2 - name: Add LTTng-CI PPA
3 when: ansible_distribution == 'Ubuntu'
5 - name: LTTng-CI PPA | apt key
7 src: efficios_ubuntu_ci.gpg
8 dest: /etc/apt/trusted.gpg.d/efficios_ubuntu_ci.gpg
13 - name: LTTng-CI PPA | apt source
14 ansible.builtin.apt_repository:
15 repo: "deb [signed-by=/etc/apt/trusted.gpg.d/efficios_ubuntu_ci.gpg] http://ppa.launchpad.net/efficios/ci/ubuntu {{ ansible_distribution_release }} main"
17 filename: efficios-ubuntu-ci
19 - name: Update apt cache.
20 apt: update_cache=yes cache_valid_time=86400
22 - name: Ensure common packages are installed.
23 apt: "name={{ common_packages }} state=present"
25 - name: Install unattended upgrades
27 name: 'unattended-upgrades'
28 state: "{{(unattended_upgrades|bool)|ternary('present', 'absent')}}"
30 - name: Enable extra repos for unattended upgrades
32 dest: /etc/apt/apt.conf.d/51unattended_upgrades_extra_repos.conf
33 src: unattended_upgrades_extra_repos.conf.j2
36 - "${distro_id}:${distro_codename}-updates"
37 - "${distro_id}:${distro_codename}-backports"
39 - "LP-PPA-efficios-ci:${distro_codename}"
41 repos: "{{repos_base|union(lookup('vars', 'repos_' + ansible_distribution, default=[]))}}"
43 - name: Enable unattended upgrades
46 dest: /etc/apt/apt.conf.d/20auto-upgrades
47 content: "APT::Periodic::Update-Package-Lists \"1\";\nAPT::Periodic::Unattended-Upgrade \"1\";\n"
48 when: unattended_upgrades | bool
50 path: /etc/apt/apt.conf.d/20auto-upgrades
51 state: "{{(unattended_upgrades|bool)|ternary('file', 'absent')}}"
55 - name: Install microcode for physical hosts
56 when: ansible_virtualization_role == 'host'
58 - name: Install AMD microcode
59 when: "'AuthenticAMD' in ansible_processor"
62 register: amd64_microcode
63 - name: Install Intel microcode
64 when: "'GenuineIntel' in ansible_processor"
67 register: intel_microcode
68 - name: Update initramfs
69 when: amd64_microcode.changed or intel_microcode.changed
70 ansible.builtin.command:
71 argv: ['update-initramfs', '-u', '-k', 'all']
72 - name: Set reboot required
73 when: amd64_microcode.changed or intel_microcode.changed
75 dest: /var/run/reboot-required
76 content: '*** System restart required ***'
80 - name: Install prometheus node exporter for physical hosts
81 when: "'hosts' in group_names"
84 - prometheus-node-exporter
85 - prometheus-node-exporter-collectors
87 - name: Work-around for git hanging during checkouts
88 # @see https://support.efficios.com/issues/1532
89 when: ansible_distribution_release == 'bookworm'
91 - name: Add bookworm-backports pref
93 dest: /etc/apt/preferences.d/bookworm-backports.pref
94 content: "Package: curl libcurl3* libcurl4*\nPin: release n=bookworm-backports\nPin-Priority: 600\n"
95 - name: Enable bookworm backports
96 ansible.builtin.apt_repository:
97 repo: 'deb http://deb.debian.org/debian bookworm-backports main'
98 - ansible.builtin.apt:
100 - name: Use HTTP/1.1 with git HTTP operations
101 community.general.git_config:
102 file: '/etc/gitconfig'