update..

roles/common/tasks/apt.yml

@@ -96,6 +96,18 @@
     - apt-initial-install
 
 
+- name: (apt.yml) Initial install debian packages (bookworm)
+  apt:
+    name: "{{ apt_initial_install_bookworm }}"
+    state: "{{ apt_install_state }}"
+  when:
+    - apt_initial_install_bookworm is defined and apt_initial_install_bookworm|length > 0
+    - ansible_facts['distribution'] == "Debian"
+    - ansible_facts['distribution_major_version'] == "12"
+  tags:
+    - apt-initial-install
+
+
 - name: (apt.yml) Initial install ubuntu packages (bionic)
   apt:
     name: "{{ apt_initial_install_bionic }}"
@@ -146,7 +158,7 @@
     - apt-microcode
 
 
-- name: (apt.yml) Install CPU microcode (debian buster/bullseye)
+- name: (apt.yml) Install CPU microcode (debian buster/bullseye/bookworm)
   apt:
     name: "{{ microcode_intel_package }}"
     state: present
@@ -154,7 +166,7 @@
   when:
     - apt_debian_contrib_nonfree_enable
     - ansible_facts['distribution'] == "Debian"
-    - ansible_facts['distribution_major_version'] == "10" or ansible_facts['distribution_major_version'] == "11"
+    - ansible_facts['distribution_major_version'] == "10" or ansible_facts['distribution_major_version'] == "11"or ansible_facts['distribution_major_version'] == "12"
     - ansible_facts['processor']|string is search("Intel")
   tags:
     - apt-initial-install

roles/common/tasks/nis-install-server.yml

@@ -66,18 +66,20 @@
   when:
     - ansible_facts['distribution'] == "Debian"
     - ansible_distribution_major_version|int >= 11
-    - ansible_distribution_major_version|int <= 12
     - file_etc_pam_d_common_password.stat.exists == True
 
+    #- ansible_distribution_major_version|int <= 12
+
 - name: (nis-install-server.yml) Change default password hash for local system accounts from SHA-512 to yescrypt
   shell: perl -i -n -p -e "s/^(password.+)yescrypt/\1sha512/" /etc/pam.d/common-password
   when:
     - ansible_facts['distribution'] == "Debian"
     - ansible_facts['distribution_major_version']|int >= 11
-    - ansible_facts['distribution_major_version']|int <= 12
     - file_etc_pam_d_common_password.stat.exists == True
     - presence_of_passwprd_hashing_yescrypt is changed
 
+    #- ansible_facts['distribution_major_version']|int <= 12
+
 
 # ---
 # /etc/default/nis