Fix mode for bash configuration lock

files/grub/40_custom

@@ -0,0 +1,7 @@
+#!/bin/sh
+exec tail -n +3 $0
+# This file provides an easy way to add custom menu entries.  Simply type the
+# menu entries you want to add after this comment.  Be careful not to change
+# the 'exec tail' line above.
+set superusers="root"
+password_pbkdf2 root grub.pbkdf2.sha512.10000.0D985399DE122A746A584ACE636D08F8C245ABC2CE7B25644371E69B45392CB82F08A8514E4FFA79A2A55B8DBEBFDB6F30D20048411392EF6CEBC0F04A9A7238.DC976A6D530EAC4E8E7CE68A7699178ED4A3E4E4E80890614B05F61713DC5104F8C0746371791DF17F1120AFF554B98EBB3172047AC38DD593AF42EA731CD03F

setup.yaml

@@ -1,6 +1,7 @@
 ---
 - name: SSH
   hosts: all
+  tags: ssh
 
   tasks:
     - name: Ensure root ssh directory exists
@@ -18,6 +19,7 @@
 
 - name: General
   hosts: all
+  tags: general
 
   tasks:
     - name: Install services
@@ -51,6 +53,7 @@
 
 - name: Users
   hosts: all
+  tags: users
 
   tasks:
     - name: Set bash as default shell for root
@@ -73,7 +76,7 @@
         path: '{{ item }}'
         owner: root
         group: root
-        mode: 644
+        mode: 0644
         state: touch
       loop:
         - /home/student/.bashrc
@@ -88,6 +91,7 @@
 
 - name: Software
   hosts: all
+  tags: software
 
   tasks:
     - name: Add non-free repository
@@ -115,6 +119,9 @@
 
 - name: Gnome
   hosts: all
+  tags:
+    - gnome
+    - software
 
   handlers:
     - name: Update dconf database
@@ -177,6 +184,7 @@
 
 - name: PipeWire
   hosts: all
+  tags: pipewire
 
   tasks:
     - name: Install PipeWire
@@ -215,18 +223,26 @@
 
 - name: GRUB
   hosts: all
+  tags: grub
 
   handlers:
     - name: grub-mkconfig
       command: 'grub-mkconfig -o /boot/grub/grub.cfg'
 
   tasks:
-    - name: Copy GRUB configuration
+    - name: Copy default GRUB configuration
       template:
         src: 'files/grub/grub'
         dest: '/etc/default/grub'
       notify: grub-mkconfig
 
+    - name: Copy GRUB password configuration
+      copy:
+        src: 'files/grub/40_custom'
+        dest: '/etc/grub.d/40_custom'
+        mode: 0755
+      notify: grub-mkconfig
+
 
 - name: Firefox
   hosts: all
@@ -247,6 +263,7 @@
 
 - name: Bakaláři
   hosts: teachers
+  tags: bakalari
 
   tasks:
     - name: Create a desktop shortcut for Bakaláři