From b80df0cd5c3794c26f2ae43957c0f76d4a9219d6 Mon Sep 17 00:00:00 2001
From: mustard <sussybaka@homelab0ne.xyz>
Date: Wed, 3 Dec 2025 15:03:11 +0100
Subject: [PATCH] fix: baseline role

---
 roles/baseline/tasks/main.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/roles/baseline/tasks/main.yaml b/roles/baseline/tasks/main.yaml
index c29e156..47a83f8 100644
--- a/roles/baseline/tasks/main.yaml
+++ b/roles/baseline/tasks/main.yaml
@@ -49,10 +49,11 @@
   - 'etc/modprobe.d/workstation-blacklist.conf'
   - 'etc/crypto-policies/back-ends/openssh.config'
 
-- name: Install sysctl
+- name: Install sysctl and flatpak
   ansible.builtin.dnf5:
     name:
       - 'procps-ng'
+      - 'flatpak'
     state: 'present'
 
 - name: Kernel sysctl config
@@ -137,7 +138,7 @@
     state: latest
 
 - name: Mark packages as manually installed to avoid removal
-  shell: 'dnf mark user flatpak gnome-menus qubes-menus -y'
+  shell: 'dnf mark user flatpak -y'
 
 - name: Enable hardened_malloc COPR
   shell: 'dnf copr enable secureblue/hardened_malloc -y'