Stage 7/8 Complete Setup – Fully Idempotent, dnf5-safe, Portable
Automates a secure, optimized Fedora GNOME workstation setup.
- Full system upgrade
- RPM Fusion (free + nonfree + tainted)
- Multimedia codecs
- TLP power management
- Firewalld hardened (removes 1025–65535 ports)
- GNOME tweaks (button layout)
- System timezone
- Smart reboot: only if needed, skips on dev machine
- Fedora 38–41+ (tested on 41 with dnf5)
- User
tvexists (or changedesktop_user) - Sudo access
git clone https://github.com/kev2600/fedora-master-primer.git
cd fedora-master-primer
ansible-playbook fedora-master-primer.yml -K
-K` asks for sudo password once
> First run may reboot (30s warning)
> Subsequent runs: `changed=0`
---
## Dev vs Laptop
- **Dev**: `sudo hostnamectl set-hostname fedora-dev` → no reboot
- **Laptop**: reboots only if needed
---
## Customize
```yaml
vars:
desktop_user: "tv"
system_timezone: "America/Moncton"
ansible-playbook fedora-master-primer.yml -K --tags packages