From 04c02ecbef26a0e8462e443eace5b62be5d6951f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ga=C5=A1per=20Fele-=C5=BDor=C5=BE?= <polz@fri.uni-lj.si>
Date: Sat, 27 Sep 2025 09:17:27 +0200
Subject: [PATCH] Add hide users config for sddm

---
 roles/fri_base/files/hide_users.conf |  4 ++++
 roles/fri_base/tasks/main_lin.yml    | 30 ++++++++++++++++++++++++++++
 2 files changed, 34 insertions(+)
 create mode 100644 roles/fri_base/files/hide_users.conf

diff --git a/roles/fri_base/files/hide_users.conf b/roles/fri_base/files/hide_users.conf
new file mode 100644
index 0000000..b3a9f7e
--- /dev/null
+++ b/roles/fri_base/files/hide_users.conf
@@ -0,0 +1,4 @@
+[Users]
+MinimumUid=999
+MaximumUid=999
+RememberLastUser=false
diff --git a/roles/fri_base/tasks/main_lin.yml b/roles/fri_base/tasks/main_lin.yml
index 801ade2..f679c82 100644
--- a/roles/fri_base/tasks/main_lin.yml
+++ b/roles/fri_base/tasks/main_lin.yml
@@ -106,6 +106,7 @@
       - okular
       - htop
       - jdupes
+      - snapper
     state: latest
     update_cache: yes
 
@@ -118,6 +119,29 @@
       - kmail
     state: absent
 
+- name: Set volumes for snapper
+  set_fact:
+    snapper_volumes:  
+      - { confname: 'root', subvolume: '/'}
+      - { confname: 'opt', subvolume: '/opt'}
+
+- name: Create snapper configs
+  command: snapper -c {{item.confname}} create-config {{item.subvolume}}
+  ignore_errors: true
+  loop: "{{snapper_volumes}}"
+
+- name: Overwrite snapper configs
+  template:
+    src: snapper
+    dest: /etc/snapper/configs/{{item.confname}}
+  loop: "{{ snapper_volumes }}"
+
+- name: Disable APT snapshots for snapper
+  lineinfile:
+    path: /etc/default/snapper
+    regexp: '^DISABLE_APT_SNAPSHOT='
+    line: 'DISABLE_APT_SNAPSHOT="yes"'
+
 - name: Set up additional groups for students
   vars:
     additional_groups:
@@ -218,6 +242,12 @@
     regexp: "#?greeter-hide-users="
     line: greeter-hide-users=true
 
+- name: Hide users in sddm
+  copy:
+    dest: /etc/sddm.conf.d/
+    src: hide_users.conf
+
+
 - name: Copy authorized_keys
   become: false
   ansible.posix.authorized_key: