add potential mount items and overrides

tasks/variable_loader_common.yml

@@ -6,6 +6,11 @@
       with_items:
         - "{{ ansible_distribution }}.yml"
 
+    - name: Load version specific overrides
+      ansible.builtin.include_vars: "{{ item }}"
+      with_items:
+        - "{{ ansible_distribution }}-{{ ansible_distribution_major_version }}.yml"
+
     - name: Create overrides if we're an IPA Replica
       ansible.builtin.include_vars: "{{ item }}"
       with_first_found:

vars/RedHat-10.yml

@@ -0,0 +1,4 @@
+---
+mount_options_var_tmp: "defaults,nodev,nosuid"
+mount_options_tmp: "defaults,nodev,nosuid"
+...

vars/RedHat-8.yml

@@ -0,0 +1,3 @@
+---
+# Nothing to load
+...

vars/RedHat-9.yml

@@ -0,0 +1,3 @@
+---
+# Nothing to load
+...

vars/RedHat.yml

@@ -14,6 +14,14 @@ grub_boot_options: audit=1
 grub_config_path_link: /etc/grub2.cfg
 grub_config_path_efi: /etc/grub2-efi.cfg
 
+mount_options_var_tmp: "defaults,nodev,nosuid,noexec"
+mount_options_tmp: "defaults,nodev,nosuid,noexec"
+mount_options_dev_shm: "defaults,nodev,nosuid,noexec"
+mount_options_var_log: "defaults,nodev,nosuid,noexec"
+mount_options_var_log_audit: "defaults,nodev,nosuid,noexec"
+mount_options_home: "defaults,nodev,nosuid"
+mount_options_var: "defaults,nodev,nosuid"
+
 ipatype: client
 
 remove_packages:

vars/Rocky-10.yml

@@ -0,0 +1 @@
+RedHat-10.yml

vars/Rocky-8.yml

@@ -0,0 +1 @@
+RedHat-8.yml

vars/Rocky-9.yml

@@ -0,0 +1 @@
+RedHat-9.yml