summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-07-14 03:41:06 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:53:10 +0200
commitb715d884782d2d49ec499d3f8fda20e5a7f973cb (patch)
tree5c61194bd26204d22702109ceeb28eee4c9cd973 /roles/common/tasks
parent3a5a4b57c83d9a6b06807315fd2de33852e23257 (diff)
Don't install intel-microcode on Xen guests.
It should be installed on the dom0 instead.
Diffstat (limited to 'roles/common/tasks')
-rw-r--r--roles/common/tasks/main.yml7
1 files changed, 5 insertions, 2 deletions
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index c98af99..caecf9a 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -2,6 +2,10 @@
- include: sysctl.yml tags=sysctl
- include: hosts.yml
- include: apt.yml tags=apt
+- name: Install intel-microcode
+ apt: pkg=intel-microcode
+ when: "ansible_processor[0] | search('^Intel.*') and not (ansible_virtualization_role == 'guest' and ansible_virtualization_type == 'xen')"
+ tags: intel
- include: firewall.yml tags=firewall,iptables
- include: samhain.yml tags=samhain
- include: auditd.yml tags=auditd
@@ -16,8 +20,7 @@
dest=/usr/local/bin/genkeypair.sh
owner=root group=root
mode=0755
- tags:
- - genkey
+ tags: genkey
- include: logging.yml tags=logging
- include: ntp.yml tags=ntp
- include: mail.yml tags=mail,postfix