Tasks related to pkg installs are removed. Provisioned via a common role.

In all image builds, pkg installs are provisioned via a common role
that installs pkgs via a pkg list file.

ansible/roles/cheaha.node/tasks/main.yml

 ---
-# tasks file for cheaha.node
 - name: Update /etc/hosts with cluster addressing
   ansible.builtin.lineinfile:
     path: /etc/hosts
@@ -8,21 +7,17 @@
     - "172.20.0.24 cheaha-master02.cm.cluster cheaha-master02"
     - "172.20.0.22 cheaha-master01.cm.cluster cheaha-master01"
     - "172.20.0.25 master.cm.cluster master localmaster.cm.cluster localmaster ldapserver.cm.cluster ldapserver"
+
 - name: Add proper DNS search to lookup other nodes on the cluster
   ansible.builtin.lineinfile:
     path: /etc/dhcp/dhclient.conf
     insertbefore: BOF
     line: 'append domain-name " cm.cluster rc.uab.edu ib.cluster drac.cluster eth.cluster ib-hdr.cluster";'
+
 - name: Disable SELinux
   ansible.posix.selinux:
     state: disabled
-- name: Copy cm.repo into place (consider making this a template)
-  ansible.builtin.copy:
-    src: cm.repo
-    dest: /etc/yum.repos.d/cm.repo
-    owner: root
-    group: root
-    mode: 0644
+
 - name: Copy CM repo GPG key
   ansible.builtin.copy:
     src: RPM-GPG-KEY-cm
@@ -30,24 +25,18 @@
     owner: root
     group: root
     mode: 0644
-- name: Install required packages
-  yum:
-    name:
-      - slurm-client-18.08.9
-      - munge-0.5.13
-      - openldap-servers-2.4.48
-      - Lmod-7.7.14
-      - cm-modules-init-client-8.2
-      - cmdaemon
-      - nss-pam-ldapd
-      - ruby
-      - python3
-    state: present
+
 - name: Add ssh key for root access
   ansible.posix.authorized_key:
     user: root
     state: present
     key: "{{ root_ssh_key }}"
+
+- name: Install openstack-rocky repo
+  ansible.builtin.yum:
+    name: centos-release-openstack-rocky
+    state: present
+
 - name: Set timezone to America/Chicago
   community.general.timezone:
     name: America/Chicago
@@ -55,8 +44,3 @@
 - name: Install zsh
   import_tasks: zsh.yml
 
-- name: Disable firewalld
-  ansible.builtin.service:
-    name: firewalld
-    state: stopped
-    enabled: no

ansible/roles/install_packages/tasks/main.yml

+---
+- name: Copy yum repo files
+  ansible.builtin.copy:
+    src: "{{ item }}"
+    dest: "/etc/yum.repos.d/{{ item }}"
+    owner: root
+    group: root
+    mode: 0644
+  loop: "{{ yum_repo_files }}"
+
+- name: Install prerequisite packages
+  yum:
+    name: epel-release
+    state: present
+
+- name: Install packages
+  ansible.builtin.yum:
+    name: "{{ lookup('file', '{{ pkg_list_file }}').splitlines() }}"
+    state: present