Set primary video output device for some devices

Don't force secure boot measurement for TPM disk encryption
Remove Calligra from devices due to compatibility issues
2026-01-26 09:56:37 +01:00 · 2026-01-26 09:54:56 +01:00 · 2026-01-26 09:53:09 +01:00
4 changed files with 708 additions and 691 deletions
--- a/inventory.yml
+++ b/inventory.yml
--- a/roles/lmn_encrypt/tasks/tpm2.yml
+++ b/roles/lmn_encrypt/tasks/tpm2.yml
@ -32,7 +32,7 @@
    cmd: >
      systemd-run -P --wait
      -p SetCredential=cryptenroll.passphrase:{{ encrypt_passphrase | default(encrypt_passphrase_initial) }}
-      systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 {{ encrypt_device }} --wipe-slot=tpm2
+      systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs="" {{ encrypt_device }} --wipe-slot=tpm2
  no_log: true
  when: "'tpm2' not in encrypt_slots_result.stdout"

--- a/roles/lmn_kde/defaults/main.yml
+++ b/roles/lmn_kde/defaults/main.yml
@ -3,7 +3,7 @@ kde_desktop_pkg:
  - akonadi-backend-sqlite
  - arduino
  - bluefish
-  - calligra
+  # - calligra
  - codeblocks
  - dia
  - filius
--- a/roles/lmn_tmpfixes/tasks/main.yml
+++ b/roles/lmn_tmpfixes/tasks/main.yml
@ -24,3 +24,11 @@
    replace: 'GRUB_CMDLINE_LINUX="i915.force_probe=4909"'
  notify: Run update-grub
  when: ansible_board_vendor == "LENOVO" and ansible_board_name == "32CB"
+
+- name: Remove calligra
+  ansible.builtin.apt:
+    name:
+      - calligra
+    state: absent
+    purge: true
+    autoremove: true
Author	SHA1	Message	Date
Raphael Dannecker	e45cf5c0d8	Set primary video output device for some devices	2026-01-26 09:56:37 +01:00
Raphael Dannecker	b0c45eef59	Don't force secure boot measurement for TPM disk encryption	2026-01-26 09:54:56 +01:00
Raphael Dannecker	46c34fe0b5	Remove Calligra from devices due to compatibility issues	2026-01-26 09:53:09 +01:00