RaspberryPi 5, Debian 13 (trixie), as DLNA renderer with output to a Teufel Cinebar One+ via USB, configured with Ansible

pcfe@t3600 sdhl-code (devel) $ git diff
diff --git a/type__entertainment_raspi_dlna__prepare.yml b/type__entertainment_raspi_dlna__prepare.yml
index 3a31bf3..0965c8a 100644
--- a/type__entertainment_raspi_dlna__prepare.yml
+++ b/type__entertainment_raspi_dlna__prepare.yml
@@ -1,7 +1,7 @@
 # code: language=ansible
 ####################################################################################
 #  author: Patrick C. F. Ernzer <pcfe@pcfe.net>
-#  description: Prepares the RasPi 5 (running RaspberryPi OS Lite (Debian 12) connected to the Teufel Cinebar One+ for DLNA sink usage
+#  description: Prepares the RasPi 5 (running RaspberryPi OS Lite (Debian 13) connected to the Teufel Cinebar One+ for DLNA sink usage
 #  license: Creative Commons Attribution-ShareAlike 4.0 International License
 #  min_ansible_version: 2.14
 ####################################################################################
@@ -36,9 +36,9 @@
       ansible.builtin.command: newaliases
       changed_when: true
 
-    - name: Handle restarting cpufrequtils.service
+    - name: Handle restarting cpupower.service
       ansible.builtin.service:
-        name: cpufrequtils
+        name: cpupower
         state: restarted
       changed_when: true
 
@@ -73,8 +73,8 @@
     # https://github.com/hzeller/gmrender-resurrect/blob/master/INSTALL.md
     # and gmrender-resurrect is the only thing I use this RasPi for.
     # tmux and vim-solarized are not technically needed, I just like to use them
-    # cpufrequtils because I want the ability to reduce idle power consumption
-    - name: Ensure wanted packages are present if RasPi is running Debian 12 (Bookworm) or later
+    # linux-cpupower because I want the ability to reduce idle power consumption
+    - name: Ensure wanted packages are present if RasPi is running Debian 13 (Trixie) or later
       ansible.builtin.package:
         name:
           - libupnp-dev
@@ -86,11 +86,12 @@
           - gstreamer1.0-libav
           - gstreamer1.0-alsa
           - postfix
-          - cpufrequtils
+          - linux-cpupower
           - tmux
           - vim-solarized
+          - btop
         state: present
-      when: ansible_distribution == "Debian" and ansible_distribution_major_version >= "12"
+      when: ansible_distribution == "Debian" and ansible_distribution_major_version >= "13"
 
     # for USB audio, see all of the following links
     # https://learn.adafruit.com/usb-audio-cards-with-a-raspberry-pi/updating-alsa-config
@@ -185,7 +186,8 @@
           - gmediarender
         state: present
 
-    # While this is the default in the Debian 12 gmediarender package today (2024-04-07), I do want this nailed down.
+    # While this was the default in the Debian 12 gmediarender package on 2024-04-07, I do want this nailed down.
+    # and I actually forgot to check on 13 before running the playbook
     - name: Ensure gmediarender runs as nobody:audio
       ansible.builtin.lineinfile:
         path: /etc/default/gmediarender
@@ -246,8 +248,8 @@
     # FIXME: maybe add a logrotate conf file as the logs are very chatty indeed
     # not yet done because I tend to only enable logging during intial setup. Once it works I disable logging.
 
-    # as of 2024-04-07 I still get a SystemV init file from the Debian 12 gmediarenderer package.
-    # but since Debian 12 has wrappers to allow `systemctl […] gmediarender.service` commands to work just fine.
+    # as of 2026-05-17 I still get a SystemV init file from the Debian 13 gmediarenderer package.
+    # but since Debian 13 also has wrappers to allow `systemctl […] gmediarender.service` commands to work just fine.
     # for now just use that /etc/init.d/gmediarender even though stopping the service takes 30 secs,
     # that's fine as systemd gices it 5 mins to get its stuff sorted.
     #
@@ -260,14 +262,12 @@
         state: started
 
     # Currently I have no use for Bluetooth on this DLNA renderer, disable services that use it.
+    # in the past (Debian 12 and older) I also disabled hciuart. in 13 that service seems gone, goodie
     - name: Ensure Bluetooth using services I have no use for are disabled and stopped
       ansible.builtin.service:
-        name: '{{ item }}'
+        name: bluetooth
         enabled: false
         state: stopped
-      loop:
-        - hciuart
-        - bluetooth
 
     # disable onboard Bluetooth and WLAN
     # using a [model filter](https://www.raspberrypi.com/documentation/computers/config_txt.html#model-filters)
@@ -336,21 +336,20 @@
       notify: Handle running newaliases
 
     # c.f. https://www.raspberrypi.com/documentation/computers/raspberry-pi.html#using-dvfs
-    - name: Ensure cpufrequtils service is enabled and running
+    - name: Ensure cpupower service is enabled and running
       ansible.builtin.service:
-        name: cpufrequtils
+        name: cpupower
         enabled: true
         state: started
 
-    # on 2024-05-17 I still got an old style SysV init file with cpufrequtils, :sigh:
-    # actively setting this to fail if the file does not exist so that I can notice
-    # when cpufrequtils on Debian gets modernised to a proper systemd service
-    - name: Ensure old style /etc/init.d/cpufrequtils uses the powersave governor
+    # we want the powersave governors
+    - name: Ensure cpupower service has the powersave governor configured
       ansible.builtin.lineinfile:
-        path: /etc/init.d/cpufrequtils
-        regexp: '^GOVERNOR='
-        line: 'GOVERNOR="powersave"'
+        path: /etc/cpupower-service.conf
+        regexp: ^GOVERNOR=
+        insertafter: ^#GOVERNOR=
+        line: GOVERNOR='powersave'
         create: false
-      notify: Handle restarting cpufrequtils.service
+      notify: Handle restarting cpupower.service
 
 ...
pcfe@t3600 sdhl-code (devel) $ 

pcfe@raspi5:~ $ sudo apt update
Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://deb.debian.org/debian trixie-updates InRelease
Hit:3 http://deb.debian.org/debian-security trixie-security InRelease
Hit:4 http://archive.raspberrypi.com/debian trixie InRelease    
79 packages can be upgraded. Run 'apt list --upgradable' to see them.
pcfe@raspi5:~ $ 

pcfe@raspi5:~ $ sudo apt full-upgrade
The following packages were automatically installed and are no longer required:
  libdrm-amdgpu1  libglvnd0           libwayland-server0  libxcb-shm0     mesa-libgallium
  libegl-mesa0    libllvm19           libx11-xcb1         libxcb-sync1
  libegl1         libsensors-config   libxcb-dri3-0       libxcb-xfixes0
  libgbm1         libsensors5         libxcb-present0     libxshmfence1
  libgles2        libwayland-client0  libxcb-randr0       libz3-4
Use 'sudo apt autoremove' to remove them.

Upgrading:
  7zip                  libcamera0.7              libpython3.13-minimal   openssl
  base-files            libcap2                   libpython3.13-stdlib    openssl-provider-legacy
  bash                  libcap2-bin               libqt6core6t64          python3-jwt
  busybox               libcom-err2               librpicam-app1          python3.13
  curl                  libcurl3t64-gnutls        libss2                  python3.13-minimal
  dirmngr               libcurl4t64               libssl3t64              python3.13-venv
  distro-info-data      libexif12                 libsystemd-shared       raspi-firmware
  dnsmasq-base          libext2fs2t64             libsystemd0             rpi-eeprom
  e2fsprogs             libglib2.0-0t64           libudev1                rpicam-apps-core
  gnupg-utils           libglib2.0-data           linux-headers-rpi-2712  rpicam-apps-lite
  gpg                   libgnutls30t64            linux-headers-rpi-v8    rsync
  gpg-agent             libnghttp2-14             linux-image-rpi-2712    sed
  gpg-wks-client        libngtcp2-16              linux-image-rpi-v8      ssh
  gpgconf               libngtcp2-crypto-gnutls8  linux-libc-dev          sudo
  gpgsm                 libntfs-3g89t64           logsave                 systemd
  gpgv                  libpam-systemd            nano                    systemd-sysv
  initramfs-tools       libpisp-common            ntfs-3g                 systemd-timesyncd
  initramfs-tools-bin   libpisp1                  openssh-client          tzdata
  initramfs-tools-core  libpng16-16t64            openssh-server          udev
  libcamera-ipa         libpython3.13             openssh-sftp-server

Installing dependencies:
  cpp-14-for-host                  linux-headers-6.18.29+rpt-common-rpi
  gcc-14-for-host                  linux-headers-6.18.29+rpt-rpi-2712
  linux-base-6.18.29+rpt-rpi-2712  linux-headers-6.18.29+rpt-rpi-v8
  linux-base-6.18.29+rpt-rpi-v8    linux-image-6.18.29+rpt-rpi-2712
  linux-base-rpi-2712              linux-image-6.18.29+rpt-rpi-v8
  linux-base-rpi-v8                linux-kbuild-6.18.29+rpt

Suggested packages:
  debian-kernel-handbook  firmware-linux-free  linux-doc-6.18

Summary:
  Upgrading: 79, Installing: 12, Removing: 0, Not Upgrading: 0
  Download size: 147 MB
  Space needed: 180 MB / 10.0 GB available

Continue? [Y/n] 
[…]

pcfe@raspi5:~ $ sudo reboot
pcfe@raspi5:~ $ Read from remote host raspi5.internal.pcfe.net: Connection reset by peer
Connection to raspi5.internal.pcfe.net closed.
client_loop: send disconnect: Broken pipe

user@workstation ~ $ ssh raspi5.internal.pcfe.net
Linux raspi5 6.18.29+rpt-rpi-2712 #1 SMP PREEMPT Debian 1:6.18.29-1+rpt1 (2026-05-12) aarch64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Sun May 17 11:44:07 2026 from 192.168.50.59
pcfe@raspi5:~ $ uname -r
6.18.29+rpt-rpi-2712
pcfe@raspi5:~ $ cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 13 (trixie)"
NAME="Debian GNU/Linux"
VERSION_ID="13"
VERSION="13 (trixie)"
VERSION_CODENAME=trixie
DEBIAN_VERSION_FULL=13.5
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
pcfe@raspi5:~ $ 

---
# RTFM at https://ansible.readthedocs.io/projects/navigator/settings/
ansible-navigator:
  ansible:
    inventory:
      entries:
        - ../../../HouseNet/ansible-inventory-housenet/hosts
        - ../../../HouseNet/ansible-vault-housenet/empty-hosts-file-to-make-ansible-happy.ini
ansible-runner:
    artifact-dir: navigator-output/runner/
    rotate-artifacts-count: 10
  execution-environment:
    container-engine: podman
    enabled: true
    image: registry.redhat.io/ansible-automation-platform-24/ee-minimal-rhel8
    pull:
      policy: missing
    environment-variables:
      set:
        ANSIBLE_LOG_PATH: navigator-output/ansible.log
    volume-mounts:
      - src: /etc/pki/ca-trust
        dest: /etc/pki/ca-trust
        options: O
logging:
    append: false
    file: navigator-output/ansible-navigator.log
  playbook-artifact:
    enable: true
    save-as: navigator-output/{playbook_name}-artifact-{time_stamp}.json
  editor:
    command: codium -g {filename}:{line_number}
    console: false

#!/bin/sh
#
# See section "Store the vault password in an environment variable" at
# https://ansible.readthedocs.io/projects/navigator/faq/#how-can-i-use-a-vault-password-with-ansible-navigator
#
# put your password in an env var, but not in your bash history
# obviously not only set history control, but also remember to actually use a leading space
# after that this scriptlet will echo your password and ansible tooling (-playbook, -vault,
# -navigator, etc) is happy to use this script as vault password source
# Set the environment variable to the location of the file when executing ansible-navigator
#
# use as follows
# user@host $ HISTCONTROL=ignorespace
# user@host $  export ANSIBLE_VAULT_PASSWORD=my_password
# user@host $ ANSIBLE_VAULT_PASSWORD_FILE=.vault_password.sh ansible-navigator run site.yml
echo ${ANSIBLE_VAULT_PASSWORD}