fdio.infra.ansible/roles/kernel/tasks/ubuntu_jammy.yaml

   1 ---
   2 # file: roles/kernel/tasks/ubuntu_jammy.yaml
   3
   4 - name: Get Available Kernel Versions
   5   command: "apt-cache showpkg linux-headers-*"
   6   changed_when: false
   7   register: apt_kernel_list
   8   tags:
   9     - kernel-inst
  10
  11 - name: Get installed packages with APT
  12   command: "dpkg -l"
  13   changed_when: false
  14   register: apt_packages_list
  15   tags:
  16     - kernel-inst
  17
  18 - name: Set target APT kernel version
  19   set_fact:
  20     _kernel: "{{ apt_kernel_list | deb_kernel(
  21                  kernel_version, ansible_kernel) }}"
  22   tags:
  23     - kernel-inst
  24
  25 - name: Disable APT auto upgrade
  26   lineinfile:
  27     path: "/etc/apt/apt.conf.d/20auto-upgrades"
  28     state: "present"
  29     regexp: "APT::Periodic::Unattended-Upgrade \"[0-9]\";"
  30     line: "APT::Periodic::Unattended-Upgrade \"0\";"
  31     create: true
  32     mode: 0644
  33   tags:
  34     - kernel-inst
  35
  36 - name: Ensure Packages Versions
  37   apt:
  38     name: "{{ apt_kernel_list | deb_kernel_pkg(
  39               kernel_version, ansible_kernel, ansible_distribution,
  40               ansible_architecture, item) }}"
  41   loop: "{{ kernel_packages }}"
  42   tags:
  43     - kernel-inst
  44
  45 - name: Ensure Any Other Kernel Packages Are Removed
  46   apt:
  47     name: "{{ apt_packages_list | deb_installed_kernel(
  48               apt_kernel_list, kernel_version, ansible_kernel) }}"
  49     state: absent
  50     purge: true
  51   notify:
  52     - "Reboot Server"
  53   tags:
  54     - kernel-inst
  55
  56 - name: Ensure Any Microcode Is Absent
  57   apt:
  58     name: "{{ absent_packages }}"
  59     state: absent
  60     purge: true
  61   tags:
  62     - kernel-inst