From 9e7e920158d2b2a83454686d226f78e4def3f1bb Mon Sep 17 00:00:00 2001
From: mrwho <mrwho@mrwho.ru>
Date: Mon, 11 May 2026 21:48:54 +0300
Subject: [PATCH] update

---
 ansible.cfg                              |  1 +
 roles/rocky9/tasks/install-epel-repo.yml | 28 ++++++++++++------------
 roles/rocky9/tasks/install_packages.yml  | 23 ++++++++++++-------
 roles/rocky9/tasks/security_setup.yml    | 12 ++++++++++
 4 files changed, 42 insertions(+), 22 deletions(-)

diff --git a/ansible.cfg b/ansible.cfg
index 31d1ee4..fd03ad1 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -9,6 +9,7 @@ result_format          = yaml
 stdout_callback        = default
 callback_result_format = yaml
 deprecation_warnings   = False 
+callbacks_enabled      = profile_tasks
 
 [ssh_connection]
 ssh_args    = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null
diff --git a/roles/rocky9/tasks/install-epel-repo.yml b/roles/rocky9/tasks/install-epel-repo.yml
index dd3cd8e..8b83e96 100644
--- a/roles/rocky9/tasks/install-epel-repo.yml
+++ b/roles/rocky9/tasks/install-epel-repo.yml
@@ -16,7 +16,7 @@
   ignore_errors: "{{ ansible_check_mode }}"
 
 - name: Install EPEL repo.
-  yum:
+  ansible.builtin.dnf:
     name: "{{ epel_repo_url }}"
     state: present
   register: result
@@ -25,20 +25,20 @@
   delay: 10
   when: not epel_repofile_result.stat.exists
 
-- name: Disable Main EPEL repo.
-  ini_file:
-    path: "/etc/yum.repos.d/epel.repo"
-    section: epel
-    option: enabled
-    value: "{{ epel_repo_disable | ternary(0, 1) }}"
-    no_extra_spaces: true
-    mode: 0644
+#- name: Disable Main EPEL repo.
+#  ini_file:
+#    path: "/etc/yum.repos.d/epel.repo"
+#    section: epel
+#    option: enabled
+#    value: "{{ epel_repo_disable | ternary(0, 1) }}"
+#    no_extra_spaces: true
+#    mode: 0644
 
 - name: Install soft from EPEL
   ansible.builtin.dnf:
     name:
-    - screen
-    - unrar
-    - htop
-    - btop
-  state: present
+      - screen
+      - unrar
+      - htop
+      - btop
+    state: present
diff --git a/roles/rocky9/tasks/install_packages.yml b/roles/rocky9/tasks/install_packages.yml
index fca7e7a..3179a60 100644
--- a/roles/rocky9/tasks/install_packages.yml
+++ b/roles/rocky9/tasks/install_packages.yml
@@ -33,8 +33,8 @@
     name: crb
     state: enabled
 
-#- name: Install EPEL repo
-#  ansible.builtin.include_tasks: install-epel-repo.yml
+- name: Install EPEL repo
+  ansible.builtin.include_tasks: install-epel-repo.yml
 
 #- name: Upgrade all packages
 #  ansible.builtin.dnf:
@@ -51,13 +51,11 @@
       - sudo
       - traceroute
       - tcpdump
-      - screen
       - whois
       - telnet
       - sed
       - tar
       - unzip
-      - unrar
       - gzip
       - rsync
       - sysstat
@@ -77,13 +75,22 @@
       - numactl
       - lsof
       - nano
-      - htop
-      - btop
       - bind-utils
       - psmisc
-      #      - speedtest-cli
       - python-pip
       - open-vm-tools
       - qemu-guest-agent
-      # - deltarpm
+      - cloud-utils-growpart
+#      - speedtest-cli
+#      - deltarpm
+#      - screen
+#      - unrar
+#      - htop
+#      - btop
     state: present
+
+- name: Обновить всё
+  become: true
+  package:
+    name: "*"
+    state: latest
diff --git a/roles/rocky9/tasks/security_setup.yml b/roles/rocky9/tasks/security_setup.yml
index ab7b814..5417d43 100644
--- a/roles/rocky9/tasks/security_setup.yml
+++ b/roles/rocky9/tasks/security_setup.yml
@@ -1,4 +1,16 @@
 ---
+- name: Установка зависимостей SELinux
+  become: true
+  package:
+    name: "{{ (ansible_facts['distribution_major_version'] | int >= 8) | ternary('python3-libselinux', 'libselinux-python') }}"
+    state: present
+
+#- name: Ensure libselinux is installed on the control node
+#  delegate_to: localhost
+#  become: false
+#  ansible.builtin.pip:
+#    name: libselinux
+
 - name: Disable SELinux
   ansible.posix.selinux:
     state: disabled