Remove cruft and add mkpasswd setup

roles/base/tasks/main.yml

@@ -162,6 +162,7 @@
       - dns-root-data
       - bind9-host
       - dnsutils
+      - whois
       - postfix
       - ntp
       - openssh-client
@@ -523,18 +524,17 @@
     dest: /var/home
   tags: users
 
-- name: ensure group media exists
+# root
-  group:
+- name: generate Root password hash
-    name: media
+  command: "mkpasswd --method=sha512crypt {{ root_password }}"
-    gid: 9000
+  no_log: true
-    state: present
+  register: mkpasswd
   tags: users
 
-# root
 - name: set Root password
   user:
     name: root
-    password: "{{ passwdhash_root }}"
+    password: "{{ mkpasswd.stdout }}"
   tags: users
 
 - name: remove Root known_hosts
@@ -656,7 +656,7 @@
     name: "{{ item.name }}"
     uid: "{{ item.uid }}"
     group: operator
-    groups: sudo,adm,media,wireshark
+    groups: sudo,adm,wireshark
     shell: /bin/bash
     home: "/var/home/{{ item.name }}"
     createhome: yes