update

ansible.cfg

@@ -9,6 +9,7 @@ result_format          = yaml
 stdout_callback        = default
 callback_result_format = yaml
 deprecation_warnings   = False 
+callbacks_enabled      = profile_tasks
 
 [ssh_connection]
 ssh_args    = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null

roles/rocky9/tasks/install-epel-repo.yml

@@ -16,7 +16,7 @@
   ignore_errors: "{{ ansible_check_mode }}"
 
 - name: Install EPEL repo.
-  yum:
+  ansible.builtin.dnf:
     name: "{{ epel_repo_url }}"
     state: present
   register: result
@@ -25,14 +25,14 @@
   delay: 10
   when: not epel_repofile_result.stat.exists
 
-- name: Disable Main EPEL repo.
-  ini_file:
-    path: "/etc/yum.repos.d/epel.repo"
-    section: epel
-    option: enabled
-    value: "{{ epel_repo_disable | ternary(0, 1) }}"
-    no_extra_spaces: true
-    mode: 0644
+#- name: Disable Main EPEL repo.
+#  ini_file:
+#    path: "/etc/yum.repos.d/epel.repo"
+#    section: epel
+#    option: enabled
+#    value: "{{ epel_repo_disable | ternary(0, 1) }}"
+#    no_extra_spaces: true
+#    mode: 0644
 
 - name: Install soft from EPEL
   ansible.builtin.dnf:

roles/rocky9/tasks/install_packages.yml

@@ -33,8 +33,8 @@
     name: crb
     state: enabled
 
-#- name: Install EPEL repo
-#  ansible.builtin.include_tasks: install-epel-repo.yml
+- name: Install EPEL repo
+  ansible.builtin.include_tasks: install-epel-repo.yml
 
 #- name: Upgrade all packages
 #  ansible.builtin.dnf:
@@ -51,13 +51,11 @@
       - sudo
       - traceroute
       - tcpdump
-      - screen
       - whois
       - telnet
       - sed
       - tar
       - unzip
-      - unrar
       - gzip
       - rsync
       - sysstat
@@ -77,13 +75,22 @@
       - numactl
       - lsof
       - nano
-      - htop
-      - btop
       - bind-utils
       - psmisc
-      #      - speedtest-cli
       - python-pip
       - open-vm-tools
       - qemu-guest-agent
+      - cloud-utils-growpart
+#      - speedtest-cli
 #      - deltarpm
+#      - screen
+#      - unrar
+#      - htop
+#      - btop
     state: present
+
+- name: Обновить всё
+  become: true
+  package:
+    name: "*"
+    state: latest

roles/rocky9/tasks/security_setup.yml

@@ -1,4 +1,16 @@
 ---
+- name: Установка зависимостей SELinux
+  become: true
+  package:
+    name: "{{ (ansible_facts['distribution_major_version'] | int >= 8) | ternary('python3-libselinux', 'libselinux-python') }}"
+    state: present
+
+#- name: Ensure libselinux is installed on the control node
+#  delegate_to: localhost
+#  become: false
+#  ansible.builtin.pip:
+#    name: libselinux
+
 - name: Disable SELinux
   ansible.posix.selinux:
     state: disabled