Secure Koji setup: add koji user, fix NFS/SELinux, use CentOS Stream 10 repos

roles/common/tasks/main.yaml

@@ -85,10 +85,25 @@
   ansible.builtin.shell:
     cmd: "gpg --armor --export 'Koji Signing Key' > {{ koji_pki_dir }}/gpg_key.pub"
     creates: "{{ koji_pki_dir }}/gpg_key.pub"
-    changed_when: false
   delegate_to: localhost
   run_once: true
 
+- name: Set hostname
+  ansible.builtin.hostname:
+    name: "{{ inventory_hostname }}"
+  when: inventory_hostname != 'localhost'
+
+- name: Enable persistent systemd journal
+  ansible.builtin.file:
+    path: /var/log/journal
+    state: directory
+    mode: "0755"
+  when: inventory_hostname != 'localhost'
+
+- name: Flush systemd journal to disk
+  ansible.builtin.command: journalctl --flush
+  when: inventory_hostname != 'localhost'
+
 - name: "Remove existing host keys"
   ansible.builtin.shell:
     cmd: "ssh-keygen -R {{ item }}"