Configure KDE, move package installation to extra role.

roles/lmn_kde/handlers/main.yml

@@ -0,0 +1,10 @@
+- name: run update-grub
+  command: update-grub
+  listen: update grub
+
+- name: enable tmp.mount
+  systemd:
+    daemon_reload: yes
+    name: tmp.mount
+    enabled: yes
+  listen: enable tmp.mount

roles/lmn_kde/tasks/main.yml

@@ -0,0 +1,71 @@
+---
+- name: install desktop EDU packages and some more
+  apt:
+    name:
+      - thunderbird-l10n-de
+      - webext-privacy-badger
+      - webext-ublock-origin
+      - emacs
+      - elpa-magit
+      - elpa-color-theme-modern
+      - vlc
+      - gimp
+      - inkscape
+      - flameshot
+      - bluefish
+      - git
+      - gitk
+      - gitg
+      - wireshark
+      - nmap
+      - netcat-openbsd
+      - net-tools
+      - ghex
+      - thonny
+      - spyder
+      - mu-editor
+      - dia
+      - vym
+      - tree
+      - virt-manager
+      - libreoffice-l10n-de
+      - xdg-desktop-portal-kde
+    state: latest
+
+- name: set homepage
+  lineinfile:
+    dest: /etc/firefox-esr/firefox-esr.js
+    line: pref("browser.startup.homepage", "https://www.startpage.com");
+
+- name: tune SDDM login
+  blockinfile:
+    path: /etc/sddm.conf
+    create: true
+    block: |
+      [Users]
+      MaximumUid=999
+      RememberLastUser=false
+      RememberLastSession=false
+
+
+################# from kiosk.yml ##################
+- name: grub timeout
+  lineinfile:
+    dest: /etc/default/grub
+    regexp: '^(GRUB_TIMEOUT=).*'
+    line: '\g<1>1'
+    backrefs: yes
+  notify: update grub
+
+- name: keyboard compose key
+  lineinfile:
+    dest: /etc/default/keyboard
+    regexp: '^(XKBOPTIONS=).*'
+    line: '\1"compose:caps"'
+    backrefs: yes
+
+- name: tmp on tmpfs
+  command: cp /usr/share/systemd/tmp.mount /etc/systemd/system/
+  args:
+    creates: /etc/systemd/system/tmp.mount
+  notify: enable tmp.mount