diff --git a/lmn-desktop.yml b/lmn-desktop.yml
index c1d3ce6..cbad29a 100644
--- a/lmn-desktop.yml
+++ b/lmn-desktop.yml
@@ -22,7 +22,7 @@
       - console-setup
       - krb5-user
       - unattended-upgrades
-    extra_pkgs_bpo: [] # [ linux-image-amd64 ]  # [ libreoffice ]
+    extra_pkgs_bpo: [ linux-image-amd64 ]  # [ libreoffice ]
     ansible_python_interpreter: "/usr/bin/python3"
 
   roles:
diff --git a/roles/lmn_mount/tasks/main.yml b/roles/lmn_mount/tasks/main.yml
index c15d6c0..e71e674 100644
--- a/roles/lmn_mount/tasks/main.yml
+++ b/roles/lmn_mount/tasks/main.yml
@@ -17,7 +17,7 @@
         server="{{ smb_server }}"
         path="{{ smb_share }}"
         mountpoint="/media/%(DOMAIN_USER)/share"
-        options="sec=krb5i,cruid=%(USERUID),user=%(USER)"
+        options="sec=krb5i,cruid=%(USERUID),user=%(USER),gid=1001,file_mode=0770,dir_mode=0770"
       ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>sddm</user><user>virti</user></or></not></volume>
     insertafter: "<!-- Volume definitions -->"
 
diff --git a/roles/lmn_vm/tasks/main.yml b/roles/lmn_vm/tasks/main.yml
index 92112f3..5b1df6e 100644
--- a/roles/lmn_vm/tasks/main.yml
+++ b/roles/lmn_vm/tasks/main.yml
@@ -18,6 +18,13 @@
     autoremove: true
   when: ansible_distribution_release == 'bookworm'
 
+- name: install squid
+  apt:
+    name:
+      - squid
+    state: latest
+    autoremove: true
+
 - name: allow all users to use VMs
   lineinfile:
     dest: /etc/libvirt/libvirtd.conf