SW Download als role, kernel Bug

qgm-desktop.yml

@@ -4,8 +4,12 @@
   hosts: all
   remote_user: ansible
   become: yes
+
+  vars_files:
+    - vars-qgsoftware.yml
   
   vars:
+    joinpw: '' 
     domain: "{{ ansible_domain }}"
     kerberize_uris: qgm.lan
     realm: QGM.LAN
@@ -21,11 +25,6 @@
 
     ## Local mirror for mscorefonts. Remove or leave empty to use no mirror:
     mirror_msfonts: http://netboot.qgm.lan/mscorefonts/
-    ## Local Mirror for Greenfoot and BlueJ
-    mirror_javadev: http://netboot.qgm.lan/javadev/
-    ## Bluej/Greenfoot Versionen
-    bluej_target_version: "5.2.0"
-    greenfoot_target_version: "3.7.1"
 
     # Linbo Passwort
     rsyncsecret: Muster!
@@ -44,14 +43,15 @@
     extra_pkgs_bpo: [] # [ linux-image-amd64 ]
 
   roles:
-    #- lmn_network
-    - up2date_debian
-    #- lmn_sssd
-    #- lmn_mount
-    #- lmn_kde
+    - lmn_network
+    #- up2date_debian
+    - lmn_sssd
+    - lmn_mount
+    - lmn_kde
     - lmn_qgm ## school specific customization
+    - lmn_qgsoftware
     - lmn_qgsddm
-    #- lmn_printer
+    - lmn_printer
     #- kerberize
   
   tasks:
@@ -60,7 +60,7 @@
         dest: /etc/apt/apt.conf.d/20auto-upgrades
         content: |
           APT::Periodic::Update-Package-Lists "1";
-          APT::Periodic::Unattended-Upgrade "1";
+          APT::Periodic::Unattended-Upgrade "0";
 
     - name: Prepare mount point for homes
       ansible.builtin.file:
@@ -68,7 +68,6 @@
         state: directory
         mode: '0755'
 
-
     - name: Fix mount point permissions and owner
       file:
         path: "{{ item }}"
@@ -79,3 +78,63 @@
         - /srv/samba
         - /srv/samba/schools
         - /srv/samba/schools/default-school
+    
+    - name: Disable Grub submenus
+      lineinfile:
+        dest: /etc/default/grub
+        line: 'GRUB_DISABLE_SUBMENU=true'
+        insertafter: '^GRUB_TIMEOUT=.*'
+      notify: Run update-grub
+
+
+    - name: Check for the buggy kernel
+      stat:
+        path: /boot/vmlinuz-6.1.0-17-amd64
+      register: bug
+
+    - name: Check for the fixed kernel
+      stat:
+        path: /boot/vmlinuz-6.1.0-18-amd64
+      register: fix
+
+    - name: Work around kernel with CIFS regression
+      block:
+        - name: Make sure kernel package -16 is available
+          ansible.builtin.apt:
+            name: linux-image-6.1.0-16-amd64
+            state: present
+        - name: Set 6.1.0-16 as default kernel in grub
+          lineinfile:
+            dest: /etc/default/grub
+            regexp: '^(GRUB_DEFAULT=).*'
+            line: '\g<1>"Debian GNU/Linux, with Linux 6.1.0-16-amd64"'
+            backrefs: yes
+          notify: Run update-grub
+      when: bug.stat.exists and not fix.stat.exists
+
+    - name: Set latest kernel in grub if bug is fixed
+      lineinfile:
+        dest: /etc/default/grub
+        regexp: '^(GRUB_DEFAULT=).*'
+        line: '\g<1>0'
+        backrefs: yes
+      when: fix.stat.exists or not bug.stat.exists
+      notify: Run update-grub
+
+    - name: Remove "unattended-upgrades" package
+      ansible.builtin.apt:
+        name: unattended-upgrades
+        state: absent
+        purge: True
+
+    - name: Fix stuttering sound on HDMI 
+      lineinfile:
+        dest: /etc/default/grub
+        regexp: '^(GRUB_CMDLINE_LINUX=).*'
+        line: '\g<1>"intel_iommu=on,igfx_off"'
+        backrefs: yes
+      when: "'lt-' in inventory_hostname"
+      notify: Run update-grub
+
+
+