Introduction of a new device class (localhome).

- user-home is on local disk
- additional entry in dolphin: home@server
- display info about localhome on login-screen
- provide unison-config for sync home with home@server
- force user to be logged out immediately after first login, because
  home-dir must exists for bind-mounts on /lmn/media

roles/lmn_vm/tasks/main.yml

@@ -48,6 +48,20 @@
       </volume>
     insertafter: "<!-- END ANSIBLE MANAGED BLOCK .* -->"
 
+- name: Configure pam_mount for VM bind mounts
+  blockinfile:
+    dest: /etc/security/pam_mount.conf.xml
+    marker: "<!-- {mark} ANSIBLE MANAGED BLOCK (bind mount school for VMs) -->"
+    block: |
+      <volume
+        path="/srv/samba/schools/default-school"
+        mountpoint="/lmn/media/%(USER)/school"
+        options="bind"
+        ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>sddm</user><user>{{ localuser }}</user></or></not>
+      </volume>
+    insertafter: "<!-- END ANSIBLE MANAGED BLOCK .* -->"
+  when: groups.localhome is defined and inventory_hostname in groups.localhome
+
 - name: Use umount script for proper cleanup
   blockinfile:
     dest: /etc/security/pam_mount.conf.xml