From dd0f23fdefae62141324475a876e9ae6a62dcaa4 Mon Sep 17 00:00:00 2001
From: mrwho <mrwho@mrwho.ru>
Date: Mon, 11 May 2026 20:44:01 +0300
Subject: [PATCH] epel

---
 inventory/prod/hosts.yml                 |  3 ++
 playbooks/rocky9.yml                     |  8 ++---
 roles/rocky9/defaults/main.yml           |  5 +++
 roles/rocky9/tasks/install-epel-repo.yml | 44 ++++++++++++++++++++++++
 roles/rocky9/tasks/install_packages.yml  | 15 ++++----
 5 files changed, 62 insertions(+), 13 deletions(-)
 create mode 100644 roles/rocky9/tasks/install-epel-repo.yml

diff --git a/inventory/prod/hosts.yml b/inventory/prod/hosts.yml
index c37bbc2..44fc114 100644
--- a/inventory/prod/hosts.yml
+++ b/inventory/prod/hosts.yml
@@ -17,3 +17,6 @@ all:
           ansible_host: 192.168.99.41
         kuber-node01:
           ansible_host: 192.168.99.42
+
+        rocky9-template:
+          ansible_host: 192.168.99.43
\ No newline at end of file
diff --git a/playbooks/rocky9.yml b/playbooks/rocky9.yml
index 943e8f0..14dda3f 100644
--- a/playbooks/rocky9.yml
+++ b/playbooks/rocky9.yml
@@ -2,15 +2,15 @@
 - name: Initial Rocky9 Configuration
 
   hosts: 
-    - ca
+    - rocky9-template
   # kuber-node01
   #    - 172.20.21.193
   become: true
   vars:
-    #ansible_ssh_user: root
-    #ansible_ssh_password: nmklop90
+    ansible_ssh_user: root
+    ansible_ssh_password: nmklop90
     reboot_system: false
-    #hostname: rocky9-template.local.mrwho.ru
+    hostname: rocky9-template.local.mrwho.ru
   roles:
     - users
     - rocky9
diff --git a/roles/rocky9/defaults/main.yml b/roles/rocky9/defaults/main.yml
index 9552643..8263697 100644
--- a/roles/rocky9/defaults/main.yml
+++ b/roles/rocky9/defaults/main.yml
@@ -6,3 +6,8 @@
 #  - 172.20.21.1
 #  - 192.168.1.1
 #reboot_system: false
+
+epel_repo_url: "https://dl.fedoraproject.org/pub/epel/epel-release-latest-{{ ansible_facts.distribution_major_version }}.noarch.rpm"
+epel_repo_gpg_key_url: "https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-{{ ansible_facts.distribution_major_version }}"
+epel_repofile_path: "/etc/yum.repos.d/epel.repo"
+epel_repo_disable: false
diff --git a/roles/rocky9/tasks/install-epel-repo.yml b/roles/rocky9/tasks/install-epel-repo.yml
new file mode 100644
index 0000000..dd3cd8e
--- /dev/null
+++ b/roles/rocky9/tasks/install-epel-repo.yml
@@ -0,0 +1,44 @@
+---
+- name: Check if EPEL repo is already configured.
+  stat:
+    path: "{{ epel_repofile_path }}"
+  register: epel_repofile_result
+
+- name: Import EPEL GPG key.
+  rpm_key:
+    key: "{{ epel_repo_gpg_key_url }}"
+    state: present
+  register: result
+  until: result is succeeded
+  retries: 5
+  delay: 10
+  when: not epel_repofile_result.stat.exists
+  ignore_errors: "{{ ansible_check_mode }}"
+
+- name: Install EPEL repo.
+  yum:
+    name: "{{ epel_repo_url }}"
+    state: present
+  register: result
+  until: result is succeeded
+  retries: 5
+  delay: 10
+  when: not epel_repofile_result.stat.exists
+
+- name: Disable Main EPEL repo.
+  ini_file:
+    path: "/etc/yum.repos.d/epel.repo"
+    section: epel
+    option: enabled
+    value: "{{ epel_repo_disable | ternary(0, 1) }}"
+    no_extra_spaces: true
+    mode: 0644
+
+- name: Install soft from EPEL
+  ansible.builtin.dnf:
+    name:
+    - screen
+    - unrar
+    - htop
+    - btop
+  state: present
diff --git a/roles/rocky9/tasks/install_packages.yml b/roles/rocky9/tasks/install_packages.yml
index 915c2f5..fca7e7a 100644
--- a/roles/rocky9/tasks/install_packages.yml
+++ b/roles/rocky9/tasks/install_packages.yml
@@ -33,16 +33,13 @@
     name: crb
     state: enabled
 
-- name: Install EPEL repo
-  ansible.builtin.dnf:
-    name:
-      - epel-release
-    state: present
+#- name: Install EPEL repo
+#  ansible.builtin.include_tasks: install-epel-repo.yml
 
-- name: Upgrade all packages
-  ansible.builtin.dnf:
-    name: "*"
-    state: latest
+#- name: Upgrade all packages
+#  ansible.builtin.dnf:
+#    name: "*"
+#    state: latest
 
 - name: Install soft
   ansible.builtin.dnf: