest: '/etc/authselect/custom/sudo-dom0-prompt'
|
||||||
mode: '0755'
|
mode: '0755'
|
||||||
|
|
||||||
- name: Copy authselect file
|
- name: Copy authselect file
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: 'etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
src: 'etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
||||||
dest: '/etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
dest: '/etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
|
|
||||||
|
|
||||||
- name: Select authselect profile
|
- name: Select authselect profile
|
||||||
|
@ -31,9 +32,9 @@
|
||||||
|
|
||||||
- name: Fix sudoers.d
|
- name: Fix sudoers.d
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: 'etc/sudoers.d/qubes'
|
src: 'etc/sudoers.d/qubes'
|
||||||
dest: '/etc/sudoers.d/qubes'
|
dest: '/etc/sudoers.d/qubes'
|
||||||
mode: '0440'
|
mode: '0440'
|
||||||
|
|
||||||
- name: Check that allow all rule doesn't exist
|
- name: Check that allow all rule doesn't exist
|
||||||
stat:
|
stat:
|
||||||
|
@ -42,7 +43,7 @@
|
||||||
|
|
||||||
- name: Delete allow all rule
|
- name: Delete allow all rule
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: '/etc/polkit-1/rules.d/00-qubes-allow-all.rules'
|
path: '/etc/polkit-1/rules.d/00-qubes-allow-all.rules'
|
||||||
state: 'absent'
|
state: 'absent'
|
||||||
when: allow_all_result.stat.exists
|
when: allow_all_result.stat.exists
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue