Merge remote-tracking branch 'origin/master'

tasks/main.yml

@@ -149,6 +149,12 @@
     - ansible_distribution == "Debian"
     - ansible_distribution_major_version == "8"
 
+# ha veletlenul /dev/sdb lesz a bootdisk, elhasalna a grub-pc non-interacive
+# upgrade-je a kovetkezo lepesben
+- name: set debconf grub-pc/install_devices to /dev/sdb if needed
+  tags: apt
+  shell: 'mount | grep -q "/dev/sdb1 .* /boot" && (echo "set grub-pc/install_devices /dev/sdb" | debconf-communicate) || true'
+
 - name: apt update
   tags: apt
   apt:
@@ -165,6 +171,10 @@
   apt:
     upgrade: full
 
+- name: reset grub-pc/install_devices if changed 4 steps earlier
+  tags: apt
+  shell: 'mount | grep -q "/dev/sdb1 .* /boot" && (echo "set grub-pc/install_devices /dev/sda" | debconf-communicate) || true'
+
 - name: install common packages for all opsys versions
   tags: apt
   apt:
@@ -290,6 +300,11 @@
     state: absent
     key: "{{ mgmt_ssh_key }}"
 
+- name: "disable sshd X11Forwarding"
+  copy:
+    content: "X11Forwarding no"
+    dest: /etc/ssh/sshd_config.d/x11forwarding.conf
+
 - name: copy pf6 package
   tags: pf6
   copy: