Clean up FvS playbooks and add VM server playbook.

fvs-desktop.yml

@@ -1,6 +1,5 @@
+## This playbook deploys a FvS desktop machine.
 ---
-# This playbook deploys a kiosk-computer
-
 - name: apply configuration to the machines
   hosts: all
   remote_user: ansible

fvs-home-server.yml

@@ -1,3 +1,4 @@
+## This playbook deploys a FvS home server machine.
 ---
 - name: apply configuration to the home server
   hosts: all

fvs-mkhome.yml

@@ -1,25 +0,0 @@
----
-# This playbook deploys a kiosk-computer
-
-- name: apply configuration to the machines
-  hosts: all
-  remote_user: ansible
-  become: yes
-  vars:
-    extra_pkgs:
-      - vim
-      - git
-      - mc
-      - tmux
-      - nmap
-      - netcat-openbsd
-      - net-tools
-      - tree
-      - console-setup
-      - virt-manager
-    extra_pkgs_bpo: [ linux-image-amd64 ]  # [ libreoffice ]
-
-  roles:
-    - up2date-debian
-    ## Choose either gnome or KDE:
-    - fvs-mkhome

fvs-vm-server.yml

@@ -0,0 +1,28 @@
+## This playbook deploys a FvS VM server machine.
+---
+- name: apply configuration to the VM server
+  hosts: all
+  remote_user: ansible
+  become: yes
+  vars:
+    extra_pkgs:
+      - vim
+      - libvirt-daemon-system
+    extra_pkgs_bpo: [ ]  # [ libreoffice ]
+
+  roles:
+    - up2date-debian
+    - fvs-sssd
+
+  tasks:
+    - name: enable pam_mkhomedir.so
+      lineinfile:
+        dest: /etc/pam.d/common-session
+        line: "session	optional	pam_mkhomedir.so  umask=0027"
+        insertbefore: "session	optional	pam_mount.so"
+
+    - name: allow all users to use VMs
+      lineinfile:
+        dest: /etc/libvirt/libvirtd.conf
+        line: 'auth_unix_rw = "none"'
+        insertafter: '#auth_unix_rw = "polkit"'