store vmimages in /lmn/vm and mount media in /lmn/media

roles/lmn_vm/tasks/main.yml

@@ -18,12 +18,12 @@
     autoremove: true
   when: ansible_distribution_release == 'bookworm'
 
-- name: allow all users to use VMs
-  lineinfile:
-    dest: /etc/libvirt/libvirtd.conf
-    line: 'auth_unix_rw = "none"'
-    insertafter: '#auth_unix_rw = "polkit"'
-  notify: reload libvirtd
+    #- name: allow all users to use VMs
+    #  lineinfile:
+    #    dest: /etc/libvirt/libvirtd.conf
+    #    line: 'auth_unix_rw = "none"'
+    #    insertafter: '#auth_unix_rw = "polkit"'
+    #  notify: reload libvirtd
 
 - name: autostart default network for VMs
   file:
@@ -31,6 +31,20 @@
     dest: /etc/libvirt/qemu/networks/autostart/default.xml
     state: link
 
+- name: create system-user syncing VM-files and others
+  ansible.builtin.user:
+    name: lmnsynci
+    comment: lmn sync user
+    system: true
+
+- name: create vm directory
+  file:
+    path: /lmn/vm
+    state: directory
+    owner: lmnsynci
+    group: lmnsynci
+    mode: 0755
+
 - name: install squid
   apt:
     name:
@@ -136,6 +150,12 @@
     - /usr/local/share/desktop-directories
   notify: Run update-desktop-database
 
+- name: set owner lmnsynci for menu entry directory
+  file:
+    path: /usr/local/share/applications
+    state: directory
+    owner: lmnsynci
+
 - name: Copy fvs.directory
   ansible.builtin.copy:
     src: fvs.directory
@@ -150,6 +170,8 @@
 
 - name: sync .torrent, .xml and .desktop files and run update-desktop-database
   command: /usr/local/bin/sync-vm.sh -t
+  become: true
+  become_user: lmnsynci
   register: result
   changed_when: result.stdout | length > 0
 
@@ -164,6 +186,8 @@
   command: >
     rsync -a --itemize-changes
     rsync://server:/vmimages-download/xml /var/lib/libvirt/images/
+  become: true
+  become_user: lmnsynci
   register: result
   changed_when: result.stdout | length > 0
   when: not run_in_installer | default(false) | bool
@@ -172,6 +196,8 @@
   command: >
     rsync -a -i --files-from=/var/lib/libvirt/images/images.list
     rsync://server:/vmimages-download/ /var/lib/libvirt/images/
+  become: true
+  become_user: lmnsynci
   register: result
   changed_when: result.stdout | length > 0
   when: >