store vmimages in /lmn/vm and mount media in /lmn/media

roles/lmn_mount/files/lmn-linkhome.sh

@@ -1,4 +1,4 @@
 if [[ "${UID}" -gt 60000 ]]; then
-  [[ -L "/media/${USER}/share" ]] || ln -s .default-school/share "/media/${USER}/share"
-  [[ -L "/media/${USER}/home" ]]  || ln -s ".default-school/${HOME##/srv/samba/schools/default-school/}" "/media/${USER}/home"
+  [[ -L "/lmn/media/${USER}/share" ]] || ln -s .default-school/share "/lmn/media/${USER}/share"
+  [[ -L "/lmn/media/${USER}/home" ]]  || ln -s ".default-school/${HOME##/srv/samba/schools/default-school/}" "/lmn/media/${USER}/home"
 fi

roles/lmn_mount/tasks/main.yml

@@ -26,15 +26,15 @@
         fstype="cifs"
         server="{{ smb_server }}"
         path="{{ smb_share }}"
-        mountpoint="/media/%(USER)/.default-school"
+        mountpoint="/lmn/media/%(USER)/.default-school"
         options="sec=krb5i,cruid=%(USERUID),user=%(USER),gid=1010,file_mode=0770,dir_mode=0770,mfsymlinks,nobrl"
         ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>sddm</user><user>virti</user></or></not>
       </volume>
       <volume
         fstype="davfs"
         path="https://nc.steinbeis.schule/remote.php/dav/files/%(USER)"
-        mountpoint="/media/%(USER)/nextcloud"
-        options="username=%(USER),nosuid,nodev,uid=%(USER),gid=1010,file_mode=0770,dir_mode=0770"
+        mountpoint="/lmn/media/%(USER)/nextcloud"
+        options="username=%(USER),nosuid,nodev,uid=%(USER),gid=1010,grpid,file_mode=0770,dir_mode=0770,forceuid,forcegid"
         ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>sddm</user><user>virti</user></or></not>
       </volume>
     insertafter: "<!-- Volume definitions -->"
@@ -78,12 +78,20 @@
     line: KillUserProcesses=yes
     insertafter: '#KillUserProcesses=no'
 
-- name: Deploy script to generate links in /media/$USER/
+- name: Deploy script to generate links in /lmn/media/$USER/
   copy:
     src: lmn-linkhome.sh
     dest: /etc/profile.d/
     mode: '0644'
 
+- name: Bind mount lmn/media with nosuid directory
+  ansible.posix.mount:
+    src: /lmn/media
+    path: /lmn/nosuidmedia
+    opts: nosuid,bind
+    state: present
+    fstype: none
+
 - name: Mount NFSv4 home directory
   ansible.posix.mount:
     src: server:/default-school