From cb3dc22df728272ad05de3684eb8dc672654a05e Mon Sep 17 00:00:00 2001
From: heqnx <root@heqnx.com>
Date: Fri, 27 Jun 2025 14:36:04 +0300
Subject: added conditional dnsmasq setup for vmbr1 and ufw filter rules; fixed
 a couple of issues by removing /etc/pve/priv, no need for modifying it

---
 tasks/pve_setup.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'tasks/pve_setup.yaml')

diff --git a/tasks/pve_setup.yaml b/tasks/pve_setup.yaml
index 9de9489..28fb8bc 100644
--- a/tasks/pve_setup.yaml
+++ b/tasks/pve_setup.yaml
@@ -97,6 +97,19 @@
   register: grub_update
   changed_when: "'Generating grub configuration file' in grub_update.stdout"
 
+- name: block all generic linux-image and linux-headers (non-pve)
+  copy:
+    dest: /etc/apt/preferences.d/no-debian-kernel
+    content: |
+      Package: linux-image-*
+      Pin: release *
+      Pin-Priority: -1
+
+      Package: linux-headers-*
+      Pin: release *
+      Pin-Priority: -1
+    mode: '0644'
+
 - name: remove problematic apt packages for pve
   apt:
     name: "{{ apt_packages_to_remove }}"
-- 
cgit v1.2.3