Work around kernel CIFS regression.

roles/lmn_kde/tasks/main.yml

@@ -130,15 +130,16 @@
     replace: '"quiet splash"'
   notify: Run update-grub
 
-- name: Protect grub menu entries
+- name: Protect editing grub menu entries
   blockinfile:
     path: /etc/grub.d/40_custom
     block: |
       set superusers='root'
+      export superusers
       password_pbkdf2 root {{ grub_pwd }}
   notify: Run update-grub
 
-- name: Allow booting default entry
+- name: Allow booting grub menu entries
   lineinfile:
     dest: /etc/grub.d/10_linux
     line: CLASS="${CLASS} --unrestricted"
@@ -146,6 +147,25 @@
     firstmatch: true
   notify: Run update-grub
 
+## FIXME
+#- name: Grub timeout
+#  lineinfile:
+#    dest: /etc/default/grub
+#    line: 'GRUB_DISABLE_SUBMENU=true'
+#    insertafter: '^GRUB_TIMEOUT=.*'
+#  notify: Run update-grub
+#
+## then remove the task below:
+
+##  original line: echo "submenu '$(gettext_printf "Advanced options for %s" "${OS}" | grub_quote)' \$menuentry_id_option 'gnulinux-advanced-$boot_device_id' {"
+- name: Allow switch to advanced menu
+  replace:
+    path: /etc/grub.d/10_linux
+#    regexp: '^(\s+echo .+ \"Advanced options for %s\" \"\${OS}\" | grub_quote\).) (\\\$menuentry_id_option.+ {\")$'
+    regexp: '^(\s+echo \"submenu .+ \"Advanced options for %s\".+ grub_quote\).) (..menuentry_id_option.+{\")$'
+    replace: '\1 --unrestricted \2'
+  notify: Run update-grub
+
 - name: Grub timeout
   lineinfile:
     dest: /etc/default/grub