fix(roles/repo_mariadb): scope dnf module disable and module_hotfixes to RHEL 8/9

On RHEL 10 modularity was removed (DNF5) and the `mariadb` module no longer
exists, so `dnf -y module disable mariadb` fails with `missing groups or
modules: mariadb`. Limit both the task and the `module_hotfixes = 1`
directive in the generated `MariaDB.repo` to RHEL 8 and 9 only.

Author: danyalberchtoldlf

CHANGELOG.md

@@ -29,6 +29,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * **role:infomaniak_vm**: Stop passing `security_groups` to `openstack.cloud.server`. Since the security group is already applied on the `ext-net1` port, setting it on the server made Neutron attempt the same on internal-network ports where `port_security_enabled` is `false`, failing with `Network requires port_security_enabled and subnet associated in order to apply security groups.`
 * **role:openvpn_server**: Fix `invalid selinux context: [Errno 22] Invalid argument` on RHEL 10 when deploying `server.p12` / `crl.pem`. The SELinux type `openvpn_etc_t` no longer exists in the RHEL 10 core policy (only `openvpn_port_t` and the packet types remain). The role now uses `etc_t` on RHEL 10 via a new OS-specific internal variable `__openvpn_server__selinux_etc_type`; other platforms keep `openvpn_etc_t`
 * **role:repo_epel**: Fix malformed RHEL 10 `epel.repo`: a missing newline in the `[epel-source]` section rendered `enabled=0username=<login>` when `repo_epel__basic_auth_login` was set, causing dnf to reject the file with `Invalid configuration value: enabled=0username=...`
+* **role:repo_mariadb**: Fix `dnf -y module disable mariadb` failing on RHEL 10 with `missing groups or modules: mariadb`. Modularity was removed in EL10 (DNF5) and the `mariadb` module no longer exists, so the task and the corresponding `module_hotfixes = 1` directive in the generated `MariaDB.repo` are now scoped to RHEL 8 and 9 only
 * **role:infomaniak_vm**: Apply the VM's security group on the `ext-net1` port instead of (only) on the server. When a VM boots against a pre-created port, Neutron enforces the port's security groups, not those passed to the server, so without this the configured rules were silently ignored on the public interface
 * **role:logstash**: Default value of `logstash__java_opts` now caps JVM heap size at 8g.
 * **role:logstash**: Default value of `logstash__java_opts` now sets JVM heap size to be 60% of total memory.

COMPATIBILITY.md

@@ -98,7 +98,7 @@ logstash                             |    |    |   | x |    |       |   x   |
 lvm                                  |    |    |   |   |    |       |       |
 mailto_root                          |    |    | x | x |    |       |       |
 mailx                                | x  | x  | x | x | x  |       |       | Fedora
-mariadb_server                       | x  | x  | x | x |    |       |       | Galera on Debian is untested
+mariadb_server                       | x  | x  | x | x | x  |       |       | Galera on Debian is untested
 mastodon                             |    |    |   | x |    |       |       |
 maxmind_geoip                        |    |    | x |   |    |       |       |
 minio_client                         |    |    | x |   |    |       |       |
@@ -146,7 +146,7 @@ repo_grafana                         | x  | x  | x | x |    |       |       |
 repo_graylog                         | x  | x  | x |   |    |       |       |
 repo_icinga                          | x  | x  | x | x |    |   x   |       |
 repo_influxdb                        | x  | x  | x | x |    |       |       |
-repo_mariadb                         | x  | x  | x | x |    |       |   x   |
+repo_mariadb                         | x  | x  | x | x | x  |       |   x   |
 repo_mongodb                         | x  | x  | x | x |    |       |       |
 repo_monitoring_plugins              |    |    | x | x |    |   x   |       |
 repo_mydumper                        |    |    | x | x |    |       |       |

roles/repo_mariadb/tasks/RedHat.yml

@@ -45,7 +45,7 @@
     ansible.builtin.command: 'dnf -y module disable mariadb'
     register: 'repo_mariadb__command_result'
     changed_when: "'Nothing to do' not in repo_mariadb__command_result.stdout"
-    when: 'ansible_facts["distribution_major_version"] | int > 7'
+    when: 'ansible_facts["distribution_major_version"] | int in [8, 9]'
 
   tags:
     - 'repo_mariadb'

roles/repo_mariadb/templates/etc/yum.repos.d/RedHat-MariaDB.repo.j2

@@ -1,5 +1,5 @@
 # {{ ansible_managed }}
-# 2025080401
+# 2026042701
 
 [mariadb-main]
 name = MariaDB Server
@@ -11,7 +11,7 @@ baseurl = https://rpm.mariadb.org/{{ repo_mariadb__version }}/rhel/$releasever/$
 gpgkey = file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY
 gpgcheck = 1
 enabled = 1
-{% if ansible_facts["distribution_major_version"] | int > 7 %}
+{% if ansible_facts["distribution_major_version"] | int in [8, 9] %}
 module_hotfixes = 1
 {% endif %}
 {% if repo_mariadb__basic_auth_login is defined and repo_mariadb__basic_auth_login | length %}