diff --git a/ansible.cfg b/ansible.cfg
index 52029917..ed3d88e9 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -9,7 +9,7 @@ log_path                    = ~/.ansible/ansible.log
 inventory                   = ./provision/ansible/inventory
 roles_path                  = ~/.ansible/roles:./provision/ansible/roles
 collections_path            = ~/.ansible/collections
-remote_tmp                  = /tmp/.ansible/tmp
+remote_tmp                  = ~/.ansible/tmp
 local_tmp                   = ~/.ansible/tmp
 # Fact Caching settings
 fact_caching                = jsonfile
diff --git a/provision/ansible/inventory/group_vars/kubernetes/os.yml b/provision/ansible/inventory/group_vars/kubernetes/os.yml
index 3bdcc674..ed7cef53 100644
--- a/provision/ansible/inventory/group_vars/kubernetes/os.yml
+++ b/provision/ansible/inventory/group_vars/kubernetes/os.yml
@@ -18,6 +18,7 @@ packages:
   - nano
   - nvme-cli
   - socat
+  - python3-libselinux
   # TODO(ansible): Might be required for newer Intel CPU generations
   # https://ask.fedoraproject.org/t/intel-graphics-best-practices-and-settings-for-hardware-acceleration/21119
   # - intel-media-driver
diff --git a/provision/ansible/playbooks/cluster-prepare.yml b/provision/ansible/playbooks/cluster-prepare.yml
index 3fc3cd9e..391a7884 100644
--- a/provision/ansible/playbooks/cluster-prepare.yml
+++ b/provision/ansible/playbooks/cluster-prepare.yml
@@ -112,6 +112,7 @@
         - name: System Configuration (2) | Permissive SELinux
           ansible.posix.selinux:
             state: permissive
+            policy: targeted
       notify: Reboot
 
   handlers: