Secure Koji setup: add koji user, fix NFS/SELinux, use CentOS Stream 10 repos

roles/nfs-client/tasks/main.yaml

@@ -25,3 +25,12 @@
     fstype: nfs
     opts: "rw,sync"
     state: mounted
+
+- name: Set SELinux context for Koji NFS mount
+  ansible.builtin.command: semanage fcontext -a -t httpd_sys_rw_content_t "{{ koji_top_dir }}(/.*)?"
+
+- name: Apply SELinux context
+  ansible.builtin.command: restorecon -r -v "{{ koji_top_dir }}"
+
+- name: Flush systemd journal to disk
+  ansible.builtin.command: journalctl --flush