install.yml.old

#!/usr/bin/ansible-playbook --inventory=localhost,
#
# install.yml
---
- hosts: localhost
  connection: local
  force_handlers: true

  tasks:

    - name: Enable SELinux in enforcing mode
      ansible.posix.selinux:
        policy: targeted
        state: enforcing
      notify: Relabel filesystem

    - name: Install basic language packs
      ansible.builtin.dnf:
        name:
          - glibc-langpack-de
          - glibc-langpack-en
          - glibc-langpack-fr
        state: present

    - name: Remove huge global language pack
      ansible.builtin.dnf:
        name: glibc-all-langpacks
        state: absent

    - name: Configure Bash shell for root
      ansible.builtin.copy:
        src: bashrc-root
        dest: /root/.bashrc
        owner: root
        group: root
        mode: 0644

    - name: Configure Bash shell for future users
      ansible.builtin.copy:
        src: bashrc-user
        dest: /etc/skel/.bashrc
        owner: root
        group: root
        mode: 0644

    - name: Install Vim
      ansible.builtin.dnf:
        name: vim-enhanced
        state: present
        install_weak_deps: false

    - name: Configure Vim editor for root
      ansible.builtin.copy:
        src: vimrc
        dest: /root/.vimrc
        owner: root
        group: root
        mode: 0644

    - name: Configure Vim editor for future users
      ansible.builtin.copy:
        src: vimrc
        dest: /etc/skel/.vimrc
        owner: root
        group: root
        mode: 0644

    - name: Configure Rocky Linux BaseOS repository
      ansible.builtin.yum_repository:
        name: baseos
        file: rocky
        description: BaseOS
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/rocky/$releasever/BaseOS/$basearch/os/
          - http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/os/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
        enabled: true
        priority: 1

    - name: Configure Rocky Linux AppStream repository
      ansible.builtin.yum_repository:
        name: appstream
        file: rocky
        description: AppStream
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/rocky/$releasever/AppStream/$basearch/os/
          - http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/os/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
        enabled: true
        priority: 1

    - name: Configure Rocky Linux CRB repository
      ansible.builtin.yum_repository:
        name: crb
        file: rocky
        description: CRB
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/rocky/$releasever/CRB/$basearch/os/
          - http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/os/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
        enabled: true
        priority: 1

    - name: Configure Rocky Linux Extras repository
      ansible.builtin.yum_repository:
        name: extras
        file: rocky-extras
        description: Extras
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/rocky/$releasever/extras/$basearch/os/
          - http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/os/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
        enabled: true
        priority: 1

    - name: Install EPEL release package
      ansible.builtin.dnf:
        name: epel-release
        state: present

    - name: Configure EPEL repository
      ansible.builtin.yum_repository:
        name: epel
        file: epel
        description: EPEL
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/epel/$releasever/Everything/$basearch/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever
        enabled: true
        priority: 10

    - name: Configure OpenH264 repository
      ansible.builtin.yum_repository:
        name: openh264
        file: epel-cisco-openh264
        description: OpenH264
        baseurl: 
          - https://codecs.fedoraproject.org/openh264/34/$basearch/os/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever
        enabled: true
        priority: 10

    - name: Rename EPEL Cisco OpenH264 repository
      ansible.builtin.yum_repository:
        name: epel-cisco-openh264
        file: epel-cisco-openh264
        state: absent

    - name: Install ELRepo release package
      ansible.builtin.dnf:
        name: elrepo-release
        state: present

    - name: Configure ELRepo repository
      ansible.builtin.yum_repository:
        name: elrepo
        file: elrepo
        description: ELRepo
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/elrepo/elrepo/el9/$basearch/
          - http://elrepo.org/linux/elrepo/el9/$basearch/
        gpgcheck: true
        gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org file:///etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org"
        enabled: true
        priority: 10

    - name: Configure ELRepo Testing repository
      ansible.builtin.yum_repository:
        name: elrepo-testing
        file: elrepo
        description: ELRepo Testing
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/elrepo/testing/el9/$basearch/
          - http://elrepo.org/linux/testing/el9/$basearch/
        gpgcheck: true
        gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org file:///etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org"
        enabled: false
        priority: 10

    - name: Configure ELRepo Kernel repository
      ansible.builtin.yum_repository:
        name: elrepo-kernel
        file: elrepo
        description: ELRepo Kernel
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/elrepo/kernel/el9/$basearch/
          - http://elrepo.org/linux/kernel/el9/$basearch/
        gpgcheck: true
        gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org file:///etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org"
        enabled: false
        priority: 10

    - name: Configure ELRepo Extras repository
      ansible.builtin.yum_repository:
        name: elrepo-extras
        file: elrepo
        description: ELRepo Extras
        baseurl: 
          - http://mirror.in2p3.fr/pub/linux/elrepo/extras/el9/$basearch/
          - http://elrepo.org/linux/extras/el9/$basearch/
        gpgcheck: true
        gpgkey: "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org file:///etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org"
        enabled: false
        priority: 10

    - name: Import RPMFusion Free GPG key
      ansible.builtin.rpm_key:
        key: http://mirror.in2p3.fr/pub/linux/rpmfusion/free/el/RPM-GPG-KEY-rpmfusion-free-el-9
        state: present

    - name: Install RPMFusion Free release package
      ansible.builtin.dnf:
        name: rpmfusion-free-release
        state: present

    - name: Configure RPMFusion Free release package
      ansible.builtin.yum_repository:
        name: rpmfusion-free
        file: rpmfusion-free-updates
        description: RPMFusion Free
        baseurl:
          - http://mirror.in2p3.fr/pub/linux/rpmfusion/free/el/updates/9/$basebarch/
          - http://download1.rpmfusion.org/free/el/updates/9/$basearch/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-el-9
        enabled: true
        priority: 10

    - name: Install RPMFusion Free Tainted release package
      ansible.builtin.dnf:
        name: rpmfusion-free-release-tainted
        state: present

    - name: Configure RPMFusion Free Tainted release package
      ansible.builtin.yum_repository:
        name: rpmfusion-free-tainted
        file: rpmfusion-free-tainted
        description: RPMFusion Free Tainted
        baseurl:
          - http://mirror.in2p3.fr/pub/linux/rpmfusion/free/el/tainted/9/$basebarch/
          - http://download1.rpmfusion.org/free/el/tainted/9/$basearch/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-el-9
        enabled: true
        priority: 10

    - name: Rename RPMFusion Free repository
      ansible.builtin.yum_repository:
        name: rpmfusion-free-updates
        file: rpmfusion-free-updates
        state: absent

    - name: Import RPMFusion NonFree GPG key
      ansible.builtin.rpm_key:
        key: http://mirror.in2p3.fr/pub/linux/rpmfusion/nonfree/el/RPM-GPG-KEY-rpmfusion-nonfree-el-9
        state: present

    - name: Install RPMFusion NonFree Release package
      ansible.builtin.dnf:
        name: https://download1.rpmfusion.org/nonfree/el/rpmfusion-nonfree-release-9.noarch.rpm
        state: present

    - name: Rename RPMFusion Nonfree release repository
      ansible.builtin.yum_repository:
        name: rpmfusion-nonfree-updates
        file: rpmfusion-nonfree-updates
        state: absent

    - name: Configure RPMFusion NonFree repository
      ansible.builtin.yum_repository:
        name: rpmfusion-nonfree
        file: rpmfusion-nonfree-updates
        description: RPMFusion NonFree
        baseurl:
          - http://mirror.in2p3.fr/pub/linux/rpmfusion/nonfree/el/updates/$releasever/$basearch/
          - https://download1.rpmfusion.org/nonfree/el/updates/$releasever/$basearch/
        gpgcheck: true
        gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-nonfree-el-$releasever
        enabled: true
        priority: 20

    - name: Install RPMFusion Nonfree Tainted release
      ansible.builtin.dnf:
        name: rpmfusion-nonfree-release-tainted
        state: present

    - name: Configure RPMFusion NonFree Tainted repository
      ansible.builtin.yum_repository:
        name: rpmfusion-nonfree-tainted
        file: rpmfusion-nonfree-tainted
        description: RPMFusion NonFree Tainted
        baseurl:
          - http://mirror.in2p3.fr/pub/linux/rpmfusion/nonfree/el/tainted/$releasever/$basearch/debug/
          - https://download1.rpmfusion.org/nonfree/el/tainted/$releasever/$basearch/
        gpgcheck: true
        gpgkey: file:////etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-nonfree-el-$releasever
        enabled: true
        priority: 20

    - name: Update all packages
      ansible.builtin.dnf:
        name: "*"
        state: latest
        install_weak_deps: false

    - name: Install Core package group
      ansible.builtin.dnf:
        name: "@Core"
        state: present
        install_weak_deps: false

    - name: Install Base package group
      ansible.builtin.dnf:
        name: "@Base"
        state: present
        install_weak_deps: false

    - name: Install additional command-line tools
      ansible.builtin.dnf:
        name:
          - ntfs-3g
          - ntfsprogs
          - rtorrent
          - unrar-free
        state: present
        install_weak_deps: false

    - name: Install X11 package group
      ansible.builtin.dnf:
        name: "@base-x"
        state: present
        install_weak_deps: false

    - name: Install basic fonts for X11
      ansible.builtin.dnf:
        name: xorg-x11-fonts-*
        state: present
        install_weak_deps: false

    - name: Install setxkbmap tool
      ansible.builtin.dnf:
        name: setxkbmap
        state: present
        install_weak_deps: false

    - name: Install FFmpeg
      ansible.builtin.dnf:
        name: ffmpeg
        state: present
        install_weak_deps: false

    - name: Install basic KDE desktop
      ansible.builtin.dnf:
        name:
          - adwaita-gtk2-theme
          - bluedevil
          - breeze-icon-theme
          - colord-kde
          - cups-pk-helper
          - dolphin
          - ffmpegthumbs
          - gnome-keyring-pam
          - gwenview
          - initial-setup-gui
          - kamera
          - kate
          - kcalc
          - kcharselect
          - kde-gtk-config
          - kde-print-manager
          - kde-settings-pulseaudio
          - kdegraphics-thumbnailers
          - kdeplasma-addons
          - kdialog
          - kdnssd
          - keditbookmarks
          - kf5-akonadi-server
          - kf5-akonadi-server-mysql
          - kf5-baloo-file
          - kf5-kipi-plugins
          - khelpcenter
          - khotkeys
          - kinfocenter
          - kmenuedit
          - konsole5
          - kscreen
          - kscreenlocker
          - ksshaskpass
          - kwin
          - okular
          - pam-kwallet
          - phonon-qt5-backend-gstreamer
          - plasma-breeze
          - plasma-desktop
          - plasma-desktop-doc
          - plasma-nm
          - plasma-nm-l2tp
          - plasma-nm-openconnect
          - plasma-nm-openswan
          - plasma-nm-openvpn
          - plasma-nm-pptp
          - plasma-pa
          - plasma-systemmonitor
          - plasma-thunderbolt
          - plasma-workspace
          - plasma-workspace-geolocation
          - plasma-workspace-wallpapers
          - polkit-kde
          - qt5-qtbase-gui
          - qt5-qtdeclarative
          - spectacle
          - udisks2
          - xorg-x11-drv-libinput
          - plasma-workspace-x11
          - sddm
          - sddm-breeze
          - sddm-kcm
        state: present
        install_weak_deps: false

    - name: Remove useless packages
      ansible.builtin.dnf:
        name:
          - PackageKit-command-not-found
          - akregator
          - firewall-config
          - glibc-all-langpacks
          - kaddressbook
          - kcolorchooser
          - kde-partitionmanager
          - kfind
          - kgpg
          - kmag
          - kmail
          - kmousetool
          - kmouth
          - kontact
          - korganizer
          - kruler
          - kwalletmanager5
          - kwrite
          - plasma-discover
          - plasma-discover-notifier
          - plasma-drkonqi
        state: absent
        autoremove: true

# Installer le groupe de paquets Base

# Installer quelques outils supplémentaires

# Installer X11 + polices de base

# Installer KDE de base

# Installer GDM pour KDE

# Installer une panoplie d'applications

  handlers:

    - name: Relabel filesystem
      ansible.builtin.file:
        path: /.autorelabel
        state: touch

...