initial opencode commit

roles/packages/defaults/main.yml

@@ -0,0 +1,30 @@
+---
+base_packages:
+  - wget
+  - curl
+  - tar
+  - unzip
+  - git
+  - vim-enhanced
+  - htop
+  - tmux
+  - firewalld
+  - fail2ban
+  - dnf-automatic
+  - policycoreutils-python-utils
+  - python3-pip
+
+podman_packages:
+  - container-tools
+  - podman
+  - podman-docker
+  - podman-compose
+  - fuse-overlayfs
+  - slirp4netns
+  - netavark
+
+qemu_packages:
+  - qemu-kvm-core
+
+install_qemu: false
+enable_dnf_automatic: true

roles/packages/tasks/main.yml

@@ -0,0 +1,45 @@
+---
+# Install base system packages, Podman tooling, and keep everything patched.
+
+- name: Install common system packages
+  ansible.builtin.dnf:
+    name: "{{ base_packages }}"
+    state: present
+
+- name: Install Podman container tooling
+  ansible.builtin.dnf:
+    name: "{{ podman_packages }}"
+    state: present
+
+- name: Install QEMU packages (optional - required for building images that need emulation)
+  ansible.builtin.dnf:
+    name: "{{ qemu_packages }}"
+    state: present
+  when: install_qemu | bool
+
+- name: Apply all available package updates
+  ansible.builtin.dnf:
+    name: "*"
+    state: latest
+    update_only: true
+
+- name: Enable automatic security updates
+  ansible.builtin.systemd:
+    name: dnf-automatic.timer
+    enabled: true
+    state: started
+  when: enable_dnf_automatic | bool
+
+- name: Configure dnf-automatic to apply updates
+  ansible.builtin.ini_file:
+    path: /etc/dnf/automatic.conf
+    section: commands
+    option: apply_updates
+    value: "yes"
+  when: enable_dnf_automatic | bool
+
+- name: Install container SELinux policy support
+  ansible.builtin.dnf:
+    name: container-selinux
+    state: present
+  when: ansible_selinux is defined and ansible_selinux.status == "enabled"