ansible-role-common/tasks/RedHat.yml

---
# tasks file for common role
- include_tasks: networking.yml

- name: Ensure common packages (RHEL)
  yum:
    name: "{{ common_packages }}"
    state: present
    enablerepo: epel
  when: ansible_distribution != 'OracleLinux'
  tags: packages

- name: Ensure common packages (OracleLinux)
  yum:
    name: "{{ common_packages }}"
    state: present
    enablerepo: ol7_developer_EPEL
  when: ansible_distribution == 'OracleLinux'
  tags: packages

- name: Check if SELinux is installed
  stat:
    path: /etc/selinux/config
  register: se
  tags: security

# - name: SELinux Management
#  block:
#    -  name: selinux | Ensure SELinux status
#       selinux:
#        state: disabled
#       register: sestate
#    - name: selinux | Message Output
#      debug:
#        msg: "SELinux {{ sestate.msg }}"
#      when: sestate.changed
#  when: se.stat.exists
#  tags: security

- name: Create admin group
  group: name={{ ADMIN_GROUP }} state=present

- name: Configure yum limit
  lineinfile:
    dest: /etc/yum.conf
    regexp: "installonly_limit="
    line: "installonly_limit=2"
  tags: packages

- name: Ensure Helpers are present
  copy:
    src: "{{ helpers.src }}"
    dest: "{{ helpers.dest }}"
    mode: u+rwx,g+rx,o+rx
  with_items:
    - src: helpers/reload_scsi_devices
      dest: /usr/local/bin/reload_scsi_devices
    - src: helpers/reload_scsi_hosts
      dest: /usr/local/bin/reload_scsi_hosts
  loop_control:
    loop_var: helpers

- name: Ensure Hostname is set
  hostname:
    name: "{{ inventory_hostname }}.{{ domain }}"
  when: ansible_virtualization_type != "docker" and ansible_virtualization_type != "container"

- name: Change root password
  user:
    name: root
    password: "{{ common_root_pwd | password_hash('sha512') }}"
  changed_when: false
  tags: rootpw

- include_tasks: grub.yml
- include_tasks: communication.yml
- include_tasks: motd.yml