From b715d884782d2d49ec499d3f8fda20e5a7f973cb Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 14 Jul 2014 03:41:06 +0200 Subject: Don't install intel-microcode on Xen guests. It should be installed on the dom0 instead. --- roles/common/tasks/main.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'roles/common/tasks') diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml index c98af99..caecf9a 100644 --- a/roles/common/tasks/main.yml +++ b/roles/common/tasks/main.yml @@ -2,6 +2,10 @@ - include: sysctl.yml tags=sysctl - include: hosts.yml - include: apt.yml tags=apt +- name: Install intel-microcode + apt: pkg=intel-microcode + when: "ansible_processor[0] | search('^Intel.*') and not (ansible_virtualization_role == 'guest' and ansible_virtualization_type == 'xen')" + tags: intel - include: firewall.yml tags=firewall,iptables - include: samhain.yml tags=samhain - include: auditd.yml tags=auditd @@ -16,8 +20,7 @@ dest=/usr/local/bin/genkeypair.sh owner=root group=root mode=0755 - tags: - - genkey + tags: genkey - include: logging.yml tags=logging - include: ntp.yml tags=ntp - include: mail.yml tags=mail,postfix -- cgit v1.2.3