School's laptops like desktops. Add teachers (laptop) role.

lmn-laptop.yml

@@ -4,6 +4,22 @@
   hosts: all
   remote_user: ansible
   become: yes
+  pre_tasks:
+    - pause:
+        prompt: "Enter global-admin AD password. Leave empty to skip domain join"
+        echo: false
+      register: adpw
+      no_log: true
+      when: "ansible_cmdline.adpw is not defined"
+    - name: preseed apparmor
+      debconf:
+        name: apparmor
+        question: apparmor/homedirs
+        value: >-
+          /srv/samba/schools/default-school/teachers/
+          /srv/samba/schools/default-school/students/*/
+        vtype: string
+
   vars:
     domain: "{{ ansible_domain }}"
     kerberize_uris: steinbeis.schule
@@ -44,6 +60,7 @@
     - lmn_network
     - up2date_debian
     - lmn_sssd
+    - lmn_mount
     - lmn_kde
     - lmn_fvs ## school specific customization
     - lmn_vm
@@ -62,12 +79,6 @@
         append: yes
       when: false
 
-    - name: enable pam_mkhomedir.so
-      lineinfile:
-        dest: /etc/pam.d/common-session
-        line: "session  optional        pam_mkhomedir.so  umask=0022"
-        insertbefore: "# end of pam-auth-update config"
-
     - name: Fix 8086:4909 external graphics card
       replace:
         dest: "/etc/default/grub"