Re: [RFC PATCH] storage-subsystem: correct playbooks for Fedora distro

[Daniel Gomez <da.gomez@kernel.org>]

On 22/08/2025 04.18, Luis Chamberlain wrote:
> On Fri, Aug 15, 2025 at 02:29:33PM -0400, Chuck Lever wrote:
>> Unfortunately your experience is typical of first time kdevops users. It
>> took me several months of swearing to get it working the first time, but
>> I was a total newbie to Ansible and libvirt when I started.
> 
> I think we can make things better with NixOs as a default for future
> ramp ups, but this is *theoretical*. So here's what I think we should do:
> 
>   1) Add NixOS
>   2) Evaluate if we should just require user session
> 
> We can test 1) without making it a default for a while and see if really
> a lot of the distro pains are overcome.
> 
> 2) Would affect debian based users, and requires more review from others.
> 
> What else can we do?
> 
> Maybe just get claude to support selinux / apparmor?

Besides selinux/apparmor and libvirt user uri session support, I'd add:

* Remove sudo privilege escalation for the localhost (controller node)
	* This implies manual user configuration for running kdevops: user/group
	configuration, package installation, etc
	* Review/update kdevops docs regarding how to set up the controller node to
	be kdevops-ready
	* Note: We don't need to remove it entirely, just make this path optional

* Remove/optional wide host configuration: basically sandboxing kdevops
	* systemd services
	* SSH configurations
	* libvirt configs